[Git][security-tracker-team/security-tracker][master] Add new batch of go issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
96d4bc52 by Salvatore Bonaccorso at 2026-08-14T07:17:59+02:00
Add new batch of go issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,91 @@
+CVE-2026-56865
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80744
+	NOTE: Fixed by: https://github.com/golang/go/commit/b0365c1777662ae45534c0e728a12a8b19874759 (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/115eb476aaca4531374c42e19e6f199265c2e25e (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/b0b8c97d1386bb3eb978e727ed0b1df8e14df569 (go1.25.13)
+CVE-2026-56864
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80745
+	NOTE: Fixed by: https://github.com/golang/go/commit/a3876703796b5d3db7a7c6f2193e8663399f2339 (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/9f6980fd5c03840b0f6764e8ec7c705b90989eee (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/22e01669cdcabb9cfad02e0c2bffbce8198f6bfb (go1.25.13)
+CVE-2026-56859
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80481
+	NOTE: Fixed by: https://github.com/golang/go/commit/d5eeaa7de337f01173036096619cba09e31bde1a (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/9918f26ab31a6bf9209ecc06465cab0e287e90f1 (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/b952d04e2ab03d7b9049b2909e66dc91707089b4 (go1.25.13)
+CVE-2026-56853
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80205
+	NOTE: Fixed by: https://github.com/golang/go/commit/cb4d292bb634ab89a62995f2384df9389d876333 (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/5bbd22ff78daf010c5bd19c466a0c45ac78503d4 (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/784132491b1002342026712477725c0d742a53e8 (go1.25.13)
+CVE-2026-56860
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80494
+	NOTE: Fixed by: https://github.com/golang/go/commit/bd62f0c26450224a26857a6d38a738d31f8fbaf6 (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/128893dbf9a6b4d6e7c99942096e2c0018d6fe57 (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/962b300d32b68fd5f3c11674f711fc0e86251664 (go1.25.13)
+CVE-2026-56862
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80528
+	NOTE: Fixed by: https://github.com/golang/go/commit/95ae6418f3d8c588ecd6fb366707e04b6009028d (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/b6432317a176b1b5595aa597dc1864a4cc4a81b2 (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/677cfe54ecac147c4992e38204641bf61662524f (go1.25.13)
+CVE-2026-56858
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80435
+	NOTE: Fixed by: https://github.com/golang/go/commit/bcdba48a6adcaceabb3696e46b50be21dc739b5e (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/33ecb966ca47e55034272a9146e23e9909507f6d (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/cafd3448c7cb0b2d793bb4144d58f72ef3f48327 (go1.25.13)
+CVE-2026-33818
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/80405
+	NOTE: Fixed by: https://github.com/golang/go/commit/41cb2f352e2b4cfb93809ede794d7e5ee9ec2c68 (go1.27rc3)
+	NOTE: Fixed by: https://github.com/golang/go/commit/6ec908dd240103f222620a222bc8a4c3e2c33718 (go1.26.6)
+	NOTE: Fixed by: https://github.com/golang/go/commit/8d01cbaad59021bd6d4f6e2dd864413872434250 (go1.25.13)
 CVE-2026-16457
 	- qemu 1:11.1.0+ds-1
 	NOTE: https://gitlab.com/qemu-project/qemu/-/work_items/3968



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96d4bc52e88a5dce9dcb062f413f9d6b8311fbff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96d4bc52e88a5dce9dcb062f413f9d6b8311fbff
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260814/2a309d44/attachment.htm>