10 matches found
CLEANSTART-2026-DP92831 Security fix for ghsa-j5w8-q4qc-rx2x applied in: go1.27 1.25.5-r0
Security vulnerability affects the go1.27 package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CU11188 Security fix for ghsa-f6x5-jh6r-wrfv applied in: go1.27 1.25.5-r0
Security vulnerability affects the go1.27 package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YX19241 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Security vulnerability affects the go1.27 package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...
CLEANSTART-2026-IF00623 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content
Security vulnerability affects the go1.27 package. Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content...
CLEANSTART-2026-DH14395 net/url package does not set a limit on the number of query parameters in a query
Security vulnerability affects the go1.27 package. The net/url package does not set a limit on the number of query parameters in a query...
CLEANSTART-2026-SF92168 Downloading and building modules with malicious version strings can cause local code execution
Security vulnerability affects the go1.27 package. Downloading and building modules with malicious version strings can cause local code execution...
CLEANSTART-2026-NS20833 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened
Security vulnerability affects the go1.27 package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...
CLEANSTART-2026-CV14251 Security fix for ghsa-jq53-42q6-pqr5 applied in: go1.27 1.25.6-r0
Security vulnerability affects the go1.27 package. This issue is resolved in later releases. See references for vulnerability details...
SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:3830-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3830-1 advisory. - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through Augu...
SUSE-SU-2026:3830-1 Security update for go1.27
This update for go1.27 fixes the following issues: - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1.26. Most of its changes are in the...