Go 1.26.6 and Go 1.25.13: Ten Security Fixes
By BIOS Founding Team
These point releases bundled ten security fixes across the standard library, including hardening of module verification against a GOPROXY attack that could forge sumdb tiles to bypass GOSUMDB checks, and stricter recursion limits in ASN.1 unmarshaling to prevent stack exhaustion.
It also changed TLS handshake behavior to stop malicious clients from forcing excessive key-derivation work, with additional fixes to html/template, net/url, and idna.
Full details: https://groups.google.com/g/golang-announce/c/94pEornpRlI
More from the community
Stable and Longterm Kernel Updates: 7.2.4, 6.18.50, 6.12.109
Greg Kroah-Hartman pushed out new stable and longterm point releases across the 7.2, 6.18, and 6.12 lines, each bundling accumulated fixes across drivers, filesystems, and core subsystems.
Rust Debugging Survey 2026 Results
The Rust Project published results from its 2026 debugging survey, gathering community feedback on debugging tools and workflows to guide future tooling investment.
Docker Desktop 4.90.0
This release made 'Ask Gordon,' Docker's AI assistant, accessible as a persistent right-side drawer and added one-click AI diagnosis for containers, images, and volumes with detected issues.