[Git][security-tracker-team/security-tracker][master] Add more golang issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Oct 8 21:56:41 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e49d058f by Salvatore Bonaccorso at 2026-10-08T22:56:26+02:00
Add more golang issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38,6 +38,114 @@ CVE-2026-94444
 	NOTE: https://github.com/golang/go/issues/81833
 	NOTE: Fixed by: https://github.com/golang/go/commit/1e4f1fec6fb468a23979823b8c3cbec5c8fca1af (go1.27.2)
 	NOTE: Fixed by: https://github.com/golang/go/commit/5fa9de469645f7c45afe3bca767b929f5226bb1c (go1.26.9)
+CVE-2026-94447
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81834
+	NOTE: Fixed by: https://github.com/golang/go/commit/68fa7699a27d745f90bf8630202e1a415d1b0769 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/7325b729f07c7ff255b9b5e3f427234ebd21ac47 (go1.26.9)
+CVE-2026-94448
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81821
+	NOTE: Fixed by: https://github.com/golang/go/commit/b26d150e6985f804826f4fcb1aa33aa81e700b52 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/e59c03e695f2eaa26e308f756c83773afb034e47 (go1.26.9)
+CVE-2026-97030
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81823
+	NOTE: Fixed by: https://github.com/golang/go/commit/6e2cfab0a1c1683c52f9e09270627b0c4e6446e3 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/5d84f6f08caf63b5f1300930368756bd34955f4a (go1.26.9)
+CVE-2026-94440
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81741
+	NOTE: Fixed by: https://github.com/golang/go/commit/7c79b50a74b6d1aa4269b1827dda7d81f3717f9d (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/d7a7aa8e6781ddf8dce12adf60a813d957d4763e (go1.26.9)
+CVE-2026-56866
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81740
+	NOTE: Fixed by: https://github.com/golang/go/commit/76875df0f3425f69e4dc2c439040a248b6107854 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/3fe1aac0ce941cb16b0ec5d489827cf1c58197c4 (go1.26.9)
+CVE-2026-94439
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81744
+	NOTE: Fixed by: https://github.com/golang/go/commit/e92229e24a387cc006a750af176b07a459ba71a1 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/087de1ff08ea620ac2f6ae26c939454cb793883a (go1.26.9)
+CVE-2026-78669
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81742
+	NOTE: Fixed by: https://github.com/golang/go/commit/1d58cdaa1069e259b60c324ec77472f09f23d92e (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
+CVE-2026-78660
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81115
+	NOTE: Fixed by: https://github.com/golang/go/commit/072779d81582543bf2872c259e0c6cceea728de4 (go1.27.2)
+	TODO: check might need tracking for golang-golang-x-net
+CVE-2026-56857
+	- golang-1.27 <not-affected> (Only affects Go on Windows)
+	- golang-1.26 <not-affected> (Only affects Go on Windows)
+	- golang-1.25 <not-affected> (Only affects Go on Windows)
+	- golang-1.24 <not-affected> (Only affects Go on Windows)
+	- golang-1.19 <not-affected> (Only affects Go on Windows)
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81739
+CVE-2026-78667
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81858
+	NOTE: Fixed by: https://github.com/golang/go/commit/ababc3cd873d8acce1777268aa7a817e6b672028 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/eb25b4e532c5a01f99ef860ec66743a8783f992b (go1.26.9)
+CVE-2026-78663
+	- golang-1.27 <unfixed>
+	- golang-1.26 <unfixed>
+	- golang-1.25 <removed>
+	- golang-1.24 <removed>
+	- golang-1.19 <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/08/9
+	NOTE: https://github.com/golang/go/issues/81743
+	NOTE: Fixed by: https://github.com/golang/go/commit/31dc9e2449e394439498142451627af52626d7c4 (go1.27.2)
+	NOTE: Fixed by: https://github.com/golang/go/commit/6e049521882c944afc1e519a83971ec421dc2974 (go1.26.9)
 CVE-2026-XXXX [TROVE-2026-062]
 	- tor 0.4.9.14-1
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41413



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e49d058f2138251dac1898e60c6d2be9ba7d54ad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e49d058f2138251dac1898e60c6d2be9ba7d54ad
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/8d7e0413/attachment.htm>

More information about the debian-security-tracker-commits mailing list