399 matches found
SUSE-SU-2026:1487-1 Security update for runc
This update for runc rebuilds it against the current go 1.25 security release...
SUSE-SU-2026:21356-1 Security update for go1.26
This update for go1.26 fixes the following issues: - Update to version go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...
OPENSUSE-SU-2026:20496-1 Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.8 bsc1244485: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. - CVE-2026-27142: html/template: URLs in meta content attribute actio...
SUSE SLED15 / SLES15 Security Update : go1.26 (SUSE-SU-2026:1320-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1320-1 advisory. - Update to go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG...
OPENSUSE-SU-2026:20537-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 bsc1255111, jscSLE-18320: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints bsc1259266. - CVE-2026-27138:...
SUSE-SU-2026:1321-1 Security update for go1.25
This update for go1.25 fixes the following issues: - Update to go1.25.9 bsc1244485. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144: cmd/compile:...
Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.2 bsc1255111. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile: no-op...
SUSE-SU-2026:1320-1 Security update for go1.26
This update for go1.26 fixes the following issues: - Update to go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144: cmd/compile:...
CLSA-2026-1776070934 grafana: Fix of CVE-2026-25679
rebuild with golang 1.25.7-els2 which fixes the following CVEs - - CVE-2026-25679: fix insufficient validation of host/authority in net/url.Parse...
OPENSUSE-SU-2026:10525-1 go1.26-1.26.2-1.1 on GA media
These are all security issues fixed in the go1.26-1.26.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10514-1 go1.25-1.25.9-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.9-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2026:1098-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1098-1 advisory. This update for cosign rebuilds it against the current go 1.25 security release. Tenable has extracted th...
Oracle Linux 10 : golang (ELSA-2026-5941)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5941 advisory. 1.25.8-1 - Update to Go 1.25.8 fips-1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...
Oracle Linux 9 : golang (ELSA-2026-5942)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5942 advisory. 1.25.8-2 - Update to Go 1.25.8 fips-1 - Resolves: RHEL-157451 Tenable has extracted the preceding description block directly from the Oracle Linux...
golang security update
1.25.8-1 - Update to Go 1.25.8 fips-1...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.25-openssl (SUSE-SU-2026:0977-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0977-1 advisory. Update to go 1.25.8 bsc1244485, jscSLE-18320: - CVE-2025-61732: cmd/cgo: discrepancy between Go...
SUSE SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:0947-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0947-1 advisory. Update to go 1.25.8 bsc1244485, jscSLE-18320: - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows fo...
SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:0909-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0909-1 advisory. This update for container-suseconnect rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding...
PT-2026-26466
Name of the Vulnerable Software and Affected Versions Go MCP SDK versions prior to 1.4.1 Description The Go MCP SDK’s Streamable HTTP transport was susceptible to accepting browser-generated cross-site POST requests without validating the Origin header or requiring Content-Type: application/json...