SUSE-SU-2026:0876-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-20260876-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:0876-1

Upstream

CVE (5)

Related

CVE (5)

Published

2026-03-11T18:35:26Z

Modified

2026-03-13T08:50:44Z

Summary

Security update for go1.26

Details

This update for go1.26 fixes the following issues:

Update to go1.26.1 (bsc#1255111):

CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264).
CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints (bsc#1259266).
CVE-2026-27138: crypto/x509: panic in name constraint checking for malformed certificates (bsc#1259267).
CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268).
CVE-2026-27142: html/template: URLs in meta content attribute actions are not escaped (bsc#1259265).

Changelog:

go#77252 cmd/compile: miscompile of global array initialization
go#77407 os: Go 1.25.x regression on RemoveAll for windows
go#77474 cmd/go: CGO compilation fails after upgrading from Go 1.25.5 to 1.25.6 due to --define-variable flag in pkg-config
go#77529 cmd/fix, x/tools/go/analysis/passes/modernize: stringscut: OOB panic in indexArgValid analyzing 'buf.Bytes()' call
go#77532 net/smtp: expiry date of localhostCert for testing is too short
go#77536 cmd/compile: internal compiler error: 'main.func1': not lowered: v15, Load STRUCT PTR SSA
go#77618 strings: HasSuffix doesn't work correctly for multibyte runes in go 1.26
go#77623 cmd/compile: internal compiler error on : 'tried to free an already free register' with generic function and type >= 192 bytes
go#77624 cmd/fix, x/tools/go/analysis/passes/modernize: stringsbuilder breaks code when combining two strings.Builders
go#77680 cmd/link: TestFlagW/-w_-linkmode=external fails on illumos
go#77766 cmd/fix,x/tools/go/analysis/passes/modernize: rangeint uses target platform's type in the range expression, breaking other platforms
go#77780 reflect: breaking change for reflect.Value.Interface behaviour
go#77786 cmd/compile: rewriteFixedLoad does not properly sign extend AuxInt
go#77803 cmd/fix,x/tools/go/analysis/passes/modernize: reflect.TypeOf(nil) transformed into reflect.TypeForuntyped nil
go#77804 cmd/fix,x/tools/go/analysis/passes/modernize: minmax breaks select statements
go#77805 cmd/fix, x/tools/go/analysis/passes/modernize: waitgroup leads to a compilation error
go#77807 cmd/fix,x/tools/go/analysis/passes/modernize: stringsbuilder ignores variables if they are used multiple times
go#77849 cmd/fix,x/tools/go/analysis/passes/modernize: stringscut rewrite changes behavior
go#77860 cmd/go: change go mod init default go directive back to 1.N
go#77899 cmd/fix, x/tools/go/analysis/passes/modernize: bad rangeint rewriting
go#77904 x/tools/go/analysis/passes/modernize: stringsbuilder breaks code when GenDecl is a block declaration

References

Affected packages

openSUSE:Leap 15.6

go1.26

Package

Name: go1.26
Purl: pkg:rpm/opensuse/go1.26&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Module for Development Tools 15 SP7

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Server 15 SP4-LTSS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Server 15 SP5-LTSS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Server 15 SP6-LTSS

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP4

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP5

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP6

go1.26

Package

Name: go1.26
Purl: pkg:rpm/suse/go1.26&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.26.1-150000.1.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "go1.26":  "1.26.1-150000.1.6.1",
            "go1.26-doc":  "1.26.1-150000.1.6.1",
            "go1.26-race":  "1.26.1-150000.1.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0876-1.json"