Red Hat Product Errata RHSA-2026:2218 - Security Advisory
Issued:
2026-02-09
Updated:
2026-02-09

RHSA-2026:2218 - Security Advisory

Synopsis

Important: golang security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for golang is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x

Fixes

  • BZ - 2418462 - CVE-2025-61729 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
x86_64
go-toolset-1.21.13-13.el9_4.x86_64.rpm SHA-256: 0a8508d5ceafb7435356cabbf5ac6ed8ce3b4aceff64a981bc0a3de1d07a9302
golang-1.21.13-13.el9_4.x86_64.rpm SHA-256: d677ba00c48bb5fe3fad01a8f98e76cb23e2a48dc6c5b4a44105e6ccc6f76232
golang-bin-1.21.13-13.el9_4.x86_64.rpm SHA-256: 9f6b92ab1f7bbf379f4790125a9e931fbbc781e46e664f2edfdd6a8cdf442950
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
x86_64
go-toolset-1.21.13-13.el9_4.x86_64.rpm SHA-256: 0a8508d5ceafb7435356cabbf5ac6ed8ce3b4aceff64a981bc0a3de1d07a9302
golang-1.21.13-13.el9_4.x86_64.rpm SHA-256: d677ba00c48bb5fe3fad01a8f98e76cb23e2a48dc6c5b4a44105e6ccc6f76232
golang-bin-1.21.13-13.el9_4.x86_64.rpm SHA-256: 9f6b92ab1f7bbf379f4790125a9e931fbbc781e46e664f2edfdd6a8cdf442950
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
s390x
go-toolset-1.21.13-13.el9_4.s390x.rpm SHA-256: dbda381a97a8ba133154296c25b3f76918526f42e97c72e28cb3ee2502092636
golang-1.21.13-13.el9_4.s390x.rpm SHA-256: 3644916a81304ae580c3abb35c575ca28e3830f9a61500af8af6df598b3bc812
golang-bin-1.21.13-13.el9_4.s390x.rpm SHA-256: 6849a952b9d1cfd1737e68981d83356db7f2b909e39d6e152b0ffb521217e8ca
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
ppc64le
go-toolset-1.21.13-13.el9_4.ppc64le.rpm SHA-256: ac4a6df0725c8b7c0fd0ba3960570533069057adf475eec34437f787b496d6cb
golang-1.21.13-13.el9_4.ppc64le.rpm SHA-256: 263673b92934b84180d3f4f1d71792582a137be6771ef1ef50dc0506476b0ae1
golang-bin-1.21.13-13.el9_4.ppc64le.rpm SHA-256: 91712b3c94cbfe3bb22666c699c7d5d168891889597559bec461b7f889650a78
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
aarch64
go-toolset-1.21.13-13.el9_4.aarch64.rpm SHA-256: 291fbb5400ef72c646f1d9adebd5432ae485f2fb15aad7d81ec052c6cacd2da5
golang-1.21.13-13.el9_4.aarch64.rpm SHA-256: 44077341b1527f8bff7583a12ab2b88696ccf82b418f148b98dd39a94f6a53ac
golang-bin-1.21.13-13.el9_4.aarch64.rpm SHA-256: 8146f37759437f238f6b56d38136726a3826de7c7d79e4500a4ef63c2e34cb53
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
ppc64le
go-toolset-1.21.13-13.el9_4.ppc64le.rpm SHA-256: ac4a6df0725c8b7c0fd0ba3960570533069057adf475eec34437f787b496d6cb
golang-1.21.13-13.el9_4.ppc64le.rpm SHA-256: 263673b92934b84180d3f4f1d71792582a137be6771ef1ef50dc0506476b0ae1
golang-bin-1.21.13-13.el9_4.ppc64le.rpm SHA-256: 91712b3c94cbfe3bb22666c699c7d5d168891889597559bec461b7f889650a78
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
x86_64
go-toolset-1.21.13-13.el9_4.x86_64.rpm SHA-256: 0a8508d5ceafb7435356cabbf5ac6ed8ce3b4aceff64a981bc0a3de1d07a9302
golang-1.21.13-13.el9_4.x86_64.rpm SHA-256: d677ba00c48bb5fe3fad01a8f98e76cb23e2a48dc6c5b4a44105e6ccc6f76232
golang-bin-1.21.13-13.el9_4.x86_64.rpm SHA-256: 9f6b92ab1f7bbf379f4790125a9e931fbbc781e46e664f2edfdd6a8cdf442950
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
aarch64
go-toolset-1.21.13-13.el9_4.aarch64.rpm SHA-256: 291fbb5400ef72c646f1d9adebd5432ae485f2fb15aad7d81ec052c6cacd2da5
golang-1.21.13-13.el9_4.aarch64.rpm SHA-256: 44077341b1527f8bff7583a12ab2b88696ccf82b418f148b98dd39a94f6a53ac
golang-bin-1.21.13-13.el9_4.aarch64.rpm SHA-256: 8146f37759437f238f6b56d38136726a3826de7c7d79e4500a4ef63c2e34cb53
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
s390x
go-toolset-1.21.13-13.el9_4.s390x.rpm SHA-256: dbda381a97a8ba133154296c25b3f76918526f42e97c72e28cb3ee2502092636
golang-1.21.13-13.el9_4.s390x.rpm SHA-256: 3644916a81304ae580c3abb35c575ca28e3830f9a61500af8af6df598b3bc812
golang-bin-1.21.13-13.el9_4.s390x.rpm SHA-256: 6849a952b9d1cfd1737e68981d83356db7f2b909e39d6e152b0ffb521217e8ca
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
x86_64
go-toolset-1.21.13-13.el9_4.x86_64.rpm SHA-256: 0a8508d5ceafb7435356cabbf5ac6ed8ce3b4aceff64a981bc0a3de1d07a9302
golang-1.21.13-13.el9_4.x86_64.rpm SHA-256: d677ba00c48bb5fe3fad01a8f98e76cb23e2a48dc6c5b4a44105e6ccc6f76232
golang-bin-1.21.13-13.el9_4.x86_64.rpm SHA-256: 9f6b92ab1f7bbf379f4790125a9e931fbbc781e46e664f2edfdd6a8cdf442950
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
aarch64
go-toolset-1.21.13-13.el9_4.aarch64.rpm SHA-256: 291fbb5400ef72c646f1d9adebd5432ae485f2fb15aad7d81ec052c6cacd2da5
golang-1.21.13-13.el9_4.aarch64.rpm SHA-256: 44077341b1527f8bff7583a12ab2b88696ccf82b418f148b98dd39a94f6a53ac
golang-bin-1.21.13-13.el9_4.aarch64.rpm SHA-256: 8146f37759437f238f6b56d38136726a3826de7c7d79e4500a4ef63c2e34cb53
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
ppc64le
go-toolset-1.21.13-13.el9_4.ppc64le.rpm SHA-256: ac4a6df0725c8b7c0fd0ba3960570533069057adf475eec34437f787b496d6cb
golang-1.21.13-13.el9_4.ppc64le.rpm SHA-256: 263673b92934b84180d3f4f1d71792582a137be6771ef1ef50dc0506476b0ae1
golang-bin-1.21.13-13.el9_4.ppc64le.rpm SHA-256: 91712b3c94cbfe3bb22666c699c7d5d168891889597559bec461b7f889650a78
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4

