Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Mageia Golang Critical Security Advisory CVE-2026-42504 CVE-2026-42507

mageia
Calendar Grey July 20, 2026
Scroller Mageia
Critical security update for Mageia to address multiple vulnerabilities in golang with recommended patching steps.
Security update

Summary

Description: The updated packages fix security vulnerabilities: mime: quadratic complexity in WordDecoder.DecodeHeader. (CVE-2026-42504) net/textproto: arbitrary input are included in errors without any escaping. (CVE-2026-42507) crypto/x509: split candidate hostname only once. (CVE-2026-27145) os: Root escape via symlink plus trailing slash. (CVE-2026-39822) crypto/tls: Encrypted Client Hello privacy leak. (CVE-2026-42505)

References

- https://bugs.mageia.org/show_bug.cgi?id=35624

- https://www.openwall.com/lists/oss-security/2026/06/03/2

- https://www.openwall.com/lists/oss-security/2026/07/08/10

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PHOAHESABWDZPEWFOMKYQVZYR2MQH3RA/

- https://www.cve.org/CVERecord?id=CVE-2026-42504

- https://www.cve.org/CVERecord?id=CVE-2026-42507

- https://www.cve.org/CVERecord?id=CVE-2026-27145

- https://www.cve.org/CVERecord?id=CVE-2026-39822

- https://www.cve.org/CVERecord?id=CVE-2026-42505

Topics%20covered

Topics Covered

security advisory critical threat issue Mageia description

Resolution

SRPMS

- 10/core/golang-1.25.12-1.mga10

- 9/core/golang-1.25.12-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 20 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0276.html
Type: security
CVE: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145, CVE-2026-39822, CVE-2026-42505

Topics%20covered

Topics Covered

security advisory critical threat issue Mageia description

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.