
(Original content archived at 2018-09-21). Google QQ
internal/bytealg, strings, bytes: vectorize Index for arm64 with NEON
runtime: stop-the-world never completes while goroutines are blocked in read(2) on a pipe (go1.26 regression)
html/template: XSS via stale jsCtx at template-literal expression entry, tJSTmpl `${`
x/tools: support for go1.28's rejection of string(int) conversions
cmd/go: malicious GOMODPROXY can cause golang.org/toolchain checksum bypass
x/tools/gopls: stubmethods: SEGV after failed Cursor.FindByPos fails in GetIfaceStubInfo
cmd/go: malicious GOMODPROXY can cause golang.org/fips140 checksum bypass
x/net/http2: New wrapped http2 implementation (go1.27+) missing single flight mechanism
cmd/go: build cache management
cmd/dist: `{CC,CXX}_FOR_TARGET` is incorrectly embedded into output when cross-compiling