Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-32282 BIT-golang-2026-32282EUVD-2026-20012GO-2026-4864

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

Published Apr 8, 2026 · Updated Apr 13, 2026 · Assigned by Go

Vendor: Go standard library Product: internal/syscall/unix Package: aactl Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: cert-manager-1.20 Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-controller-1.20 Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: chezmoi Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cilium-cli Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: coredns-1.13 Package: dask-gateway-server Package: dogstatsd-7.72 Package: dogstatsd-7.73 Package: external-secrets-operator-1.1 Package: falco-no-driver Package: flux-2.8 Package: fscrypt Package: fuse-overlayfs-snapshotter Package: gitaly-18.6 Package: gitaly-18.7 Package: gitaly-backup-18.6 Package: gitaly-backup-18.7 Package: gitaly-init-cgroups-18.6 Package: gitaly-init-cgroups-18.7 Package: gitlab-agent-18.6 Package: gitlab-agent-18.7 Package: gitlab-kas-18.6 Package: gitlab-kas-18.7 Package: gitlab-pages-18.6 Package: gitlab-pages-18.7 Package: go Package: go-1.24 Package: go-1.24-asm Package: go-1.24-covdata Package: go-1.24-cover Package: go-1.24-nm Package: go-1.24-objdump Package: go-1.24-test2json Package: go-1.26 Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: gpu-feature-discovery Package: helm-3 Package: hubble Package: ingress-nginx-controller-1.12 Package: k3d Package: kaf Package: kine Package: kots Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-fluentd-operator Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubectl-1.31 Package: kubectl-1.32 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubelet-1.34 Package: kubelet-1.35 Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-dashboard Package: kubescape Package: kuma-coredns-1.13 Package: kyverno-1.17 Package: kyverno-background-controller-1.17 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cli-1.17 Package: kyverno-init-container-1.17 Package: kyverno-readiness-checker-1.17 Package: kyverno-reports-controller-1.17 Package: libnvidia-container Package: mattermost-11.1 Package: mps-control-daemon Package: nerdctl Package: newrelic-fluent-bit-output Package: nvidia-container-toolkit-nvidia-container-runtime Package: nvidia-container-toolkit-nvidia-container-runtime-cdi Package: nvidia-container-toolkit-nvidia-container-runtime-legacy Package: nvidia-container-toolkit-nvidia-ctk Package: nvidia-container-toolkit-nvidia-ctk-installer Package: nvidia-device-plugin Package: opentelemetry-collector Package: osv-scanner Package: prometheus-3.10 Package: prometheus-3.8 Package: prometheus-3.9 Package: prometheus-admission-webhook Package: prometheus-config-reloader Package: prometheus-operator Package: rclone Package: redka Package: runc Package: snyk-cli Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: stdlib Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.

Affected products

VendorProductAffectedFixed
Go standard library internal/syscall/unix < 1.25.9, 1.26.0-0 – < 1.26.2 1.25.9

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.2-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 +1 No fix yet —