SRPM
golang-1.21.13-13.el9_4.src.rpm SHA-256: 1ee4fdf27616200c902ef27cc2abe9b27e287bb6a58310593dde1d8ac0049b88
s390x
go-toolset-1.21.13-13.el9_4.s390x.rpm SHA-256: dbda381a97a8ba133154296c25b3f76918526f42e97c72e28cb3ee2502092636
golang-1.21.13-13.el9_4.s390x.rpm SHA-256: 3644916a81304ae580c3abb35c575ca28e3830f9a61500af8af6df598b3bc812
golang-bin-1.21.13-13.el9_4.s390x.rpm SHA-256: 6849a952b9d1cfd1737e68981d83356db7f2b909e39d6e152b0ffb521217e8ca
golang-docs-1.21.13-13.el9_4.noarch.rpm SHA-256: c65d204154a48f422fc406051c202711c2ae8a82f3532f54c72805018b66692c
golang-misc-1.21.13-13.el9_4.noarch.rpm SHA-256: 2c218630547bbbec3371ec29f9050f91eb5a3ae837bb0b686bb647f27d2a92e7
golang-src-1.21.13-13.el9_4.noarch.rpm SHA-256: 52ebbc93140baddb2e4e99bcbd2a196cd59700d261acd2ba7d41fa97343c5cf8
golang-tests-1.21.13-13.el9_4.noarch.rpm SHA-256: dacbb2057db8d5eb3207b412c53146435ac24b328f753c0d424da355bd46437d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.