security: fix CVE-2026-97032 [1.27 backport] #81922

Activity

1. gopherbot

   added

   Security

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
2. gopherbot

   added this to the Go1.27.2 milestone on Sep 30, 2026
3. thatnealpatel

   added

   CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

   and removed

   CherryPickCandidateUsed during the release process for point releasesUsed during the release process for point releases

   on Sep 30, 2026
4. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Change https://go.dev/cl/847033 mentions this issue: [release-branch.go1.27] net/http/internal/http2: prevent crash due to HPACK encoder race
5. gopherbot

   added a commit that references this issue on Oct 8, 2026

   [release-branch.go1.27] net/http/internal/http2: prevent crash due to…

   ...

   This issue will close once commit 12acaf3 is merged into the 'master' branch.

   12acaf3
6. gopherbot commented on Oct 8, 2026

   

   gopherbot

   on Oct 8, 2026

   ContributorAuthor

   More actions

   Closed by merging CL 847033 (commit 12acaf3) to release-branch.go1.27.
7. gopherbot

   closed this as completedon Oct 8, 2026