Important: golang security update

Important: golang security update

Important: go-toolset:rhel8 security update

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

ELSA-2026-2323: git-lfs security update (IMPORTANT)

ELSA-2026-2124: osbuild-composer security update (IMPORTANT)

ELSA-2026-1715: golang-github-openprinting-ipp-usb security update (IMPORTANT)

ELSA-2026-1518: grafana-pcp security update (IMPORTANT)

ELSA-2026-1344: grafana security update (IMPORTANT)

ELSA-2026-0923: golang security update (IMPORTANT)

ELSA-2026-0922: golang security update (IMPORTANT)

ELSA-2026-0921: go-toolset:ol8 security update (IMPORTANT)

Уязвимость функции HostnameError.Error() пакета crypto/x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании

Moderate: delve security update

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.

ELSA-2026-3842: delve security update (MODERATE)

Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Security update for go1.24

Security update for go1.25

Уязвимость mimir