ALT-PU-2026-18336

Критический

ALT-PU-2026-18336: package golang update to version 1.27.2-alt1

Источник

errata.altlinux.org

Дата публикации

02.11.2026

Дата обновления

02.11.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades golang to version 1.27.2-alt1.

Устраненные уязвимости15

CVE-2026-56857

Критический 9.8

Дата публикации: 08.10.2026

CWE-1386

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2026-56857 https://nvd.nist.gov/vuln/detail/CVE-2026-56857

Ссылки1

ALT-PU-2026-18336 https://errata.altlinux.org/ALT-PU-2026-18336

Связанные уязвимости

openSUSE-SU-2026:22093-1

suse-cvrf

27 дней назад

Security update for go1.27

SUSE-SU-2026:4625-1

suse-cvrf

28 дней назад

Security update for go1.27

SUSE-SU-2026:4867-1

suse-cvrf

18 дней назад

Security update for go1.26-openssl

SUSE-SU-2026:4866-1

suse-cvrf

18 дней назад

Security update for go1.26-openssl

ALT-PU-2026-20873

CVSS3: 9.8

altlinux

4 дня назад

ALT-PU-2026-20873: package `mimir` update to version 3.2.3-alt1