[Git][security-tracker-team/security-tracker][master] Add CVE-2026-27139/golang

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6b8978c5 by Salvatore Bonaccorso at 2026-03-06T21:19:17+01:00
Add CVE-2026-27139/golang

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -178,6 +178,15 @@ CVE-2018-25162 (2-Plan Team 1.0.4 contains an arbitrary file upload vulnerabilit
 	TODO: check
 CVE-2018-25161 (Warranty Tracking System 11.06.3 contains an SQL injection vulnerabili ...)
 	TODO: check
+CVE-2026-27139
+	- golang-1.26 <unfixed>
+	- golang-1.25 <unfixed>
+	- golang-1.24 <unfixed>
+	- golang-1.19 <removed>
+	- golang-1.15 <removed>
+	NOTE: https://github.com/golang/go/issues/77827
+	NOTE: Fixed by: https://github.com/golang/go/commit/8cce3ab20c49a5c3c9fa8e97ad47335c3ccd2620 (go1.26.1)
+	NOTE: Fixed by: https://github.com/golang/go/commit/4091800393d254befde3770fd16f51200ebd5a3d (go1.25.8)
 CVE-2026-25679
 	- golang-1.26 <unfixed>
 	- golang-1.25 <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b8978c5548922445d5acccd315d50fe653c36c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b8978c5548922445d5acccd315d50fe653c36c5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260306/be2002b9/attachment.htm>