p PatchFirst

openSUSE-SU-2026:20977-1

openSUSE-SU-2026:20977-1 · Security update for go1.25

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

This update for go1.25 fixes the following issues Update to go1.25.11 (bsc#1244485): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444). Changes: * go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader * go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors without any escaping * go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once * go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation * go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64

Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • go1.25 openSUSE:Leap 16.0

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1.25.11-160000.1.1

    Actualiza a 1.25.11-160000.1.1

Fuentes originales

Comprueba tu servidor →