[Bug 2015340] [NEW] Sync golang-1.19 1.19.8-1 (main) from Debian experimental (main)

[Shengjing Zhu]

Public bug reported:

Please sync golang-1.19 1.19.8-1 (main) from Debian experimental (main)

Changelog entries since current lunar version 1.19.7-1:

golang-1.19 (1.19.8-1) experimental; urgency=medium

  * Team upload
  * New upstream version 1.19.8
    + CVE-2023-24537: go/parser: infinite loop in parsing
    + CVE-2023-24538: html/template: backticks not treated as string delimiters
    + CVE-2023-24534: net/http, net/textproto: denial of service from excessive
      memory allocation
    + CVE-2023-24536: net/http, net/textproto, mime/multipart: denial of
      service from excessive resource consumption

 -- Shengjing Zhu <zhsj at debian.org>  Wed, 05 Apr 2023 02:15:56 +0800

** Affects: golang-1.19 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.19 in Ubuntu.
https://bugs.launchpad.net/bugs/2015340

Title:
  Sync golang-1.19 1.19.8-1 (main) from Debian experimental (main)

Status in golang-1.19 package in Ubuntu:
  New

Bug description:
  Please sync golang-1.19 1.19.8-1 (main) from Debian experimental
  (main)

  Changelog entries since current lunar version 1.19.7-1:

  golang-1.19 (1.19.8-1) experimental; urgency=medium

    * Team upload
    * New upstream version 1.19.8
      + CVE-2023-24537: go/parser: infinite loop in parsing
      + CVE-2023-24538: html/template: backticks not treated as string delimiters
      + CVE-2023-24534: net/http, net/textproto: denial of service from excessive
        memory allocation
      + CVE-2023-24536: net/http, net/textproto, mime/multipart: denial of
        service from excessive resource consumption

   -- Shengjing Zhu <zhsj at debian.org>  Wed, 05 Apr 2023 02:15:56 +0800

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.19/+bug/2015340/+subscriptions