Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2818-1

Опубликовано: 09 июл. 2026
Источник: suse-cvrf

Описание

Security update for go1.26

This update for go1.26 fixes the following issues

  • Update to version go1.26.5 (bsc#1255111)
  • CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014).
  • CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).

Список пакетов

Container bci/golang:latest
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Server 15 SP4-LTSS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Server 15 SP5-LTSS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Server 15 SP6-LTSS
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
go1.26-1.26.5-150000.1.18.1
go1.26-doc-1.26.5-150000.1.18.1
go1.26-race-1.26.5-150000.1.18.1

Ссылки

Описание

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

Затронутые продукты
Container bci/golang:latest:go1.26-1.26.5-150000.1.18.1
Container bci/golang:latest:go1.26-doc-1.26.5-150000.1.18.1
Container bci/golang:latest:go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.5-150000.1.18.1
Ссылки

Описание

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

Затронутые продукты
Container bci/golang:latest:go1.26-1.26.5-150000.1.18.1
Container bci/golang:latest:go1.26-doc-1.26.5-150000.1.18.1
Container bci/golang:latest:go1.26-race-1.26.5-150000.1.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.5-150000.1.18.1
Ссылки
Уязвимость SUSE-SU-2026:2818-1