Описание
Moderate: golang security, bug fix, and enhancement update
The golang packages provide the Go programming language compiler.
Security Fix(es):
- net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)
Bug Fix(es) and Enhancement(s):
- Update Go to version 1.26.4+1 [rhel-10.2.z] (JIRA:Rocky Linux-183347)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Затронутые продукты
Rocky Linux 10
Связанные CVE
Исправления
- Red Hat - 2484205
Связанные уязвимости
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.
Arbitrary inputs are included in errors without any escaping in net/textproto
When returning errors, functions in the net/textproto package would in ...