Ubuntu 25.10 golang-1.23 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +4 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +7 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 git-lfs 3.7.1-4.el10_2 RHSA-2026:19133
RHEL 10 go-fdo-client 1.0.0-4.el10_2 RHSA-2026:22141
RHEL 10 go-fdo-server +3 1.0.1-2.el10_2 RHSA-2026:22141
RHEL 10 golang +7 1.25.9-3.el10_1 RHSA-2026:10217
RHEL 10 grafana +1 10.2.6-25.el10_1 RHSA-2026:19134, RHSA-2026:11712
RHEL 10 grafana-pcp 5.3.0-5.el10_2 RHSA-2026:19136
RHEL 10 image-builder 52.1-1.el10_2 RHSA-2026:22937
RHEL 10 ipp-usb 0.9.27-7.el10_2 RHSA-2026:19144
RHEL 10 opentelemetry-collector 0.144.0-2.el10_2 RHSA-2026:19135
RHEL 10 osbuild-composer +2 165.1-2.el10_2 RHSA-2026:22450
RHEL 10 rhc 1:0.3.8-4.el10_2 RHSA-2026:19156
RHEL 10 rhc-worker-playbook 0.2.3-5.el10_1 RHSA-2026:19132, RHSA-2026:11863
RHEL 10 yggdrasil +1 0.4.8-5.el10_1 RHSA-2026:24716, RHSA-2026:17075
RHEL 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2 RHSA-2026:25999
RHEL 9 git-lfs 3.6.1-8.el9_7.1 RHSA-2026:19350, RHSA-2026:14200
RHEL 9 golang +7 1.25.9-1.el9_7 RHSA-2026:10219
RHEL 9 grafana +1 10.2.6-21.el9_7 RHSA-2026:19352, RHSA-2026:11711
RHEL 9 grafana-pcp 5.1.1-14.el9_7 RHSA-2026:19351, RHSA-2026:11704
RHEL 9 image-builder 52.1-1.el9_8 RHSA-2026:23228
RHEL 9 opentelemetry-collector 0.144.0-2.el9_8 RHSA-2026:19353
RHEL 9 osbuild-composer +2 165.1-2.el9_8 RHSA-2026:22714
RHEL 9 rhc +1 1:0.2.7-6.el9_8 RHSA-2026:19369
RHEL 8 delve 1.25.2-1.module+el8.10.0+23746+9db33b5e RHSA-2026:10704
RHEL 8 git-lfs 3.4.1-10.el8_10 RHSA-2026:16875
RHEL 8 golang +7 1.25.9-1.module+el8.10.0+24226+c418b32c RHSA-2026:10704
RHEL 8 grafana +1 9.2.10-30.el8_10 RHSA-2026:11507
RHEL 8 grafana-pcp 5.1.1-14.el8_10 RHSA-2026:11514
RHEL 8 osbuild-composer +2 101.5-1.el8_10 RHSA-2026:48790
RHEL 8 rhc 1:0.2.5-7.el8_10 RHSA-2026:15980
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Utils 6 foreman +1 3.14.0.17-1.el9sat RHSA-2026:34368, RHSA-2026:34366, RHSA-2026:34365
Red Hat Satellite Capsule 6 dynflow-utils 1.6.3-1.1.el8sat RHSA-2026:34366, RHSA-2026:28385, RHSA-2026:27076
Red Hat Satellite Capsule 6 foreman +2 3.14.0.17-1.el9sat RHSA-2026:34368, RHSA-2026:34366, RHSA-2026:34365
Red Hat Satellite Capsule 6 python-pillow +1 12.2.0-1.el8pc RHSA-2026:34366, RHSA-2026:27076
Red Hat Satellite Capsule 6 python3.12-pillow 12.1.1-1.el9pc RHSA-2026:34368, RHSA-2026:34365, RHSA-2026:28385
Red Hat Satellite Capsule 6 python3.12-pyjwt +1 2.13.0-1.el9pc RHSA-2026:34365
Red Hat Satellite 6 candlepin +1 4.6.6-1.el9sat RHSA-2026:34365, RHSA-2026:28385
Red Hat Satellite 6 dynflow-utils 1.6.3-1.1.el8sat RHSA-2026:34366, RHSA-2026:28385, RHSA-2026:27076
Red Hat Satellite 6 foreman +14 3.14.0.17-1.el9sat RHSA-2026:34368, RHSA-2026:34366, RHSA-2026:34365
Red Hat Satellite 6 python-pillow +1 12.2.0-1.el8pc RHSA-2026:34366, RHSA-2026:27076
Red Hat Satellite 6 python3.12-pillow 12.1.1-1.el9pc RHSA-2026:34368, RHSA-2026:34365, RHSA-2026:28385
Red Hat Satellite 6 python3.12-pyjwt +1 2.13.0-1.el9pc RHSA-2026:34365
Red Hat Satellite 6 rubygem-katello 4.20.0.4-1.el9sat RHSA-2026:22326
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.0.3-5.el8sat RHSA-2026:34368, RHSA-2026:34366, RHSA-2026:34365
RHEL 10.0 EUS git-lfs 3.6.1-2.el10_0.4 RHSA-2026:19715
RHEL 10.0 EUS golang +7 1.25.9-1.el10_0 RHSA-2026:16024
