oss-security - Fwd: Go 1.27.4 and Go 1.26.11 pre-announcement

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <03bc7bfa-5832-4582-a5f4-47fd06d1b45a@oracle.com>
Date: Thu, 5 Nov 2026 14:27:23 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: Fwd: Go 1.27.4 and Go 1.26.11 pre-announcement




-------- Forwarded Message --------
Subject: 	[security] Go 1.27.4 and Go 1.26.11 pre-announcement
Date: 	Thu, 5 Nov 2026 22:10:14 +0000
From: 	announce@...ang.org
To: 	golang-nuts@...glegroups.com


Hello gophers,

We plan to issue Go 1.27.4 and Go 1.26.11 during US business hours on Tuesday, 
November 10.

These minor releases include PRIVATE security fixes to the standard library and 
the toolchain, covering the following CVEs:

   * CVE-2026-97033
   * CVE-2026-97034
   * CVE-2026-97035
   * CVE-2026-97036
   * CVE-2026-97037
   * CVE-2026-97038
   * CVE-2026-97039
   * CVE-2026-97040
   * CVE-2026-97041
   * CVE-2026-97042
   * CVE-2026-97043
   * CVE-2026-97054

Following our security policy, this is the pre-announcement of those releases.

Thanks,
Michael and Cherry for the Go team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-announce" group.
To view this discussion visit 
https://groups.google.com/d/msgid/golang-announce/e10c2e21.CAAACbsgFBkAAAAAAAAAA-p9MGAAAYKKSQYAAAAAADE8OwBq7P7G%40mailjet.com

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.