# CVE-2026-39822: Root escape via symlink plus trailing slash in os CVE-2026-39822 is fixed in 65 products on 2 platforms, first by RHSA-2026:49702, released May 27, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-39822 - Priority: High - CVSS: 8.2 (Important) - EPSS: 0.0023 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jul 8, 2026 - Weakness: UNIX Symbolic Link (Symlink) Following - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39822 ## Description On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Windows apps | Go Programming Language | 1.27.3 | [Go Programming Language 1.27.3](https://patchblox.com/security/data/fix/windows-app/golang.go-1.27.3.md) | Oct 19, 2026 | | Linux | amazon-cloudwatch-agent amzn 2023 | 1.300069.1-1.amzn2023 | [ALAS2023-2026-2025](https://patchblox.com/security/data/fix/linux/alas2023-2026-2025.md) | Aug 3, 2026 | | Linux | amazon-ecr-credential-helper amzn 2023 | 0.12.0-4.amzn2023 | [ALAS2023-2026-3180](https://patchblox.com/security/data/fix/linux/alas2023-2026-3180.md) | Nov 7, 2026 | | Linux | buildah RHEL 10 | 1.43.1-4.el10_2 | [RHSA-2026:38494](https://patchblox.com/security/data/fix/linux/rhsa-2026-38494.md) | Jul 13, 2026 | | Linux | buildah RHEL 9 | 2:1.43.1-4.el9_8 | [RHSA-2026:38493](https://patchblox.com/security/data/fix/linux/rhsa-2026-38493.md) | Jul 13, 2026 | | Linux | buildah almalinux 10 | 2:1.43.1-4.el10_2 | [ALSA-2026:38494](https://patchblox.com/security/data/fix/linux/alsa-2026-38494.md) | Jul 13, 2026 | | Linux | buildah almalinux 9 | 2:1.43.1-4.el9_8 | [ALSA-2026:38493](https://patchblox.com/security/data/fix/linux/alsa-2026-38493.md) | Jul 13, 2026 | | Linux | buildah ol 10 | 2:1.43.1-4.0.1.el10_2 | [ELSA-2026-38494](https://patchblox.com/security/data/fix/linux/elsa-2026-38494.md) | Jul 16, 2026 | | Linux | buildah ol 9 | 2:1.43.1-4.0.1.el9_8 | [ELSA-2026-38493](https://patchblox.com/security/data/fix/linux/elsa-2026-38493.md) | Jul 14, 2026 | | Linux | buildah rocky 10 | 2:1.43.1-4.el10_2 | [RLSA-2026:38494](https://patchblox.com/security/data/fix/linux/rlsa-2026-38494.md) | Jul 14, 2026 | | Linux | buildah rocky 9 | 2:1.43.1-4.el9_8 | [RLSA-2026:38493](https://patchblox.com/security/data/fix/linux/rlsa-2026-38493.md) | Jul 14, 2026 | | Linux | buildah-tests RHEL 9 | 2:1.43.1-4.el9_8 | [RHSA-2026:38493](https://patchblox.com/security/data/fix/linux/rhsa-2026-38493.md) | Jul 13, 2026 | | Linux | buildah-tests almalinux 10 | 2:1.43.1-4.el10_2 | [ALSA-2026:38494](https://patchblox.com/security/data/fix/linux/alsa-2026-38494.md) | Jul 13, 2026 | | Linux | buildah-tests almalinux 9 | 2:1.43.1-4.el9_8 | [ALSA-2026:38493](https://patchblox.com/security/data/fix/linux/alsa-2026-38493.md) | Jul 13, 2026 | | Linux | buildah-tests ol 10 | 2:1.43.1-4.0.1.el10_2 | [ELSA-2026-38494](https://patchblox.com/security/data/fix/linux/elsa-2026-38494.md) | Jul 16, 2026 | | Linux | buildah-tests ol 9 | 2:1.43.1-4.0.1.el9_8 | [ELSA-2026-38493](https://patchblox.com/security/data/fix/linux/elsa-2026-38493.md) | Jul 14, 2026 | | Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 | | Linux | containerd amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 | | Linux | containerd-debuginfo amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 | | Linux | containerd-debugsource amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 | | Linux | containerd-stress amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 | | Linux | containerd-stress-debuginfo amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 | | Linux | credentials-fetcher amzn 2023 | 2.0.3-1.amzn2023.0.2 | [ALAS2023-2026-1975](https://patchblox.com/security/data/fix/linux/alas2023-2026-1975.md) | Jul 20, 2026 | | Linux | delve RHEL 8 | 0:1.26.1-1.module+el8.10.0+24516+40554724 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | delve almalinux 8 | 1.26.1-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | delve ol 8 | 0:1.26.1-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | delve rocky 8 | 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 | [RLSA-2026:38995](https://patchblox.com/security/data/fix/linux/rlsa-2026-38995.md) | Jul 15, 2026 | | Linux | docker amzn 2023 | 25.0.16-1.amzn2023.0.5 | [ALAS2023-2026-3205](https://patchblox.com/security/data/fix/linux/alas2023-2026-3205.md) | Nov 7, 2026 | | Linux | docker-debuginfo amzn 2023 | 25.0.16-1.amzn2023.0.5 | [ALAS2023-2026-3205](https://patchblox.com/security/data/fix/linux/alas2023-2026-3205.md) | Nov 7, 2026 | | Linux | docker-debugsource amzn 2023 | 25.0.16-1.amzn2023.0.5 | [ALAS2023-2026-3205](https://patchblox.com/security/data/fix/linux/alas2023-2026-3205.md) | Nov 7, 2026 | | Linux | go-toolset RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | go-toolset RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | go-toolset almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | go-toolset almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | go-toolset almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | go-toolset ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | go-toolset ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | go-toolset ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | go1.25 opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21324-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21324-1.md) | Jul 13, 2026 | | Linux | go1.25 sles 15.6 | 1.25.12-150000.1.44.1 | [SUSE-SU-2026:2817-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2817-1.md) | Jul 9, 2026 | | Linux | go1.25 sles 15.7 | 1.25.12-150000.1.44.1 | [SUSE-SU-2026:2817-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2817-1.md) | Jul 9, 2026 | | Linux | go1.25 sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22643-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22643-1.md) | Jul 13, 2026 | | Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 | | Linux | go1.25-openssl sles 15.6 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 | | Linux | go1.25-openssl sles 15.7 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 | | Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 | | Linux | go1.26 opensuse-leap 16.0 | 1.26.5-160000.1.1 | [OPENSUSE-SU-2026:21341-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21341-1.md) | Jul 14, 2026 | | Linux | go1.26 sles 15.6 | 1.26.5-150000.1.18.1 | [SUSE-SU-2026:2818-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2818-1.md) | Jul 9, 2026 | | Linux | go1.26 sles 15.7 | 1.26.5-150000.1.18.1 | [SUSE-SU-2026:2818-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2818-1.md) | Jul 9, 2026 | | Linux | go1.26 sles 16.0 | 1.26.5-160000.1.1 | [SUSE-SU-2026:22656-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22656-1.md) | Jul 14, 2026 | | Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.5-160000.1.1 | [OPENSUSE-SU-2026:21321-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21321-1.md) | Jul 13, 2026 | | Linux | go1.26-openssl sles 15.6 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 | | Linux | go1.26-openssl sles 15.7 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 | | Linux | go1.26-openssl sles 16.0 | 1.26.5-160000.1.1 | [SUSE-SU-2026:22641-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22641-1.md) | Jul 13, 2026 | | Linux | golang RHEL 10 | 1.26.5-1.el10_0 | [RHSA-2026:49702](https://patchblox.com/security/data/fix/linux/rhsa-2026-49702.md) | May 27, 2026 | | Linux | golang RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golang rocky 10 | 0:1.26.5-1.el10_2 | [RLSA-2026:37436](https://patchblox.com/security/data/fix/linux/rlsa-2026-37436.md) | Jul 13, 2026 | | Linux | golang rocky 8 | 0:1.26.5-1.module+el8.10.0+40244+e7cb3ff8 | [RLSA-2026:38995](https://patchblox.com/security/data/fix/linux/rlsa-2026-38995.md) | Jul 15, 2026 | | Linux | golang rocky 9 | 0:1.26.5-1.el9_8 | [RLSA-2026:37435](https://patchblox.com/security/data/fix/linux/rlsa-2026-37435.md) | Jul 13, 2026 | | Linux | golang-1.26 Debian 14 | 1.26.5-1 | [DEBIAN-CVE-2026-39822](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39822.md) | Jul 10, 2026 | | Linux | golang-1.27 Debian 14 | 1.27~rc2-1 | [DEBIAN-CVE-2026-39822](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39822.md) | Jul 10, 2026 | | Linux | golang-bin RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-bin RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang-bin almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang-bin almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-bin almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang-bin amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang-bin ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang-bin ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-bin ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golang-docs RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-docs RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang-docs almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang-docs almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-docs almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang-docs amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang-docs ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang-docs ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-docs ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 | | Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 | | Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 | | Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 | | Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 | | Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 | | Linux | golang-misc RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-misc RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang-misc almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang-misc almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-misc almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang-misc amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang-misc ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang-misc ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-misc ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golang-race RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-race RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang-race almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang-race almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-race almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang-race ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang-race ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-race ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golang-shared amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang-src RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-src RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang-src almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang-src almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-src almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang-src amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang-src ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang-src ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-src ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golang-tests RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-tests RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 | | Linux | golang-tests almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 | | Linux | golang-tests almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-tests almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 | | Linux | golang-tests amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 | | Linux | golang-tests ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-37436](https://patchblox.com/security/data/fix/linux/elsa-2026-37436.md) | Jul 16, 2026 | | Linux | golang-tests ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-tests ol 9 | 0:1.26.5-1.0.1.el9_8 | [ELSA-2026-37435](https://patchblox.com/security/data/fix/linux/elsa-2026-37435.md) | Jul 10, 2026 | | Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.11 | [ALAS2023-2026-1976](https://patchblox.com/security/data/fix/linux/alas2023-2026-1976.md) | Jul 20, 2026 | | Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.11 | [ALAS2023-2026-1976](https://patchblox.com/security/data/fix/linux/alas2023-2026-1976.md) | Jul 20, 2026 | | Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.11 | [ALAS2023-2026-1976](https://patchblox.com/security/data/fix/linux/alas2023-2026-1976.md) | Jul 20, 2026 | | Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 | | Linux | nerdctl amzn 2023 | 2.3.5-1.amzn2023.0.1 | [ALAS2023-2026-2129](https://patchblox.com/security/data/fix/linux/alas2023-2026-2129.md) | Aug 31, 2026 | | Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.12 | [ALAS2023-2026-3206](https://patchblox.com/security/data/fix/linux/alas2023-2026-3206.md) | Nov 7, 2026 | | Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.12 | [ALAS2023-2026-3206](https://patchblox.com/security/data/fix/linux/alas2023-2026-3206.md) | Nov 7, 2026 | | Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.12 | [ALAS2023-2026-3206](https://patchblox.com/security/data/fix/linux/alas2023-2026-3206.md) | Nov 7, 2026 | | Linux | openshift RHEL 10 | 4.21.0-202609022229.p2.g93afd70.assembly.stream.el10 | [RHSA-2026:66350](https://patchblox.com/security/data/fix/linux/rhsa-2026-66350.md) | Aug 13, 2026 | | Linux | podman RHEL 9 | 6:5.8.2-5.el9_8 | [RHSA-2026:38878](https://patchblox.com/security/data/fix/linux/rhsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman almalinux 10 | 7:5.8.2-5.el10_2.alma.1 | [ALSA-2026:38495](https://patchblox.com/security/data/fix/linux/alsa-2026-38495.md) | Jul 13, 2026 | | Linux | podman almalinux 9 | 6:5.8.2-5.el9_8 | [ALSA-2026:38878](https://patchblox.com/security/data/fix/linux/alsa-2026-38878.md) | Jul 13, 2026 | | Linux | podman ol 10 | 7:5.8.2-5.0.1.el10_2 | [ELSA-2026-38495](https://patchblox.com/security/data/fix/linux/elsa-2026-38495.md) | Jul 16, 2026 | | Linux | podman ol 9 | 6:5.8.2-5.0.1.el9_8 | [ELSA-2026-38878](https://patchblox.com/security/data/fix/linux/elsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman rocky 10 | 7:5.8.2-5.el10_2 | [RLSA-2026:38495](https://patchblox.com/security/data/fix/linux/rlsa-2026-38495.md) | Jul 14, 2026 | | Linux | podman rocky 9 | 6:5.8.2-5.el9_8 | [RLSA-2026:38878](https://patchblox.com/security/data/fix/linux/rlsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-docker RHEL 9 | 6:5.8.2-5.el9_8 | [RHSA-2026:38878](https://patchblox.com/security/data/fix/linux/rhsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-docker almalinux 10 | 7:5.8.2-5.el10_2.alma.1 | [ALSA-2026:38495](https://patchblox.com/security/data/fix/linux/alsa-2026-38495.md) | Jul 13, 2026 | | Linux | podman-docker almalinux 9 | 6:5.8.2-5.el9_8 | [ALSA-2026:38878](https://patchblox.com/security/data/fix/linux/alsa-2026-38878.md) | Jul 13, 2026 | | Linux | podman-docker ol 10 | 7:5.8.2-5.0.1.el10_2 | [ELSA-2026-38495](https://patchblox.com/security/data/fix/linux/elsa-2026-38495.md) | Jul 16, 2026 | | Linux | podman-docker ol 9 | 6:5.8.2-5.0.1.el9_8 | [ELSA-2026-38878](https://patchblox.com/security/data/fix/linux/elsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-plugins RHEL 9 | 6:5.8.2-5.el9_8 | [RHSA-2026:38878](https://patchblox.com/security/data/fix/linux/rhsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-plugins almalinux 9 | 6:5.8.2-5.el9_8 | [ALSA-2026:38878](https://patchblox.com/security/data/fix/linux/alsa-2026-38878.md) | Jul 13, 2026 | | Linux | podman-plugins ol 9 | 6:5.8.2-5.0.1.el9_8 | [ELSA-2026-38878](https://patchblox.com/security/data/fix/linux/elsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-remote RHEL 9 | 6:5.8.2-5.el9_8 | [RHSA-2026:38878](https://patchblox.com/security/data/fix/linux/rhsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-remote almalinux 10 | 7:5.8.2-5.el10_2.alma.1 | [ALSA-2026:38495](https://patchblox.com/security/data/fix/linux/alsa-2026-38495.md) | Jul 13, 2026 | | Linux | podman-remote almalinux 9 | 6:5.8.2-5.el9_8 | [ALSA-2026:38878](https://patchblox.com/security/data/fix/linux/alsa-2026-38878.md) | Jul 13, 2026 | | Linux | podman-remote ol 10 | 7:5.8.2-5.0.1.el10_2 | [ELSA-2026-38495](https://patchblox.com/security/data/fix/linux/elsa-2026-38495.md) | Jul 16, 2026 | | Linux | podman-remote ol 9 | 6:5.8.2-5.0.1.el9_8 | [ELSA-2026-38878](https://patchblox.com/security/data/fix/linux/elsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-tests RHEL 9 | 6:5.8.2-5.el9_8 | [RHSA-2026:38878](https://patchblox.com/security/data/fix/linux/rhsa-2026-38878.md) | Jul 14, 2026 | | Linux | podman-tests almalinux 10 | 7:5.8.2-5.el10_2.alma.1 | [ALSA-2026:38495](https://patchblox.com/security/data/fix/linux/alsa-2026-38495.md) | Jul 13, 2026 | | Linux | podman-tests almalinux 9 | 6:5.8.2-5.el9_8 | [ALSA-2026:38878](https://patchblox.com/security/data/fix/linux/alsa-2026-38878.md) | Jul 13, 2026 | | Linux | podman-tests ol 10 | 7:5.8.2-5.0.1.el10_2 | [ELSA-2026-38495](https://patchblox.com/security/data/fix/linux/elsa-2026-38495.md) | Jul 16, 2026 | | Linux | podman-tests ol 9 | 6:5.8.2-5.0.1.el9_8 | [ELSA-2026-38878](https://patchblox.com/security/data/fix/linux/elsa-2026-38878.md) | Jul 14, 2026 | | Linux | rclone amzn 2023 | 1.75.1-1.amzn2023 | [ALAS2023-2026-3129](https://patchblox.com/security/data/fix/linux/alas2023-2026-3129.md) | Sep 28, 2026 | | Linux | rclone-debuginfo amzn 2023 | 1.75.1-1.amzn2023 | [ALAS2023-2026-3129](https://patchblox.com/security/data/fix/linux/alas2023-2026-3129.md) | Sep 28, 2026 | | Linux | rclone-debugsource amzn 2023 | 1.75.1-1.amzn2023 | [ALAS2023-2026-3129](https://patchblox.com/security/data/fix/linux/alas2023-2026-3129.md) | Sep 28, 2026 | | Linux | runc amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 | | Linux | runc-debuginfo amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 | | Linux | runc-debugsource amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 | | Linux | runfinch-finch amzn 2023 | 1.17.2-1.amzn2023.0.3 | [ALAS2023-2026-2023](https://patchblox.com/security/data/fix/linux/alas2023-2026-2023.md) | Aug 3, 2026 | | Linux | soci-snapshotter amzn 2023 | 0.16.0-1.amzn2023.0.1 | [ALAS2023-2026-3153](https://patchblox.com/security/data/fix/linux/alas2023-2026-3153.md) | Nov 7, 2026 | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.