{"id":"CLSA-2026-1778838399","summary":"golang: Fix of CVE-2026-32282","details":"- CVE-2026-32282: fix TOCTOU race in os.Root.Chmod on Linux that allowed\n  symlink-based escapes from the restricted root by switching to fchmodat2\n  with /proc/self/fd fallback","modified":"2026-06-01T00:32:52.428669141Z","published":"2026-05-15T11:02:05Z","upstream":["CVE-2026-32282"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778838399.html"}],"affected":[{"package":{"name":"go-toolset","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/go-toolset?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang-bin","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang-bin?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang-docs","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang-docs?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang-misc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang-misc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang-race","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang-race?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang-src","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang-src?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}},{"package":{"name":"golang-tests","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/golang-tests?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.7-1.el9_6.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778838399.json"}}],"schema_version":"1.7.5"}