[CLSA-2026:1791734079] golang: Fix of CVE-2026-42505
Type:
security
Severity:
Moderate
Release date:
2026-10-11 15:54:49 UTC
Description:
- CVE-2026-42505: omit the pre_shared_key extension from the outer ClientHello in crypto/tls when Encrypted Client Hello is used, so a passive network observer can no longer use the unencrypted PSK identities to de-anonymize the handshake
CVEs fixed:
Updated packages:
  • go-toolset-1.25.7-1.el9_6.tuxcare.els19.aarch64.rpm
    sha:b8670a699d89f9d1c60a8c5583a010df2c425a060cf2393b4ef3995c95e196ff
  • go-toolset-1.25.7-1.el9_6.tuxcare.els19.x86_64.rpm
    sha:f7f61fc3517a8a30aa68ccda4bd79c9a5a6ffb667ac34ca27afbd7f8d8358068
  • golang-1.25.7-1.el9_6.tuxcare.els19.aarch64.rpm
    sha:d755c3910da19e262f3743b7cd1967c7dbdf5045ed060a6133b4b3568edc41ea
  • golang-1.25.7-1.el9_6.tuxcare.els19.x86_64.rpm
    sha:6627b57e1e0b8f4ec7774f4cd357925870765d2a5eb326a7ea1d64d9651c4221
  • golang-bin-1.25.7-1.el9_6.tuxcare.els19.aarch64.rpm
    sha:ef63b9e5c405e96af09d845e87a2daf240255192f7b87672a8725c7097a923bc
  • golang-bin-1.25.7-1.el9_6.tuxcare.els19.x86_64.rpm
    sha:c5a78fd1d310f2dd1fa34cee51ce987be1d3b2915138d063cea869438154951a
  • golang-docs-1.25.7-1.el9_6.tuxcare.els19.noarch.rpm
    sha:f2ba79e912d56c5b5e0ed1899daf956a1d183e53de519c104a89eedae8ee2ec8
  • golang-misc-1.25.7-1.el9_6.tuxcare.els19.noarch.rpm
    sha:90957a8d6293ab692b538b9577f413d0bb6f71df3230d6016f7398dcd640e222
  • golang-race-1.25.7-1.el9_6.tuxcare.els19.aarch64.rpm
    sha:003c8785f7f7c2d35b38e6995afb4b08102c911166a522868ed9f4df3db19cca
  • golang-race-1.25.7-1.el9_6.tuxcare.els19.x86_64.rpm
    sha:8078f1811b560cc1cede35ac74adc010c3d0b5f16326913e4ffd482d44d7a40e
  • golang-src-1.25.7-1.el9_6.tuxcare.els19.noarch.rpm
    sha:28e2eacf1285b22a280fd66b2d5bc282d85eb64454a604d9df2d8add0a9b53ae
  • golang-tests-1.25.7-1.el9_6.tuxcare.els19.noarch.rpm
    sha:1c72b2478a1a5744442a541a80493ef9acbaf95569d1c1931ad79d4b55ec7958
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.