[Git][security-tracker-team/security-tracker][master] Add first batch of new golang issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d60988ba by Salvatore Bonaccorso at 2026-10-08T22:34:15+02:00
Add first batch of new golang issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,43 @@
+CVE-2026-97032
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81867
+	NOTE: Fixed by: https://github.com/golang/go/commit/12acaf3086437e140e2dd3b7d2c30fdd633c5fe0 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+CVE-2026-78659
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81857
+	NOTE: Fixed by: https://github.com/golang/go/commit/cbb0fb8b51cba866018b8a0fb4b5458f16c5c80b (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+CVE-2026-97031
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81855
+	NOTE: Fixed by: https://github.com/golang/go/commit/f022e61963529d5e691f0e42a87fd5b520f01636 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/eb1bf6e0c4f68b23409483b156e1455696508c6e (go1.26.9)
+CVE-2026-94444
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81833
+	NOTE: Fixed by: https://github.com/golang/go/commit/1e4f1fec6fb468a23979823b8c3cbec5c8fca1af (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/5fa9de469645f7c45afe3bca767b929f5226bb1c (go1.26.9)
 CVE-2026-XXXX [TROVE-2026-062]
 	- tor 0.4.9.14-1
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41413



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d60988baaa3f09098c30e9cb60ad628e9e92eeb6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d60988baaa3f09098c30e9cb60ad628e9e92eeb6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/50199120/attachment.htm>