PatchFirst · Свежие уязвимости
За последние 30 дней в go1.27 опубликовано уязвимостей: 2; в каталоге KEV: 0.
Уязвимостей: 3
This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).
This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). - CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). - CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). - CVE-2026-78667: net/http: lack of limit on size of pars
This update for go1.27 fixes the following issues: - go1.27.0 (released 2026-08-19) is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1.26. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As always, the release maintains the Go 1 promise of compatibility. We expect almost all Go programs to continue to compile and run as before. (bsc#1272545) * Language change: Go 1.27 now supports generic methods: a method declaration may declare its own type parameters. This
Сопоставьте установленный стек и версии со свежими базами уязвимостей.