{
  "cves": [
    "CVE-2026-25679",
    "CVE-2026-27137"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1.26.2-1.0.1]\n- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var\n\n[1.26.2-1]\n- Update to Go 1.26.2 (fips-2)\n- Resolves: RHEL-169929\n\n[1.26.1-1]\n- Update to Go 1.26.1\n- Resolves: RHEL-153434\n\n[1.25.7-1]\n- Update to Go 1.25.7 (fips-1)\n- Resolves: RHEL-146452\n\n[1.25.5-1]\n- Update to Go 1.25.5 (fips-1)\n- Resolves: RHEL-139364\n\n[1.25.3-2]\n- Cleanup lib/ ownership\n\n[1.25.3-1]\n- Update to Go 1.25.3\n- Resolves: RHEL-121220\n\n[1.25.1-1]\n- Update to Go 1.25.1\n- Resolves: RHEL-116850\n\n[1.25.0-2]\n- Revert DWARF5 defaults\n- Add elf5 to rpminspect.yaml\n- Related: RHEL-109557\n\n[1.25.0-1]\n- Update to Go 1.25.0\n- Set GOAMD64 to v2 to align with new architecture baselines\n- Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2\n- Resolves: RHEL-109557",
  "id": "ELSA-2026-19181",
  "ovalId": "oval:com.oracle.elsa:def:202619181",
  "source": "oracle_linux",
  "title": "ELSA-2026-19181:  golang security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-19181.html"
}