RHEL 10.0 EUS grafana +1 10.2.6-24.el10_0 RHSA-2026:18032
RHEL 10.0 EUS grafana-pcp 5.2.2-6.el10_0 RHSA-2026:18027
RHEL 10.0 EUS gvisor-tap-vsock +1 6:0.8.5-2.el10_0.1 RHSA-2026:17084
RHEL 10.0 EUS ipp-usb +1 0.9.27-3.el10_0.4 RHSA-2026:19550
RHEL 10.0 EUS opentelemetry-collector 0.144.0-2.el10_0 RHSA-2026:19719
RHEL 10.0 EUS osbuild-composer +2 134.1-7.el10_0 RHSA-2026:19750
RHEL 10.0 EUS rhc 1:0.3.2-4.el10_0 RHSA-2026:22713
RHEL 10.0 EUS rhc-worker-playbook 0.2.3-5.el10_0 RHSA-2026:19714
RHEL 10.0 EUS yggdrasil +1 0.4.7-4.el10_0 RHSA-2026:19450
RHEL 10.0 EUS yggdrasil-worker-package-manager 0.2.3-6.el10_0 RHSA-2026:27732
RHEL 9.6 EUS git-lfs 3.6.1-2.el9_6.4 RHSA-2026:19722
RHEL 9.6 EUS golang +7 1.25.9-1.el9_6 RHSA-2026:16021
RHEL 9.6 EUS grafana +1 10.2.6-21.el9_6 RHSA-2026:20556
RHEL 9.6 EUS grafana-pcp 5.1.1-14.el9_6 RHSA-2026:19839
RHEL 9.6 EUS gvisor-tap-vsock +1 6:0.8.5-2.el9_6.2 RHSA-2026:28038
RHEL 9.6 EUS opentelemetry-collector 0.144.0-2.el9_6 RHSA-2026:19720
RHEL 9.6 EUS osbuild-composer +2 132.2-7.el9_6 RHSA-2026:22709
RHEL 9.6 EUS rhc +1 1:0.2.7-1.el9_6.4 RHSA-2026:24337
RHEL 9.4 EUS opentelemetry-collector 0.144.0-2.el9_4 RHSA-2026:19721
RHEL 9.4 E4S git-lfs 3.4.1-4.el9_4.6 RHSA-2026:72276
RHEL 9.4 E4S golang +6 1.25.9-1.el9_4 RHSA-2026:47712
RHEL 9.4 E4S grafana +1 9.2.10-27.el9_4 RHSA-2026:47714
RHEL 9.4 E4S grafana-pcp 5.1.1-8.el9_4 RHSA-2026:47716
RHEL 9.4 E4S osbuild-composer +2 101.3-4.el9_4.3 RHSA-2026:47910
RHEL 9.4 E4S rhc 1:0.2.4-8.el9_4 RHSA-2026:49509
RHEL 9.2 E4S git-lfs 3.2.0-2.el9_2.10 RHSA-2026:67319
RHEL 9.2 E4S golang +7 1.25.9-1.el9_2 RHSA-2026:47719
RHEL 9.2 E4S grafana 9.0.9-12.el9_2 RHSA-2026:47722
RHEL 9.2 E4S grafana-pcp 5.1.1-5.el9_2.1 RHSA-2026:47721
RHEL 9.2 E4S osbuild-composer +3 76.1-6.el9_2 RHSA-2026:48036
RHEL 9.2 E4S rhc 1:0.2.2-1.el9_2.3 RHSA-2026:49600
RHEL 8.8 TUS git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 TUS osbuild-composer +3 75-10.el8_8 RHSA-2026:68504
RHEL 8.8 E4S git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 E4S osbuild-composer +3 75-10.el8_8 RHSA-2026:68504
RHEL 8.6 EUS Long Life git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 EUS Long Life osbuild-composer +3 46.3-8.el8_6 RHSA-2026:69235
RHEL 8.6 AUS git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 AUS osbuild-composer +3 46.3-8.el8_6 RHSA-2026:69235
RHEL 7 ELS host-metering +1 1.4.0-7.el7_9 RHSA-2026:16101
RHEL 7 ELS rhc-worker-script 0.11-1.el7_9 RHSA-2026:54191
Red Hat OpenStack 18 golang-github-openstack-k8s-operators-os-diff 0.1.1-18.0.20260602234716.a95ae05.el9ost RHSA-2026:39810
Red Hat OpenStack 17 ansible-collection-ansible-posix 1.2.0-1.4.el9ost RHSA-2026:66401
Red Hat OpenStack 17 ansible-collections-openstack 1.9.1-17.1.20260318160829.0e9a6f2.el9ost RHSA-2026:66401
Red Hat OpenStack 17 collectd-libpod-stats 1.0.6-7.el9ost RHSA-2026:28046
Red Hat OpenStack 17 collectd-sensubility 0.2.1-6.el9ost RHSA-2026:66401
Red Hat OpenStack 17 erlang +19 24.3.4.2-7.el9ost RHSA-2026:66401
Red Hat OpenStack 17 etcd 3.4.26-9.5.el9ost RHSA-2026:66401, RHSA-2026:28047
Red Hat OpenStack 17 golang-uber-multierr 1.5.0-2.el9ost RHSA-2026:28046
Red Hat OpenStack 17 openstack-dashboard +2 1:19.4.1-17.1.20260630130603.9b1a13e.el9ost RHSA-2026:66401
