Red Hat Product Errata RHSA-2026:8856 - Security Advisory Issued: 2026-04-20 Updated: 2026-04-20 RHSA-2026:8856 - Security Advisory Overview Updated Packages Synopsis Important: go-rpm-macros security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for go-rpm-macros is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2445356 - CVE-2026-25679 net/url: Incorrect parsing of IPv6 host literals in net/url CVEs CVE-2026-25679 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 x86_64 go-filesystem-3.6.0-6.el10_0.x86_64.rpm SHA-256: db89cb01c58963bdaa415c5624932ee5ef0a6539e4a20ee64eefe73937cb576d go-rpm-macros-3.6.0-6.el10_0.x86_64.rpm SHA-256: 9cefdfc69990b83fe1d30491d501d96fc7cd6ab1e386b21003e06479b39339bf go-rpm-macros-debuginfo-3.6.0-6.el10_0.x86_64.rpm SHA-256: 40501ffd29b29ea36e29836f22192419ff19434d14b53016abcec314d47699c3 go-rpm-macros-debugsource-3.6.0-6.el10_0.x86_64.rpm SHA-256: e46ec3e0f62072a068e2555a2675e5d386307dc0452110218ec15f3e717770b5 go-rpm-templates-3.6.0-6.el10_0.x86_64.rpm SHA-256: 174be79f86563ecbfe892f1d7345dbd8db0cd9663c33f6676bd7cc99bbe22008 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 s390x go-filesystem-3.6.0-6.el10_0.s390x.rpm SHA-256: c4821e669569e818e57a29a47b4ea8f1c2bc2ab7790e2f4c04998210cee81474 go-rpm-macros-3.6.0-6.el10_0.s390x.rpm SHA-256: 0b176357e6f0e1d7b73708c05a0295de8d1fd6a474d03e7b48b981d243818130 go-rpm-macros-debuginfo-3.6.0-6.el10_0.s390x.rpm SHA-256: 27358cb33d70b0daf0ca12534207e203ba21af1ab3638c65940da810b08458cc go-rpm-macros-debugsource-3.6.0-6.el10_0.s390x.rpm SHA-256: 9dc0ca8020ed858e46955ace4670abc9f0be0d30a5de9d4e5ab02733fb75376e go-rpm-templates-3.6.0-6.el10_0.s390x.rpm SHA-256: 45993349d47b85ffd8f54bc6576ef4732d9480926aafa0d667d49f5cb47ae3f4 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 ppc64le go-filesystem-3.6.0-6.el10_0.ppc64le.rpm SHA-256: 073621bf6a1c61b91d8009fbfd4f0673fab153f9073556b792a4389274b91d83 go-rpm-macros-3.6.0-6.el10_0.ppc64le.rpm SHA-256: 09c49e5ac16ebbe20d3de3537416048f8da90ee4f19deaf05500406a67ac9ae3 go-rpm-macros-debuginfo-3.6.0-6.el10_0.ppc64le.rpm SHA-256: fc6df08688be94823cbf6d6d2c8c211b7409adc06fdf388b8bc59918a51d6602 go-rpm-macros-debugsource-3.6.0-6.el10_0.ppc64le.rpm SHA-256: ebee863c44705c2e6b917b3ec7ac5a2a9456aca8728344b8df08fe6812658e33 go-rpm-templates-3.6.0-6.el10_0.ppc64le.rpm SHA-256: 7e4e8a64e7e4ddca0f8bab6a7de4f58bd65a24300f6bf7ef3d6421e81f6bee39 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 aarch64 go-filesystem-3.6.0-6.el10_0.aarch64.rpm SHA-256: 896358bddc9629a9f6ca3e2a0a76598992196756b506063d270e993d552cf860 go-rpm-macros-3.6.0-6.el10_0.aarch64.rpm SHA-256: db1417e61171f055cafae9515f7fd9c4128eb3ea43ccb45af54a56eba18efaa9 go-rpm-macros-debuginfo-3.6.0-6.el10_0.aarch64.rpm SHA-256: e3a30e11c4cb19ec79ed97e67a0dd4e7700dcb5cfc5ed3f36f4e6e170ed92c0a go-rpm-macros-debugsource-3.6.0-6.el10_0.aarch64.rpm SHA-256: 93e1be9cb57406bbea414ea676a8dc25257a255d6b2a5fbef5454e14b2d1afbb go-rpm-templates-3.6.0-6.el10_0.aarch64.rpm SHA-256: d67e927980458c9dad019342622030c50362ad2ae6f3190f7fa0cd87a09b4185 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 aarch64 go-filesystem-3.6.0-6.el10_0.aarch64.rpm SHA-256: 896358bddc9629a9f6ca3e2a0a76598992196756b506063d270e993d552cf860 go-rpm-macros-3.6.0-6.el10_0.aarch64.rpm SHA-256: db1417e61171f055cafae9515f7fd9c4128eb3ea43ccb45af54a56eba18efaa9 go-rpm-macros-debuginfo-3.6.0-6.el10_0.aarch64.rpm SHA-256: e3a30e11c4cb19ec79ed97e67a0dd4e7700dcb5cfc5ed3f36f4e6e170ed92c0a go-rpm-macros-debugsource-3.6.0-6.el10_0.aarch64.rpm SHA-256: 93e1be9cb57406bbea414ea676a8dc25257a255d6b2a5fbef5454e14b2d1afbb go-rpm-templates-3.6.0-6.el10_0.aarch64.rpm SHA-256: d67e927980458c9dad019342622030c50362ad2ae6f3190f7fa0cd87a09b4185 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 s390x go-filesystem-3.6.0-6.el10_0.s390x.rpm SHA-256: c4821e669569e818e57a29a47b4ea8f1c2bc2ab7790e2f4c04998210cee81474 go-rpm-macros-3.6.0-6.el10_0.s390x.rpm SHA-256: 0b176357e6f0e1d7b73708c05a0295de8d1fd6a474d03e7b48b981d243818130 go-rpm-macros-debuginfo-3.6.0-6.el10_0.s390x.rpm SHA-256: 27358cb33d70b0daf0ca12534207e203ba21af1ab3638c65940da810b08458cc go-rpm-macros-debugsource-3.6.0-6.el10_0.s390x.rpm SHA-256: 9dc0ca8020ed858e46955ace4670abc9f0be0d30a5de9d4e5ab02733fb75376e go-rpm-templates-3.6.0-6.el10_0.s390x.rpm SHA-256: 45993349d47b85ffd8f54bc6576ef4732d9480926aafa0d667d49f5cb47ae3f4 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 ppc64le go-filesystem-3.6.0-6.el10_0.ppc64le.rpm SHA-256: 073621bf6a1c61b91d8009fbfd4f0673fab153f9073556b792a4389274b91d83 go-rpm-macros-3.6.0-6.el10_0.ppc64le.rpm SHA-256: 09c49e5ac16ebbe20d3de3537416048f8da90ee4f19deaf05500406a67ac9ae3 go-rpm-macros-debuginfo-3.6.0-6.el10_0.ppc64le.rpm SHA-256: fc6df08688be94823cbf6d6d2c8c211b7409adc06fdf388b8bc59918a51d6602 go-rpm-macros-debugsource-3.6.0-6.el10_0.ppc64le.rpm SHA-256: ebee863c44705c2e6b917b3ec7ac5a2a9456aca8728344b8df08fe6812658e33 go-rpm-templates-3.6.0-6.el10_0.ppc64le.rpm SHA-256: 7e4e8a64e7e4ddca0f8bab6a7de4f58bd65a24300f6bf7ef3d6421e81f6bee39 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM go-rpm-macros-3.6.0-6.el10_0.src.rpm SHA-256: cf3ce98969a25203396a070ac0422d42151eeb14c37094b80d07949d2fcfc189 x86_64 go-filesystem-3.6.0-6.el10_0.x86_64.rpm SHA-256: db89cb01c58963bdaa415c5624932ee5ef0a6539e4a20ee64eefe73937cb576d go-rpm-macros-3.6.0-6.el10_0.x86_64.rpm SHA-256: 9cefdfc69990b83fe1d30491d501d96fc7cd6ab1e386b21003e06479b39339bf go-rpm-macros-debuginfo-3.6.0-6.el10_0.x86_64.rpm SHA-256: 40501ffd29b29ea36e29836f22192419ff19434d14b53016abcec314d47699c3 go-rpm-macros-debugsource-3.6.0-6.el10_0.x86_64.rpm SHA-256: e46ec3e0f62072a068e2555a2675e5d386307dc0452110218ec15f3e717770b5 go-rpm-templates-3.6.0-6.el10_0.x86_64.rpm SHA-256: 174be79f86563ecbfe892f1d7345dbd8db0cd9663c33f6676bd7cc99bbe22008 go-srpm-macros-3.6.0-6.el10_0.noarch.rpm SHA-256: add90e203a6b1e897e4cea23856d57ac4ef097d378327b3bdbd7dde338e53d28 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .