RHSA-2026:7883HighCVSS 8.6
Red Hat Security Advisory: golang security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2025-61731 — cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:7883
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2434433
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2445356
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7883.json