Red Hat OpenStack 17 openstack-heat +5 1:16.1.1-17.1.20260713101101.edc6d60.el9ost RHSA-2026:66401
Red Hat OpenStack 17 openstack-ironic +3 1:17.1.1-17.1.20260721220909.c31db88.el9ost RHSA-2026:66401
Red Hat OpenStack 17 openstack-selinux 0.8.37-17.1.20260107141051.05dd1b2.el9ost RHSA-2026:66401
Red Hat OpenStack 17 openstack-tripleo-heat-templates 14.3.1-17.1.20260803105013.e7c7ce3.el9ost RHSA-2026:66401
Red Hat OpenStack 17 os-net-config 14.2.1-17.1.20260803103231.61d7bd7.el9ost RHSA-2026:66401
Red Hat OpenStack 17 puppet-rabbitmq 11.0.1-17.1.20260306080955.63fee2c.el9ost RHSA-2026:66401
Red Hat OpenStack 17 puppet-tripleo 14.2.3-17.1.20260206090839.40278e1.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python-cinder-tests-tempest +1 1.8.0-17.1.20260114160833.0e94611.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python-glance-store +1 2.5.1-17.1.20260225150839.5f1cee6.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python-os-brick +1 4.3.4-17.1.20260324150947.cf69f92.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python-oslo-messaging +1 12.7.3-17.1.20260701150916.5d6fd1a.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python-oslo-serialization +1 4.1.1-17.1.20260326121047.bbe5d5a.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python-ovsdbapp +1 1.9.4-17.1.20260304101059.65d02f0.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python3-cinder +2 1:18.2.2-17.1.20260702111621.f6b44fc.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python3-ironic-python-agent +1 7.1.1-17.1.20260803104219.0211fa9.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python3-keystone +1 1:19.0.2-17.1.20260630150819.54dd95d.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python3-neutron +11 1:18.6.1-17.1.20260810120959.85ff760.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python3-nova +10 1:23.2.3-17.1.20260810140853.2ace99d.el9ost RHSA-2026:66401
Red Hat OpenStack 17 python3-swift +5 2.27.1-17.1.20260806131309.16dbcae.el9ost RHSA-2026:66401
Red Hat OpenStack 17 rhosp-director-images +14 17.1-20260901.1.el9ost RHSA-2026:66401
Red Hat OpenStack 17 tripleo-ansible 3.3.1-17.1.20260603190918.8debef3.el9ost RHSA-2026:66401
Red Hat OpenStack 16 collectd-sensubility 0.2.1-1.1.el8ost RHSA-2026:54757
Red Hat OpenStack 16 erlang +20 23.3.4.18-2.el8ost RHSA-2026:54757
Red Hat OpenStack 16 etcd 3.3.23-22.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-oslo-messaging +1 10.2.4-2.20260710155333.82281a0.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-pyasn1 +2 0.4.6-4.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-glance +1 1:19.0.5-2.20260512165254.eb6ad61.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-keystone +1 1:16.0.3-2.20260616134936.9d699a7.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-nova +11 1:20.6.2-2.20260317135026.8a24acd.el8ost RHSA-2026:54757
Red Hat Hardened Images 1 golang1.25 +6 1.25.9-1.hum1 RHSA-2026:7385
Red Hat Hardened Images 1 golang1.26 +6 1.26.2-1.hum1 RHSA-2026:7291
Red Hat Edge Manager 1 flightctl +3 1.0.3-1.el9em RHSA-2026:41019, RHSA-2026:36796
Red Hat Ansible Automation Platform Inside 2 python3.12-click 8.3.3-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform Inside 2 python3.12-cryptography 46.0.7-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform Inside 2 receptor 1.6.5-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform Inside 2 receptorctl 1.6.5-1.el9ap RHSA-2026:24762
