P5Verified

Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2025-22874, CVE-2025-68121, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283 affects go-toolset. EPSS 0.00374 (percentile 0.29073), scored 2026-10-03. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_2. Fixed version: 0:1.25.9-1.el9_4. Fixed version: 0:1.25.9-1.el9_4. Fixed version: 0:1.25.9-1.el9_4. Fixed version: 0:1.25.9-1.el9_4.

CVE: CVE-2025-22874, CVE-2025-68121, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283
Product: go-toolset
CCR priority: 0.1 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · OSV.dev
EPSS: 0.00374 · percentile 0.29073 · 2026-10-03
KEV: no

Affected products

go-toolset · Fixed version: 0:1.25.9-1.el9_2
golang · Fixed version: 0:1.25.9-1.el9_2
golang-bin · Fixed version: 0:1.25.9-1.el9_2
golang-docs · Fixed version: 0:1.25.9-1.el9_2
golang-misc · Fixed version: 0:1.25.9-1.el9_2
golang-race · Fixed version: 0:1.25.9-1.el9_2
golang-src · Fixed version: 0:1.25.9-1.el9_2
golang-tests · Fixed version: 0:1.25.9-1.el9_2
go-toolset · Fixed version: 0:1.25.9-1.el9_4
golang · Fixed version: 0:1.25.9-1.el9_4
golang-bin · Fixed version: 0:1.25.9-1.el9_4
golang-docs · Fixed version: 0:1.25.9-1.el9_4
golang-misc · Fixed version: 0:1.25.9-1.el9_4
golang-src · Fixed version: 0:1.25.9-1.el9_4
golang-tests · Fixed version: 0:1.25.9-1.el9_4

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-22874.html