security: fix CVE-2026-56866 [1.26 backport] #81899

Activity

1. gopherbot

   added

   Security

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
2. gopherbot

   added this to the Go1.26.9 milestone on Sep 30, 2026
3. thatnealpatel

   added

   CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

   and removed

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
4. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Change https://go.dev/cl/847107 mentions this issue: [release-branch.go1.26] net/http, net/http/httputil: avoid post-CONNECT pool corruption
5. gopherbot

   added a commit that references this issue on Oct 8, 2026

   [release-branch.go1.26] net/http, net/http/httputil: avoid post-CONNE…

   ...

   This issue will close once commit 3fe1aac is merged into the 'master' branch.

   3fe1aac
6. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Closed by merging CL 847107 (commit 3fe1aac) to release-branch.go1.26.
7. gopherbot

   closed this as completedon Oct 8, 2026