Back Linuxsecurity

Oracle Linux 10 Golang Important Bug Fixes Advisory ELSA-2026-60306

Linuxsecurity •LinuxSecurity Advisories • September 1, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

[1.26.7-1.0.1] - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var [1.26.7-1] - Update to Go 1.26.7 (fips-1)

go-toolset-1.26.7-1.0.1.el10_2.x86_64.rpm golang-1.26.7-1.0.1.el10_2.x86_64.rpm golang-bin-1.26.7-1.0.1.el10_2.x86_64.rpm golang-docs-1.26.7-1.0.1.el10_2.noarch.rpm golang-misc-1.26.7-1.0.1.el10_2.noarch.rpm golang-race-1.26.7-1.0.1.el10_2.x86_64.rpm golang-src-1.26.7-1.0.1.el10_2.noarch.rpm golang-tests-1.26.7-1.0.1.el10_2.noarch.rpm

go-toolset-1.26.7-1.0.1.el10_2.aarch64.rpm golang-1.26.7-1.0.1.el10_2.aarch64.rpm golang-bin-1.26.7-1.0.1.el10_2.aarch64.rpm golang-docs-1.26.7-1.0.1.el10_2.noarch.rpm golang-misc-1.26.7-1.0.1.el10_2.noarch.rpm golang-race-1.26.7-1.0.1.el10_2.aarch64.rpm golang-src-1.26.7-1.0.1.el10_2.noarch.rpm golang-tests-1.26.7-1.0.1.el10_2.noarch.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux 10 Vulnerabilities Prompt Urgent Patching Recent advisories for Oracle Linux 10 highlight critical vulnerabilities in Golang and associated tools. The vulnerabilities, including CVE-2026-33818 and CVE-2026-42504, affect systems using go-fdo-server and ipp-usb. Patches have been released to address these issues, with specific updates for the Golang version 1.26.7. The vulnerabilities could potentially lead to unauthorized access or system compromise if not addressed. Administrators are urged to apply the patches promptly to mitigate risks. The advisories emphasize the importance of keeping systems updated to prevent exploitation. The related CVEs were published between April and August 2026, indicating a range of potential impacts on affected systems. 4 sources 61

Extracted Entities

CVEs (6)

CVE-2026-33818 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862

Platforms (1)

Linux