Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-29981

Опубликовано: 26 июн. 2026
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2026-29981: golang security, bug fix, and enhancement update (MODERATE)

[1.26.4-1.0.1]

  • EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var

[1.26.4-1]

  • Update to Go 1.26.4 (fips-1)
  • Resolves: RHEL-183349

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

go-toolset

1.26.4-1.0.1.el9_8

golang

1.26.4-1.0.1.el9_8

golang-bin

1.26.4-1.0.1.el9_8

golang-docs

1.26.4-1.0.1.el9_8

golang-misc

1.26.4-1.0.1.el9_8

golang-race

1.26.4-1.0.1.el9_8

golang-src

1.26.4-1.0.1.el9_8

golang-tests

1.26.4-1.0.1.el9_8

Oracle Linux x86_64

go-toolset

1.26.4-1.0.1.el9_8

golang

1.26.4-1.0.1.el9_8

golang-bin

1.26.4-1.0.1.el9_8

golang-docs

1.26.4-1.0.1.el9_8

golang-misc

1.26.4-1.0.1.el9_8

golang-race

1.26.4-1.0.1.el9_8

golang-src

1.26.4-1.0.1.el9_8

golang-tests

1.26.4-1.0.1.el9_8

Связанные CVE

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

CVSS3: 5.3
redhat
около 2 месяцев назад

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

CVSS3: 5.3
nvd
около 2 месяцев назад

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

CVSS3: 5.3
msrc
около 2 месяцев назад

Arbitrary inputs are included in errors without any escaping in net/textproto

CVSS3: 5.3
debian
около 2 месяцев назад

When returning errors, functions in the net/textproto package would in ...