Cyber ·
Go 1.27.4 and Go 1.26.11: advance notice of private security fixes
The Go project said it plans to release Go 1.27.4 and Go 1.26.11 on November 10, with private security fixes for the standard library and toolchain, referenced by CVEs.
On November 5, 2026, an advance notice from the Go project was forwarded to the oss-sec mailing list and republished by Alan Coopersmith. According to the text, the project plans to release Go 1.27.4 and Go 1.26.11 during US business hours on Tuesday, November 10. Both are minor releases that include private security fixes for the standard library and the toolchain, identified by CVEs. The available excerpt does not include the full list of identifiers or a description of each flaw, and the original message indicates the list follows.
To consult and verify this, read the complete notice in the public oss-sec archive, referenced in the publication, then check the official Go release announcements and release notes, which should list the CVEs and affected versions. The text gives no information about specific impact on applications; assess that from the official notes.
Original source: Comunicado antecipado: Go 1.27.4 e Go 1.26.11