RLSA-2026:6949

RLSA-2026:6949 · Important: go-toolset:rhel8 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive (CVE-2025-61731) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 8.6 · High · Fix available

Published

2026-04-08T06:00:32.918205Z

Updated

2026-04-08T06:30:17.774002Z

Stack: system

Check your server →