High ELSA-2026-8841 1 CVE

Important: go-rpm-macros security update (Oracle Linux 9)

Published Apr 19, 2026 · Updated Apr 19, 2026

Ecosystem: Oracle Linux

Summary

[3.6.0-14]
- Rebuild with latest Go
- Resolves: RHEL-158726

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	go-filesystem	0:3.6.0-14.el9_7
Oracle Linux · 9	go-rpm-macros	0:3.6.0-14.el9_7
Oracle Linux · 9	go-rpm-templates	0:3.6.0-14.el9_7
Oracle Linux · 9	go-srpm-macros	0:3.6.0-14.el9_7

Vulnerabilities 1

High 7.5

CVE-2026-25679

Incorrect parsing of IPv6 host literals in net/url

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Go standard library net/url langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go

Mar 6, 2026