oss-sec mailing list archives

Fwd: Go 1.27.4 and Go 1.26.11 pre-announcement


From: Alan Coopersmith <alan.coopersmith () oracle com>
Date: Thu, 5 Nov 2026 14:27:23 -0800




-------- Forwarded Message --------
Subject:        [security] Go 1.27.4 and Go 1.26.11 pre-announcement
Date:   Thu, 5 Nov 2026 22:10:14 +0000
From:   announce () golang org
To:     golang-nuts () googlegroups com


Hello gophers,

We plan to issue Go 1.27.4 and Go 1.26.11 during US business hours on Tuesday, November 10.

These minor releases include PRIVATE security fixes to the standard library and the toolchain, covering the following CVEs:

  * CVE-2026-97033
  * CVE-2026-97034
  * CVE-2026-97035
  * CVE-2026-97036
  * CVE-2026-97037
  * CVE-2026-97038
  * CVE-2026-97039
  * CVE-2026-97040
  * CVE-2026-97041
  * CVE-2026-97042
  * CVE-2026-97043
  * CVE-2026-97054

Following our security policy, this is the pre-announcement of those releases.

Thanks,
Michael and Cherry for the Go team

--
You received this message because you are subscribed to the Google Groups "golang-announce" group. To view this discussion visit https://groups.google.com/d/msgid/golang-announce/e10c2e21.CAAACbsgFBkAAAAAAAAAA-p9MGAAAYKKSQYAAAAAADE8OwBq7P7G%40mailjet.com

Current thread: