- Issued:
- 2026-01-21
- Updated:
- 2026-01-21
RHSA-2026:0921 - Security Advisory
Synopsis
Important: go-toolset:rhel8 security update
Type/Severity
Security Advisory: Important
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.
Security Fix(es):
- crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
Affected Products
- Red Hat Enterprise Linux for x86_64 8 x86_64
- Red Hat Enterprise Linux for IBM z Systems 8 s390x
- Red Hat Enterprise Linux for Power, little endian 8 ppc64le
- Red Hat Enterprise Linux for ARM 64 8 aarch64
Fixes
- BZ - 2418462 - CVE-2025-61729 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate
CVEs
Red Hat Enterprise Linux for x86_64 8
| SRPM | |
|---|---|
| delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src.rpm | SHA-256: 05d97449257811036f042a1a57346c5f2a49c6e8d6e0a5e435c0e75be8b32b75 |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.src.rpm | SHA-256: 368319761718d43f6d94504da2ff3c82b18bff722d895d3a506211a8e04fbf16 |
| x86_64 | |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.x86_64.rpm | SHA-256: b6b2ef0b353939e1e952e735634c35b3763c2cb081514ffacaee26f7f493c11b |
| delve-debuginfo-1.25.2-1.module+el8.10.0+23746+9db33b5e.x86_64.rpm | SHA-256: 74fc496367fed0e4c776cda386fb41c857b1d1e456db90b0ff18f98609ac0201 |
| delve-debugsource-1.25.2-1.module+el8.10.0+23746+9db33b5e.x86_64.rpm | SHA-256: 2db01636a46e9fc9fa709596d7125ae76df1423bce157347ae5678c46a6d116e |
| go-toolset-1.25.5-1.module+el8.10.0+23901+9d60aaf1.x86_64.rpm | SHA-256: f91f2b54f172fc034a1480523a556bb71e8d98bd19c618fff776ab0d8e3f361a |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.x86_64.rpm | SHA-256: 45342cfae9731c43f2ea6e264561f47e8ba9e97eb9346f6294cb7e9d35f8adff |
| golang-bin-1.25.5-1.module+el8.10.0+23901+9d60aaf1.x86_64.rpm | SHA-256: c159bc13e486651c84d8bdb63ca41d50d1dac19473cf0a082f97b52c92315ce2 |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-race-1.25.5-1.module+el8.10.0+23901+9d60aaf1.x86_64.rpm | SHA-256: abd25331754f3ff7ca7a0a01fe9ea37307043c1683d882ef788b79492a8fea21 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
Red Hat Enterprise Linux for IBM z Systems 8
| SRPM | |
|---|---|
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.src.rpm | SHA-256: 368319761718d43f6d94504da2ff3c82b18bff722d895d3a506211a8e04fbf16 |
| s390x | |
| go-toolset-1.25.5-1.module+el8.10.0+23901+9d60aaf1.s390x.rpm | SHA-256: 0df62b17b06f3c4d68590ff92f8fc8edd38fc83c73c94b4f26d061d795b3cc18 |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.s390x.rpm | SHA-256: 7a97cca01c0c5910e9942a94af5304f165c4f90ffce313eca8615c3b95562032 |
| golang-bin-1.25.5-1.module+el8.10.0+23901+9d60aaf1.s390x.rpm | SHA-256: 4a8c83650da4e446e22b6eede58db2e5d54b391c6e3111b9e7ddda0eb3c9f75b |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-race-1.25.5-1.module+el8.10.0+23901+9d60aaf1.s390x.rpm | SHA-256: 58fb3e29877e3db04551d35a4da8f0f2eed189722ce2cb8fd23d7b5ddd94ed6d |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
Red Hat Enterprise Linux for Power, little endian 8
| SRPM | |
|---|---|
| delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src.rpm | SHA-256: 05d97449257811036f042a1a57346c5f2a49c6e8d6e0a5e435c0e75be8b32b75 |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.src.rpm | SHA-256: 368319761718d43f6d94504da2ff3c82b18bff722d895d3a506211a8e04fbf16 |
| ppc64le | |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le.rpm | SHA-256: 4ccc83498e7e328df35b458df5582bf981ff5c41829a9b4ca0303f0affe3e78c |
| delve-debuginfo-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le.rpm | SHA-256: 8c0f38a0da3566bc697bdae5a748acfc91a90fbbe8c0159584a608314063c522 |
| delve-debugsource-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le.rpm | SHA-256: df5b8c9f8a4416a3cea754f32a3a79852ca78ad2632e8274cfced3524632aee9 |
| go-toolset-1.25.5-1.module+el8.10.0+23901+9d60aaf1.ppc64le.rpm | SHA-256: 432cb4babc8fc48be4032fbe19505acce9c3f44c6b4ddf4b40c878f28bb27e5c |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.ppc64le.rpm | SHA-256: 3b809fa1e5b1557ee560b68eef80059f8a13883f6e8a871abddbd7a2e06c02ff |
| golang-bin-1.25.5-1.module+el8.10.0+23901+9d60aaf1.ppc64le.rpm | SHA-256: 53cca58c1ba20f2728d42be6f1ee8e6244cbc67f060e51f995e22f251513360d |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-race-1.25.5-1.module+el8.10.0+23901+9d60aaf1.ppc64le.rpm | SHA-256: 60dfdd8cd3e4cdb30dd55cc8e8c5b4d87ed2e05431e9b1ae250cb7002c1b3447 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
Red Hat Enterprise Linux for ARM 64 8
| SRPM | |
|---|---|
| delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src.rpm | SHA-256: 05d97449257811036f042a1a57346c5f2a49c6e8d6e0a5e435c0e75be8b32b75 |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.src.rpm | SHA-256: 368319761718d43f6d94504da2ff3c82b18bff722d895d3a506211a8e04fbf16 |
| aarch64 | |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64.rpm | SHA-256: 8486ec008bec4081eda0073f5e5bfd7fcef3b43362f30e351ebc2bc57aab7d05 |
| delve-debuginfo-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64.rpm | SHA-256: 9dec1a7b8064207f260584a28ebec32c564760a5a2110ba9c0d94d7ba35d0e7d |
| delve-debugsource-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64.rpm | SHA-256: 6724051102deba337e466a96003ee4feb92a850695e7c2bd3eae9c789d1272d5 |
| go-toolset-1.25.5-1.module+el8.10.0+23901+9d60aaf1.aarch64.rpm | SHA-256: 4e4383bb7cd29e940c3d8bb144f5b7620e37dd13bd5ca35243ca36f7fe2f3fca |
| golang-1.25.5-1.module+el8.10.0+23901+9d60aaf1.aarch64.rpm | SHA-256: 91ad9b1975ddb93100a3f34201a0d41828cbccb5925368d7a1929908f05dfac1 |
| golang-bin-1.25.5-1.module+el8.10.0+23901+9d60aaf1.aarch64.rpm | SHA-256: 04413c19802d610c3800889dea04799df3ee498fee2aca16658c83700818250b |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-race-1.25.5-1.module+el8.10.0+23901+9d60aaf1.aarch64.rpm | SHA-256: 04e7f713e9c7d5b097686e6206cfdc0610e710a3ef5e36b7e1c5127a1156a1d3 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
| golang-docs-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 52d9d7390def2759b576792fae007c8ea6f4324819bbdc1dd583e3575bcb69b0 |
| golang-misc-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: c63719db9200f98221723d5c29bd889784d369b4ed1c744ae74f7b8e5b980295 |
| golang-src-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 5ba613d5a2d19a785c97ce822a6448bdce50a0b173f591c3c2f0f37709a321df |
| golang-tests-1.25.5-1.module+el8.10.0+23901+9d60aaf1.noarch.rpm | SHA-256: 549ff692346f76d071c199473c92346063c0de989252a7d17aff6f4476c62bfc |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.