From b2d47a1c53a5220a22f2e4464de3e1f16758c0c2 Mon Sep 17 00:00:00 2001
From: Alexander Alten <alo.alt@me.com>
Date: Thu, 22 Oct 2026 09:14:45 +0200
Subject: [PATCH] Build with Go 1.27.3 and 1.26.10 for CVE-2026-111943

- go.mod: toolchain line set to the fixed Go version (go.mod)
- Dockerfiles: golang base image pinned to the fixed patch release (Dockerfile)
---
 Dockerfile | 2 +-
 go.mod     | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index ce392d6..6fd59bb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # Copyright 2026ff novatechflow (Alexander Alten)
 # SPDX-License-Identifier: PolyForm-Shield-1.0.0
-FROM golang:1.27-alpine AS build
+FROM golang:1.27.3-alpine AS build
 WORKDIR /src
 COPY go.mod ./
 COPY *.go ./
diff --git a/go.mod b/go.mod
index 9561824..ffd422b 100644
--- a/go.mod
+++ b/go.mod
@@ -3,3 +3,5 @@
 module polydisplay
 
 go 1.26
+
+toolchain go1.26.10