p PatchFirst

openSUSE-SU-2026:21494-1

openSUSE-SU-2026:21494-1 · Security update for gh

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version (boo#1266618).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • gh openSUSE:Leap 16.0

    Affected ranges
    • ECOSYSTEM: < 2.96.0-bp160.2.1

    Update to 2.96.0-bp160.2.1

Original sources

Check your server →