Release date:
2026-07-16 15:39:37 UTC
Description:
- CVE-2026-39821: fix privilege-escalation in the vendored golang.org/x/net/idna package by rejecting Punycode (xn--) labels that decode to an all-ASCII label in ToASCII and ToUnicode, preventing hostname authorization bypass
Updated packages:
-
go-toolset-1.25.7-1.el9_6.tuxcare.els13.x86_64.rpm
sha:159b29612e6b105b13582eca4df40de8c75bd615b2566fa69303475290e6c96d
-
golang-1.25.7-1.el9_6.tuxcare.els13.x86_64.rpm
sha:8f24e1211672c75ad336e2e92be08c5ddb4146ec6b7043fed0abbc4ac5b85453
-
golang-bin-1.25.7-1.el9_6.tuxcare.els13.x86_64.rpm
sha:e2b40b29d10d9b3277a3de296fb4532c4942b78d5d7d7417c06e9233cf106b24
-
golang-docs-1.25.7-1.el9_6.tuxcare.els13.noarch.rpm
sha:56a1c73aa079b0dd53405be47837703da11fb86594febb879e67cd5b4164b899
-
golang-misc-1.25.7-1.el9_6.tuxcare.els13.noarch.rpm
sha:638793c86791dfd0ced98a75e25b33779c264be3a8d9be055c8b1e2e72acb48a
-
golang-race-1.25.7-1.el9_6.tuxcare.els13.x86_64.rpm
sha:517b7a2de59834cf4e2380d6e285716a040e5ce68937684000f446d3dc83a64f
-
golang-src-1.25.7-1.el9_6.tuxcare.els13.noarch.rpm
sha:fcbe8ea9cdd72ccecc1f895a81a0c68122c3b13631bf888b617b6581b4f07f30
-
golang-tests-1.25.7-1.el9_6.tuxcare.els13.noarch.rpm
sha:2c625294775353bb1a1aa5f52ec01b18bb437a0cd4a8439c98a8d8afdd92a034
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
