PatchFirst · Vulnérabilités récentes
Vulnérabilités publiées pour go1.27 au cours des 30 derniers jours : 2. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 2
This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).
This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). - CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). - CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). - CVE-2026-78667: net/http: lack of limit on size of pars
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.