x/net/html security fix pre-announced for October 27
🐿️ GoDaily - October 23, 2026
The Go security team has pre-announced a golang.org/x/net/html fix landing during US business hours on Tuesday October 27, covering multiple CVEs, so anyone pulling that module into a server has a calendar entry to make. Elsewhere, there is a proposal to let os/exec install seccomp-bpf filters between fork and execve on Linux, which pairs nicely with the week's sandboxing mood, and a smaller one from mvdan to add io/fs.ErrNotDir for code probing candidate directories.
Proposals 2
Proposal Details Idea On Linux, support enforcing Seccomp-BPF filters between fork (2) and execve (2), when executing subprocesses through os/exec . S
Proposal Details Code that probes candidate directories, such as a package loader checking whether foo/bar holds a package, needs to treat "a path ele
Discussions 1
Hello gophers, We plan to issue a security fix for the package golang.org/x/net/html in the golang.org/x/net module during US business hours on Tuesday, October 27. This will cover the following CVEs:
Events 2
Join GoSF @ San Francisco, US on Thu Nov 5
Articles 5
The hidden design mistakes that make dependency injection harder than it should be Continue reading on Stackademic »
Is 1.0.0–1 older or newer than 1.0.0? Three of six version parsers say newer, two say older, one refuses to parse it. A run-it-yourself… Continue reading on Medium »
Ever found yourself staring at that monthly AWS bill, just kinda wishing it was a little less hefty? Like, seriously, what’s the deal with… Continue reading on Medium »
What Temporal is, where it shines and where it hurts, and how Zoop uses it to enrich customer sheets with pause, resume, stop and retries… Continue reading on Zoop Engineering »
Introduction Continue reading on Medium »
Videos 5
Running an open-source AI model on your own hardware sounds straightforward. Load a model, send a prompt, get an answer.
Why are Kubernetes, Docker, Terraform, and so many infrastructure tools written in Go? The answer comes down to a ...
Want to learn coding in 2025 but confused about where to start? In this video, we cover the Top 5 Programming Languages that ...
go-staticmaps: A go (golang) library and command line tool to render static. 2 minutes from clone to running. 2 minutes from clone ...
Getting Started with Go Review: UC Irvine's Golang Course on Coursera Getting Started with Go (UC Irvine) on Coursera: ...
Social 1
Stop paying cloud taxes for managed DBs. Build a Kubernetes Operator in Go! ⚙️ Scaffold with Kubebuilder, fix SSA TypeMeta crashes, automate testing in CircleCI, and scale on Bare Metal: 🔗 www.
Jobs 1
Enjoying this issue? Share it →