—

GO-2026-4981

Crash when handling long CNAME response in net

Quick fix

GO-2026-4981 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.25.10

Details

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Enter the version of the package you're using.

Introduced in: 0 Fixed in: 1.25.10

Fix go get stdlib@v1.25.10