OPENSUSE-SU-2026:20976-1: go1.26&distro=openSUSE Leap 16.0 openSUSE

Published
Published 17-06-2026Last modified 24-06-2026

Vulnerability summary

OPENSUSE-SU-2026:20976-1 is a vulnerability in go1.26&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.

Priority
Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
Not scored
010
No CVSS score recorded
EPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0 · Related 3
CVE-2026-27145CVE-2026-42504CVE-2026-42507

Timeline

  1. 17-06-2026
    PublishedVulnerability first disclosed.
  2. 24-06-2026
    Last modifiedVulnerability information updated.

Description

Security update for go1.26 This update for go1.26 fixes the following issues Update to go1.26.4 (bsc#1255111): - CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450). - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442). - CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444). Changes: * go#79230 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader * go#79426 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors without any escaping * go#79701 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once * go#79191 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation * go#79226 crypto/internal/fips140/drbg: backport CL 774221 to Go 1.26 * go#79349 cmd/fix: x/tools/go/analysis/passes/modernize: slicescontains hoists needle expression, changing side effect count * go#79686 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: not stated in public data.

Opensuse1 product
  • go1.26&distro=openSUSE Leap 16.0< 1.26.4-160000.1.1

1 vendor · 1 product

References

9 links