{"id":"CLSA-2026-1776427525","summary":"golang: Fix of 3 CVEs","details":"- CVE-2025-61723: fix non-linear processing time when parsing invalid PEM\n  inputs that could lead to denial of service\n- CVE-2025-58187: fix quadratic complexity when checking name constraints in\n  crypto/x509 certificate validation\n- CVE-2025-58188: fix panic when validating certificates with DSA public keys\n  in crypto/x509","modified":"2026-06-01T00:32:22.479470175Z","published":"2026-04-17T12:05:29Z","upstream":["CVE-2025-61723","CVE-2025-58187","CVE-2025-58188"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776427525.html"}],"affected":[{"package":{"name":"go-toolset","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/go-toolset?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}},{"package":{"name":"golang","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/golang?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}},{"package":{"name":"golang-bin","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/golang-bin?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}},{"package":{"name":"golang-docs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/golang-docs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}},{"package":{"name":"golang-misc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/golang-misc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}},{"package":{"name":"golang-src","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/golang-src?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}},{"package":{"name":"golang-tests","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/golang-tests?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-1.el9_2.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1776427525.json"}}],"schema_version":"1.7.5"}