{"cves":["CVE-2026-25679","CVE-2026-27137"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1.26.2-1.0.1]\n- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var\n\n[1.26.2-1]\n- Update to Go 1.26.2 (fips-2)\n- Resolves: RHEL-169929\n\n[1.26.1-1]\n- Update to Go 1.26.1\n- Resolves: RHEL-153434\n\n[1.25.7-1]\n- Update to Go 1.25.7 (fips-1)\n- Resolves: RHEL-146452\n\n[1.25.5-1]\n- Update to Go 1.25.5 (fips-1)\n- Resolves: RHEL-139364\n\n[1.25.3-2]\n- Cleanup lib/ ownership\n\n[1.25.3-1]\n- Update to Go 1.25.3\n- Resolves: RHEL-121220\n\n[1.25.1-1]\n- Update to Go 1.25.1\n- Resolves: RHEL-116850\n\n[1.25.0-2]\n- Revert DWARF5 defaults\n- Add elf5 to rpminspect.yaml\n- Related: RHEL-109557\n\n[1.25.0-1]\n- Update to Go 1.25.0\n- Set GOAMD64 to v2 to align with new architecture baselines\n- Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2\n- Resolves: RHEL-109557","id":"ELSA-2026-19181","ovalId":"oval:com.oracle.elsa:def:202619181","source":"oracle_linux","title":"ELSA-2026-19181:  golang security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-19181.html"}