security: fix CVE-2026-56866 [1.27 backport] #81900

Activity

1. gopherbot

   added

   Security

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
2. gopherbot

   added this to the Go1.27.2 milestone on Sep 30, 2026
3. thatnealpatel

   added

   CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

   and removed

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
4. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Change https://go.dev/cl/847027 mentions this issue: [release-branch.go1.27] net/http, net/http/httputil: avoid post-CONNECT pool corruption
5. gopherbot

   added a commit that references this issue on Oct 8, 2026

   [release-branch.go1.27] net/http, net/http/httputil: avoid post-CONNE…

   ...

   This issue will close once commit 76875df is merged into the 'master' branch.

   76875df
6. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Closed by merging CL 847027 (commit 76875df) to release-branch.go1.27.
7. gopherbot

   closed this as completedon Oct 8, 2026