p PatchFirst

SUSE-SU-2026:22656-1

SUSE-SU-2026:22656-1 · Security update for go1.26

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for go1.26 fixes the following issues - Update to version go1.26.5 (bsc#1255111). - CVE-2026-39822: os: Root escape via symlink plus trailing slash (bsc#1271014). - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello (bsc#1271015).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • go1.26 SUSE:Linux Enterprise Server 16.0

    Affected ranges
    • ECOSYSTEM: < 1.26.5-160000.1.1

    Update to 1.26.5-160000.1.1

  • go1.26 SUSE:Linux Enterprise Server for SAP applications 16.0

    Affected ranges
    • ECOSYSTEM: < 1.26.5-160000.1.1

    Update to 1.26.5-160000.1.1

Original sources

Check your server →