Ubuntu
golang-1.20 package

  1. Bug #2015339
  2. Comment #1

Comment 1 for bug 2015339

Revision history for this message
Graham Inggs (ginggs) wrote :

This bug was fixed in the package golang-1.20 - 1.20.3-1
Sponsored for Shengjing Zhu (zhsj)

---------------
golang-1.20 (1.20.3-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.20.3
    + CVE-2023-24537: go/parser: infinite loop in parsing
    + CVE-2023-24538: html/template: backticks not treated as string delimiters
    + CVE-2023-24534: net/http, net/textproto: denial of service from excessive
      memory allocation
    + CVE-2023-24536: net/http, net/textproto, mime/multipart: denial of
      service from excessive resource consumption

 -- Shengjing Zhu <email address hidden> Wed, 05 Apr 2023 02:04:08 +0800