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.7.12-1.el9ap RHSA-2026:24762
Red Hat Ansible Automation Platform Developer 2 python3-click 8.3.3-1.el10ap RHSA-2026:24762
Red Hat Ansible Automation Platform Developer 2 python3.12-click 8.3.3-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform Developer 2 python3.12-cryptography 46.0.7-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform Developer 2 receptor 1.6.5-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform Developer 2 receptorctl 1.6.5-1.el9ap RHSA-2026:24762
Red Hat Ansible Automation Platform 2 automation-controller +3 4.7.12-1.el9ap RHSA-2026:24762
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.6.29-2.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform 2 automation-gateway-proxy 2.6.14-3.el9ap RHSA-2026:24762
Red Hat Ansible Automation Platform 2 automation-gateway-proxy-server 2.5.10-6.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform 2 automation-gateway-server 2.5.20260422-3.el8ap RHSA-2026:24761
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.9-1.el9ap RHSA-2026:24762
Red Hat Ansible Automation Platform 2 python3-click 8.3.3-1.el10ap RHSA-2026:24762
Red Hat Ansible Automation Platform 2 python3.12-click 8.3.3-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform 2 python3.12-cryptography 46.0.7-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform 2 python3.12-pillow 12.2.0-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform 2 receptor 1.6.5-1.el8ap RHSA-2026:24762, RHSA-2026:24761
Red Hat Ansible Automation Platform 2 receptorctl 1.6.5-1.el9ap RHSA-2026:24762

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 git-lfs 3.7.1-4.el10_2 ALSA-2026:19133
AlmaLinux 10 go-fdo-client 1.0.0-4.el10_2 ALSA-2026:22141
AlmaLinux 10 go-fdo-server +3 1.0.1-2.el10_2 ALSA-2026:22141
AlmaLinux 10 grafana +1 10.2.6-26.el10_2 ALSA-2026:19134
AlmaLinux 10 grafana-pcp 5.3.0-5.el10_2 ALSA-2026:19136
AlmaLinux 10 opentelemetry-collector 0.144.0-2.el10_2 ALSA-2026:19135
AlmaLinux 10 yggdrasil +1 0.4.8-5.el10_1 ALSA-2026:17075
AlmaLinux 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2 ALSA-2026:25999
AlmaLinux 9 git-lfs 3.6.1-8.el9_7.1 ALSA-2026:19350, ALSA-2026:14200
AlmaLinux 9 grafana +1 10.2.6-22.el9_8 ALSA-2026:19352
AlmaLinux 9 grafana-pcp 5.1.1-15.el9_8 ALSA-2026:19351
AlmaLinux 9 opentelemetry-collector 0.144.0-2.el9_8 ALSA-2026:19353
AlmaLinux 8 delve 1.25.2-1.module_el8.10.0+4074+24330916 ALSA-2026:10704
AlmaLinux 8 git-lfs 3.4.1-10.el8_10 ALSA-2026:16875
AlmaLinux 8 golang +7 1.25.9-1.module_el8.10.0+4167+2e2e20dd ALSA-2026:10704
AlmaLinux 8 grafana +1 9.2.10-30.el8_10 ALSA-2026:11507
AlmaLinux 8 grafana-pcp 5.1.1-14.el8_10 ALSA-2026:11514
AlmaLinux 8 osbuild-composer +2 101.5-1.el8_10.alma.1 ALSA-2026:48790

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 git-lfs 3.7.1-4.el10_2 RLSA-2026:19133
Rocky Linux 10 go-fdo-client 1.0.0-4.el10_2 RLSA-2026:22141
Rocky Linux 10 go-fdo-server 1.0.1-2.el10_2 RLSA-2026:22141
Rocky Linux 10 golang 1.25.9-3.el10_1 RLSA-2026:10217
Rocky Linux 10 golang-github-openprinting-ipp-usb 0.9.27-7.el10_2 RLSA-2026:19144
Rocky Linux 10 grafana 10.2.6-25.el10_1 RLSA-2026:19134, RLSA-2026:11712
