RockyLinux 10 : go-fdo-server (RLSA-2026:19137)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19137 advisory. github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability CVE-2026-33816 crypto/tls: golang: Go crypto/tls: Denial of Service via...

CVE-2026-33815

A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2026-33815

A memory-safety vulnerability in the Go PostgreSQL driver/toolkit github.com/jackc/pgx/v5 is described across multiple sources. Several references (including OSV advisories and attacker-trusted feeds) note that pgx prior to v5.9.0 contains the issue, implying that versions 5.9.0+ or newer mitigat...