Important: golang security, bug fix, and enhancement update

🗓️ 09 Jul 2026 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 30 Views

Golang security fixes for punycode vulnerability and root symlink traversal, plus Go 1.26.5+1 update.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in net	2 Jul 202612:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 2 of 2)	7 Jul 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	23 Sep 202614:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Liberty Operator is affected by multiple vulnerabilities	24 Jun 202616:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	8 Sep 202618:31	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance	8 Sep 202617:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506	3 Aug 202608:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	23 Jun 202603:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	21 Aug 202608:20	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	9	noarch	golang-misc	1.26.5-1.el9_8	golang-misc-1.26.5-1.el9_8.noarch.rpm
almalinux	9	noarch	golang-src	1.26.5-1.el9_8	golang-src-1.26.5-1.el9_8.noarch.rpm
almalinux	9	noarch	golang-tests	1.26.5-1.el9_8	golang-tests-1.26.5-1.el9_8.noarch.rpm
almalinux	9	noarch	golang-docs	1.26.5-1.el9_8	golang-docs-1.26.5-1.el9_8.noarch.rpm
almalinux	9	aarch64	golang-race	1.26.5-1.el9_8	golang-race-1.26.5-1.el9_8.aarch64.rpm
almalinux	9	aarch64	go-toolset	1.26.5-1.el9_8	go-toolset-1.26.5-1.el9_8.aarch64.rpm
almalinux	9	aarch64	golang	1.26.5-1.el9_8	golang-1.26.5-1.el9_8.aarch64.rpm
almalinux	9	aarch64	golang-bin	1.26.5-1.el9_8	golang-bin-1.26.5-1.el9_8.aarch64.rpm
almalinux	9	s390x	golang-race	1.26.5-1.el9_8	golang-race-1.26.5-1.el9_8.s390x.rpm
almalinux	9	s390x	golang	1.26.5-1.el9_8	golang-1.26.5-1.el9_8.s390x.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:37435
access	www.access.redhat.com/security/cve/CVE-2026-39821
access	www.access.redhat.com/security/cve/CVE-2026-39822
bugzilla	www.bugzilla.redhat.com/2480756
errata	www.errata.almalinux.org/9/ALSA-2026-37435.html
redhat	www.redhat.com/security/data/cve/CVE-2026-42505.html

07 Aug 2026 12:56Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.6

EPSS0.00692

SSVC

go language security punycode vulnerability directory traversal vulnerability root symlink vulnerability go update 1.26.5