OPENSUSE-SU-2026:20976-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

SUSE CVE-2026-42507

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged...

CVE-2026-42507

creationtimestamp| type| source ---|---|--- 2026-06-03 02:41:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3iwbcgy25 2026-06-03 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2rtqtu32f 2026-06-08 13:20:20+00:00| seen|...