Rocky Linux 10 grafana-pcp 5.3.0-5.el10_2 RLSA-2026:19136
Rocky Linux 10 image-builder 52.1-1.el10_2.rocky.0.1 RLSA-2026:22937
Rocky Linux 10 opentelemetry-collector 0.144.0-2.el10_2 RLSA-2026:19135
Rocky Linux 10 osbuild-composer 165.1-2.el10_2.rocky.0.1 RLSA-2026:22450
Rocky Linux 10 yggdrasil 0.4.8-5.el10_1 RLSA-2026:24716, RLSA-2026:17075
Rocky Linux 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2 RLSA-2026:25999
Rocky Linux 9 git-lfs 3.6.1-8.el9_7.1 RLSA-2026:19350, RLSA-2026:14200
Rocky Linux 9 golang 1.25.9-1.el9_7 RLSA-2026:10219
Rocky Linux 9 grafana 10.2.6-21.el9_7 RLSA-2026:19352, RLSA-2026:11711
Rocky Linux 9 grafana-pcp 5.1.1-14.el9_7 RLSA-2026:19351, RLSA-2026:11704
Rocky Linux 9 image-builder 52.1-1.el9_8 RLSA-2026:23228
Rocky Linux 9 opentelemetry-collector 0.144.0-2.el9_8 RLSA-2026:19353
Rocky Linux 9 osbuild-composer 165.1-2.el9_8.rocky.0.1 RLSA-2026:22714
Rocky Linux 8 delve 1.25.2-1.module+el8.10.0+40035+ee0a7047 RLSA-2026:10704
Rocky Linux 8 git-lfs 3.4.1-10.el8_10 RLSA-2026:16875
Rocky Linux 8 golang 1.25.9-1.module+el8.10.0+40168+6cb0ea60 RLSA-2026:10704
Rocky Linux 8 grafana 9.2.10-30.el8_10 RLSA-2026:11507
Rocky Linux 8 grafana-pcp 5.1.1-14.el8_10 RLSA-2026:11514
Rocky Linux 8 osbuild-composer 101.5-1.el8_10.rocky.0.6 RLSA-2026:48790
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP7 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP6 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP6 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP5 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP5 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES 15 SP5 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP5 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLES 15 SP4 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP4 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES 15 SP4 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP4 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES for SAP 16.0 go1.26-openssl 1.26.4-160000.1.1 SUSE-SU-2026:22572-1
SLES for SAP 15 SP6 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES for SAP 15 SP6 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES for SAP 15 SP5 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES for SAP 15 SP5 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES for SAP 15 SP5 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES for SAP 15 SP5 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLES for SAP 15 SP4 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES for SAP 15 SP4 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES for SAP 15 SP4 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES for SAP 15 SP4 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLES 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES 16.0 go1.26-openssl 1.26.4-160000.1.1 SUSE-SU-2026:22572-1
SLE HPC 15 SP5 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLE HPC 15 SP5 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLE HPC 15 SP5 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLE HPC 15 SP5 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLE HPC 15 SP4 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLE HPC 15 SP4 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLE HPC 15 SP4 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLE HPC 15 SP4 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed coredns 1.14.3-1.1 openSUSE-SU-2026:10673-1
