RHSA-2026:5944

csafDEsuse_csaf

security update for golang

Advisory ansehen veröffentlicht 2026-03-26

security update for golang

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-25679US——
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVE-2025-61731US——
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (16)

  • Behobengo-toolset-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengo-toolset-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-bin-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-bin-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-docs-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-docs-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-misc-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-misc-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-race-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-race-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-src-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-src-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-tests-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengolang-tests-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan