UBUNTU-CVE-2026-111943

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-111943
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-111943
Upstream
  • CVE-2026-111943
Published
2026-10-23T00:00:00Z
Modified
2026-10-23T10:35:55Z
Severity
  • Ubuntu - medium
Summary
[none]
Details

(On most platforms, Go uses the given system root certificates. However ...)

References

Affected packages

Ubuntu:22.04:LTS
golang-1.24

Package

Name
golang-1.24
Purl
pkg:deb/ubuntu/golang-1.24?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.24.4-1ubuntu1~22.04.1
1.24.4-1ubuntu1~22.04.2
1.24.13-2~22.04.1
1.24.13-2~22.04.2

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.24",
            "binary_version":  "1.24.13-2~22.04.2"
        },
        {
            "binary_name":  "golang-1.24-go",
            "binary_version":  "1.24.13-2~22.04.2"
        },
        {
            "binary_name":  "golang-1.24-src",
            "binary_version":  "1.24.13-2~22.04.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.25

Package

Name
golang-1.25
Purl
pkg:deb/ubuntu/golang-1.25?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.25.14-1~ubuntu0.22.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.25",
            "binary_version":  "1.25.14-1~ubuntu0.22.04.1"
        },
        {
            "binary_name":  "golang-1.25-go",
            "binary_version":  "1.25.14-1~ubuntu0.22.04.1"
        },
        {
            "binary_name":  "golang-1.25-src",
            "binary_version":  "1.25.14-1~ubuntu0.22.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.26

Package

Name
golang-1.26
Purl
pkg:deb/ubuntu/golang-1.26?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.26.8-1~ubuntu0.22.04.2

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.26",
            "binary_version":  "1.26.8-1~ubuntu0.22.04.2"
        },
        {
            "binary_name":  "golang-1.26-go",
            "binary_version":  "1.26.8-1~ubuntu0.22.04.2"
        },
        {
            "binary_name":  "golang-1.26-src",
            "binary_version":  "1.26.8-1~ubuntu0.22.04.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
Ubuntu:24.04:LTS
golang-1.24

Package

Name
golang-1.24
Purl
pkg:deb/ubuntu/golang-1.24?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.24.4-1ubuntu1~24.04.1
1.24.4-1ubuntu1~24.04.2
1.24.13-2~24.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.24",
            "binary_version":  "1.24.13-2~24.04.1"
        },
        {
            "binary_name":  "golang-1.24-go",
            "binary_version":  "1.24.13-2~24.04.1"
        },
        {
            "binary_name":  "golang-1.24-src",
            "binary_version":  "1.24.13-2~24.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.25

Package

Name
golang-1.25
Purl
pkg:deb/ubuntu/golang-1.25?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.25.14-1~ubuntu0.24.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.25",
            "binary_version":  "1.25.14-1~ubuntu0.24.04.1"
        },
        {
            "binary_name":  "golang-1.25-go",
            "binary_version":  "1.25.14-1~ubuntu0.24.04.1"
        },
        {
            "binary_name":  "golang-1.25-src",
            "binary_version":  "1.25.14-1~ubuntu0.24.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.26

Package

Name
golang-1.26
Purl
pkg:deb/ubuntu/golang-1.26?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.26.8-1~ubuntu0.24.04.2

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.26",
            "binary_version":  "1.26.8-1~ubuntu0.24.04.2"
        },
        {
            "binary_name":  "golang-1.26-go",
            "binary_version":  "1.26.8-1~ubuntu0.24.04.2"
        },
        {
            "binary_name":  "golang-1.26-src",
            "binary_version":  "1.26.8-1~ubuntu0.24.04.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
Ubuntu:26.04:LTS
golang-1.24

Package

Name
golang-1.24
Purl
pkg:deb/ubuntu/golang-1.24?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.24.4-1ubuntu1
1.24.9-1
1.24.13-2

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.24",
            "binary_version":  "1.24.13-2"
        },
        {
            "binary_name":  "golang-1.24-go",
            "binary_version":  "1.24.13-2"
        },
        {
            "binary_name":  "golang-1.24-src",
            "binary_version":  "1.24.13-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.25

Package

Name
golang-1.25
Purl
pkg:deb/ubuntu/golang-1.25?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.25.0-0ubuntu1
1.25.7-2
1.25.14-1~ubuntu0.26.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.25",
            "binary_version":  "1.25.14-1~ubuntu0.26.04.1"
        },
        {
            "binary_name":  "golang-1.25-go",
            "binary_version":  "1.25.14-1~ubuntu0.26.04.1"
        },
        {
            "binary_name":  "golang-1.25-src",
            "binary_version":  "1.25.14-1~ubuntu0.26.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.26

Package

Name
golang-1.26
Purl
pkg:deb/ubuntu/golang-1.26?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.26~rc3-2
1.26.0-1
1.26.8-1~ubuntu0.26.04.2

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.26",
            "binary_version":  "1.26.8-1~ubuntu0.26.04.2"
        },
        {
            "binary_name":  "golang-1.26-go",
            "binary_version":  "1.26.8-1~ubuntu0.26.04.2"
        },
        {
            "binary_name":  "golang-1.26-src",
            "binary_version":  "1.26.8-1~ubuntu0.26.04.2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
Ubuntu:26.10
golang-1.26

Package

Name
golang-1.26
Purl
pkg:deb/ubuntu/golang-1.26?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.26.0-1
1.26.2-3
1.26.4-1
1.26.5-1
1.26.6-2
1.26.7-1
1.26.8-1
1.26.8-2

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.26",
            "binary_version":  "1.26.8-2"
        },
        {
            "binary_name":  "golang-1.26-go",
            "binary_version":  "1.26.8-2"
        },
        {
            "binary_name":  "golang-1.26-src",
            "binary_version":  "1.26.8-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"
golang-1.27

Package

Name
golang-1.27
Purl
pkg:deb/ubuntu/golang-1.27?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.27~rc1-1
1.27~rc2-1
1.27~rc3-1
1.27.0-1
1.27.1-1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "golang-1.27",
            "binary_version":  "1.27.1-1"
        },
        {
            "binary_name":  "golang-1.27-go",
            "binary_version":  "1.27.1-1"
        },
        {
            "binary_name":  "golang-1.27-src",
            "binary_version":  "1.27.1-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-111943.json"