openSUSE-SU-2026:22152-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22152-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22152-1
Upstream
CVE (3)
  • CVE-2026-111943
  • CVE-2026-78663
  • CVE-2026-78669
Related
CVE (3)
  • CVE-2026-111943
  • CVE-2026-78663
  • CVE-2026-78669
Published
2026-10-21T21:28:31Z
Modified
2026-10-24T17:23:12Z
Summary
Security update for go1.26
Details

This update for go1.26 fixes the following issues:

Update to go 1.26.10 (bsc#1255111):

  • CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770).
  • CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772).
  • CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).
References

Affected packages

openSUSE:Leap 16.0 / go1.26

Package

Name
go1.26
Purl
pkg:rpm/opensuse/go1.26&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.26.10-160000.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "go1.26":  "1.26.10-160000.1.1",
            "go1.26-doc":  "1.26.10-160000.1.1",
            "go1.26-race":  "1.26.10-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22152-1.json"