RHSA-2026:16021HighCVSS 9.0

Red Hat Security Advisory: golang security update

Published
May 11, 2026
Last Modified
June 3, 2026

🔗 CVE IDs covered (6)

CVE-2026-32283 →CVE-2026-27140 →CVE-2026-27143 →CVE-2026-27144 →CVE-2026-32280 →CVE-2026-32282 →

📋 Description

CVE-2026-27140 — cmd/go: golang: Go (golang) and cmd/go: Arbitrary Code Execution via malicious SWIG file names CVE-2026-27143 — golang: cmd/compile: possible memory corruption after bound check elimination CVE-2026-27144 — golang: cmd/compile: no-op interface conversion bypasses overlap checking CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-32282 — golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-32283 — crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

🔗 References (9)