openSUSE Tumbleweed go1.25 1.25.9-1.1 openSUSE-SU-2026:10514-1
openSUSE Tumbleweed go1.26 1.26.2-1.1 openSUSE-SU-2026:10525-1
openSUSE Leap 16.0 go1.25 1.25.9-160000.1.1 openSUSE-SU-2026:20570-1
openSUSE Leap 16.0 go1.25-openssl 1.25.12-160000.1.1 openSUSE-SU-2026:21319-1
openSUSE Leap 16.0 go1.26 1.26.2-160000.1.1 openSUSE-SU-2026:20571-1
openSUSE Leap 16.0 go1.26-openssl 1.26.4-160000.1.1 openSUSE-SU-2026:21254-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.26.2-r0 —
Alpine v3.24 rclone 1.73.5-r0 —
Alpine v3.23 go 1.25.9-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300066.2-2.amzn2023 ALAS2023-2026-1747
Amazon Linux 2023 amazon-ecr-credential-helper 0.12.0-2.amzn2023 ALAS2023-2026-1645
Amazon Linux 2023 containerd +1 2.2.3-1.amzn2023.0.1 ALAS2023-2026-1606
Amazon Linux 2023 credentials-fetcher 2.0.1-1.amzn2023.0.3 ALAS2023-2026-1598
Amazon Linux 2023 docker 25.0.14-1.amzn2023.0.4 ALAS2023-2026-1615
Amazon Linux 2023 ecs-init 1.103.0-1.amzn2023 ALAS2023-2026-1637
Amazon Linux 2023 golang +6 1.25.9-1.amzn2023.0.1 ALAS2023-2026-1593
Amazon Linux 2023 golang-github-burntsushi-toml +1 1.5.0-1.amzn2023.0.1 ALAS2023-2026-1751
Amazon Linux 2023 golang-github-burntsushi-toml-test +1 0.2.0-8.amzn2023.0.3 ALAS2023-2026-1750
Amazon Linux 2023 golang-github-cpuguy83-md2man +2 2.0.2-24.amzn2023.0.7 ALAS2023-2026-1749
Amazon Linux 2023 golist 0.10.4-12.amzn2023.0.8 ALAS2023-2026-1599
Amazon Linux 2023 nerdctl 2.2.2-1.amzn2023.0.1 ALAS2023-2026-1605
Amazon Linux 2023 oci-add-hooks 0-0.1.20200504git268e3bb.amzn2023.0.10 ALAS2023-2026-1660
Amazon Linux 2023 rclone 1.73.4-74.amzn2023 ALAS2023-2026-1607
Amazon Linux 2023 runc 1.3.4-4.amzn2023.0.2 ALAS2023-2026-1661
Amazon Linux 2023 runfinch-finch 1.17.0-1.amzn2023.0.1 ALAS2023-2026-1671
Amazon Linux 2023 soci-snapshotter 0.13.0-1.amzn2023.0.2 ALAS2023-2026-1700
Amazon Linux 2 amazon-cloudwatch-agent 1.300066.2-2.amzn2 ALAS2-2026-3323
Amazon Linux 2 golang +6 1.25.9-1.amzn2.0.1 ALAS2-2026-3259
Amazon Linux 2 golist 0.10.1-10.amzn2.0.12 ALAS2-2026-3260
Amazon Linux 2 nerdctl 2.2.2-1.amzn2.0.1 ALAS2-2026-3265

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 git-lfs 3.7.1-5.el10_2.6 ELSA-2026-19133
Oracle Linux 10 go-fdo-client 1.0.0-4.el10_2 ELSA-2026-22141
Oracle Linux 10 go-fdo-server +3 1.0.1-2.el10_2 ELSA-2026-22141
Oracle Linux 10 golang +7 1.25.9-3.el10_1 ELSA-2026-10217
Oracle Linux 10 grafana +1 10.2.6-25.el10_1 ELSA-2026-19134, ELSA-2026-11712
Oracle Linux 10 grafana-pcp 5.3.0-7.el10_2 ELSA-2026-19136
Oracle Linux 10 image-builder 58-1.0.1.el10 ELSA-2026-22937
Oracle Linux 10 ipp-usb 0.9.27-7.el10_2.2 ELSA-2026-19144
Oracle Linux 10 osbuild-composer +2 176-1.0.1.el10_2 ELSA-2026-22450
Oracle Linux 10 yggdrasil +1 0.4.8-5.el10_1 ELSA-2026-24716, ELSA-2026-17075
Oracle Linux 10 yggdrasil-worker-package-manager 0.2.3-7.el10_2 ELSA-2026-25999
Oracle Linux 9 git-lfs 3.6.1-8.el9_7.1 ELSA-2026-19350, ELSA-2026-14200
Oracle Linux 9 golang +7 1.25.9-1.el9_7 ELSA-2026-10219
Oracle Linux 9 grafana +1 10.2.6-21.el9_7 ELSA-2026-19352, ELSA-2026-11711
Oracle Linux 9 grafana-pcp 5.1.1-14.el9_7 ELSA-2026-19351, ELSA-2026-11704
Oracle Linux 9 image-builder 72.0.0-1.0.1.el9 ELSA-2026-23228
Oracle Linux 9 osbuild-composer +2 175-1.0.1.el9_8 ELSA-2026-22714
Oracle Linux 8 delve 1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd ELSA-2026-10704
Oracle Linux 8 git-lfs 3.4.1-10.el8_10 ELSA-2026-16875
Oracle Linux 8 golang +7 1.25.9-1.module+el8.10.0+90881+305b00ae ELSA-2026-10704
Oracle Linux 8 grafana +1 9.2.10-30.0.1.el8_10 ELSA-2026-11507
Oracle Linux 8 grafana-pcp 5.1.1-14.el8_10 ELSA-2026-11514
Oracle Linux 8 osbuild-composer +2 101.5-1.0.1.el8_10 ELSA-2026-48790

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r53 —
Wolfi rolling argo-cd-3.3 3.3.6-r4 —
Wolfi rolling argo-cd-3.3-compat 3.3.7-r0 —
Wolfi rolling aws-flb-cloudwatch 1.9.5-r2 —
Wolfi rolling aws-flb-firehose 1.7.2-r26 —
Wolfi rolling aws-flb-kinesis 1.10.4-r2 —
Wolfi rolling cert-manager-1.20 +5 1.20.2-r0 —
Wolfi rolling chezmoi 2.70.4-r2 —
Wolfi rolling cilium-1.19 +1 1.19.4-r4 —
Wolfi rolling cilium-1.19-hubble-relay +2 1.19.3-r0 —
Wolfi rolling cilium-cli 0.19.4-r0 —
Wolfi rolling cloud-provider-aws-1.31-ecr-credential-provider +1 1.31.9-r12 —
Wolfi rolling coredns-1.13 +1 1.13.2-r4 —
Wolfi rolling dask-gateway-server 2026.3.0-r1 —
Wolfi rolling dogstatsd-7.72 7.72.4-r17 —
Wolfi rolling dogstatsd-7.73 7.73.3-r9 —
Wolfi rolling external-secrets-operator-1.1 1.1.1-r6 —
Wolfi rolling falco-no-driver 0.43.0-r7 —
Wolfi rolling flux-2.8 2.8.8-r2 —
Wolfi rolling fscrypt 0.3.6-r9 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.7-r11 —
Wolfi rolling gitaly-18.6 +2 18.6.6-r9 —
Wolfi rolling gitaly-18.7 +5 18.7.6-r1 —
Wolfi rolling gitlab-kas-18.6 +1 18.6.6-r7 —
Wolfi rolling gitlab-pages-18.6 18.6.6-r4 —
Wolfi rolling go-1.24 +7 No fix yet —
Wolfi rolling go-1.26 1.26.2-r0 —
Wolfi rolling helm-3 3.22.0-r0 —
Wolfi rolling hubble 1.18.6-r6 —
Wolfi rolling ingress-nginx-controller-1.12 1.12.8-r8 —
Wolfi rolling k3d 5.8.3-r31 —
Wolfi rolling kaf 0.2.14-r5 —
Wolfi rolling kine 0.14.16-r1 —
Wolfi rolling kots 1.130.0-r4 —
Wolfi rolling kube-fluentd-operator 1.18.2-r65 —
Wolfi rolling kubeadm-1.34 +7 1.34.7-r0 —
Wolfi rolling kubeadm-1.35 +7 1.35.4-r0 —
Wolfi rolling kubectl-1.32 1.32.13-r1 —
Wolfi rolling kubernetes-dashboard 7.14.0-r5 —
Wolfi rolling kubescape 4.0.3-r3 —
Wolfi rolling kyverno-1.17 +6 1.17.1-r15 —
Wolfi rolling libnvidia-container 1.19.0-r0 —
Wolfi rolling mattermost-11.1 11.1.3-r3 —
Wolfi rolling mps-control-daemon +1 0.19.0-r3 —
Wolfi rolling nerdctl 2.3.1-r3 —
Wolfi rolling newrelic-fluent-bit-output 3.4.1-r3 —
Wolfi rolling nvidia-container-toolkit-nvidia-container-runtime +1 1.19.1-r1 —
Wolfi rolling nvidia-container-toolkit-nvidia-ctk +2 1.19.0-r3 —
Wolfi rolling nvidia-device-plugin 0.19.2-r0 —
Wolfi rolling opentelemetry-collector 0.149.0-r1 —
Wolfi rolling osv-scanner 2.3.5-r1 —
Wolfi rolling prometheus-3.10 3.10.0-r5 —
Wolfi rolling prometheus-3.8 3.8.1-r4 —
Wolfi rolling prometheus-3.9 3.9.1-r6 —
Wolfi rolling prometheus-operator +2 0.90.1-r3 —
Wolfi rolling redka 1.0.1-r1 —
Wolfi rolling runc 1.4.2-r4 —
Wolfi rolling snyk-cli 1.1304.0-r0 —
Wolfi rolling spire-agent +2 1.14.5-r0 —
Wolfi rolling zot 2.1.15-r12 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.25.9 · >= 1.26.0-0, < 1.26.2 1.25.9, 1.26.2 GO-2026-4864

Advisories 50

References