Linux · Security advisory · January 21, 2026

ELSA-2026-0921: Security update for 9 packages

ELSA-2026-0921, released January 21, 2026, fixes 1 CVE across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0049
42nd percentile

Fixed package versions

ProductReleaseFixed in
delveol 80:1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd
go-toolsetol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golangol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golang-binol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golang-docsol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golang-miscol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golang-raceol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golang-srcol 80:1.25.5-1.module+el8.10.0+90772+95994ed8
golang-testsol 80:1.25.5-1.module+el8.10.0+90772+95994ed8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509 8.1 0.0049 None reported
Showing 1 to 1 of 1 1