security: fix CVE-2026-78659 [1.27 backport] #81918

Activity

1. gopherbot

   added

   Security

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
2. gopherbot

   added this to the Go1.27.2 milestone on Sep 30, 2026
3. thatnealpatel

   added

   CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

   and removed

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
4. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Change https://go.dev/cl/847034 mentions this issue: [internal-release-branch.go1.27.2] net/http: apply header limits to Trailer headers too
5. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Change https://go.dev/cl/847034 mentions this issue: [release-branch.go1.27] net/http: apply header limits to Trailer headers too
6. gopherbot

   added a commit that references this issue on Oct 8, 2026

   [release-branch.go1.27] net/http: apply header limits to Trailer head…

   ...

   This issue will close once commit cbb0fb8 is merged into the 'master' branch.

   cbb0fb8
7. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Closed by merging CL 847034 (commit cbb0fb8) to release-branch.go1.27.
8. gopherbot

   closed this as completedon Oct 8, 2026