Red Hat Product Errata RHSA-2026:3468 - Security Advisory
Issued:
2026-03-02
Updated:
2026-03-02

RHSA-2026:3468 - Security Advisory

Synopsis

Important: go-toolset:rhel8 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  • cmd/cgo: Potential code smuggling via doc comments in cmd/cgo (CVE-2025-61732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Fixes

  • BZ - 2434432 - CVE-2025-61726 golang: net/url: Memory exhaustion in query parameter parsing in net/url
  • BZ - 2437016 - CVE-2025-61732 cmd/cgo: Potential code smuggling via doc comments in cmd/cgo

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
delve-1.3.2-3.module+el8.2.0+5581+896cb53e.src.rpm SHA-256: 61998a0b9b9cb0240fbd0ea9048c1c8be5cce3848ba7e057fdacd351398b4957
go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.src.rpm SHA-256: 91ee586b3443d0d786f4b894c45c18c0f287d0447c9e0a3a2b64a69292564179
golang-1.13.15-14.module+el8.2.0+24036+e0ad874f.src.rpm SHA-256: e0eb69a39d4645fdde067ccc958fd82f19d70581643e1bdb4df7b184291d8311
x86_64
delve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm SHA-256: b0709ae53731835043e0eab5157240aaefb2536ff3fb020501e6b0f688890279
delve-debuginfo-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm SHA-256: 51e2818ff6ed3b0513f1f1e1c99eaa89608445b0250274c6c2b5556f9a73a699
delve-debugsource-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64.rpm SHA-256: e948d3a2dd0f5154872b401e74629365fa6a482f13ef103578a13078a2136bff
go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.x86_64.rpm SHA-256: 008476b28d4c5cf1683b9206940852d669a53be1022ac61f8dcfb1dc00b2af3f
golang-1.13.15-14.module+el8.2.0+24036+e0ad874f.x86_64.rpm SHA-256: cea92a2482ffc3176b07fb819a8ed35354959571fdebcda7e98b4d04c342039d
golang-bin-1.13.15-14.module+el8.2.0+24036+e0ad874f.x86_64.rpm SHA-256: 4fd2e4455387c8a0fec50e2219766048f8bee0f3e34087ee94bcd468420f17be
golang-docs-1.13.15-14.module+el8.2.0+24036+e0ad874f.noarch.rpm SHA-256: bd3c842caa0cf4d462559619000025d77eab5ae1f26e6f11b8f97cfd289aea8b
golang-misc-1.13.15-14.module+el8.2.0+24036+e0ad874f.noarch.rpm SHA-256: 496cd081dc8058f8250de5c71e1c5ad4c87e3de01f5d07252b883a1cd29d62cd
golang-race-1.13.15-14.module+el8.2.0+24036+e0ad874f.x86_64.rpm SHA-256: b0ea34fe2ba802c555a959a264828ab19eec1737d47f3d29d4c22da3e917eff1
golang-src-1.13.15-14.module+el8.2.0+24036+e0ad874f.noarch.rpm SHA-256: 091ecbc2155f08105ee0271d9c00a0564d558ace0104a135a64ee0692d1221f7
golang-tests-1.13.15-14.module+el8.2.0+24036+e0ad874f.noarch.rpm SHA-256: e1f7d7f4710e240a82aae94fb8dfaf1c3dabc36e4681ad90ed1b043e9b841e23

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.