Skip to content

fix: build with Go 1.27.2 to fix stdlib DoS CVEs - #407

Merged
powerman merged 2 commits into
mainfrom
log0u7-fix/go-toolchain-1.27.2
Oct 10, 2026
Merged

powerman merged 2 commits into
mainfrom
log0u7-fix/go-toolchain-1.27.2

Conversation

@powerman

@powerman powerman commented Oct 10, 2026 •

Copy link
Copy Markdown
Owner

Fixes #406

log0u7 and others added 2 commits October 10, 2026 22:30
Releases are built with the toolchain from go.mod (go-version-file).
go1.26.6 binaries are affected by the net/http and crypto/tls DoS issues
CVE-2026-78667, CVE-2026-78669, CVE-2026-97031 (fixed in 1.26.9/1.27.2).
@powerman powerman changed the title Log0u7 fix/go toolchain 1.27.2 fix: build with Go 1.27.2 to fix stdlib DoS CVEs Oct 10, 2026
@powerman
powerman merged commit 5ecf4b9 into main Oct 10, 2026
38 of 39 checks passed
@powerman
powerman deleted the log0u7-fix/go-toolchain-1.27.2 branch October 10, 2026 21:01
@powerman powerman mentioned this pull request Oct 10, 2026
powerman added a commit that referenced this pull request Oct 10, 2026
### 🛡️ Security

- Build with Go 1.27.2 to fix stdlib DoS CVEs by @powerman in [#407]

[0.25.3]: https://github.com/powerman/dockerize/compare/v0.25.2..v0.25.3
[#407]: #407

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Release binaries embed Go 1.26.6 stdlib with known DoS CVEs (CVE-2026-78667, CVE-2026-78669, CVE-2026-97031)

2 participants