openSUSE-SU-2026:21494-1
openSUSE-SU-2026:21494-1 · Security update for gh
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version (boo#1266618).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
gh openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 2.96.0-bp160.2.1
Update to 2.96.0-bp160.2.1