[Bug 2080207] Re: Sync golang-1.22 1.22.7-1 (main) from Debian unstable (main)

[Graham Inggs]

This bug was fixed in the package golang-1.22 - 1.22.7-1
Sponsored for Shengjing Zhu (zhsj)

---------------
golang-1.22 (1.22.7-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.22.7
    + CVE-2024-34155: go/parser: stack exhaustion in all Parse* functions
    + CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
    + CVE-2024-34158: go/build/constraint: stack exhaustion in Parse

 -- Shengjing Zhu <zhsj at debian.org>  Mon, 09 Sep 2024 16:31:19 +0800

** Changed in: golang-1.22 (Ubuntu)
     Assignee: (unassigned) => Graham Inggs (ginggs)

** Changed in: golang-1.22 (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-30635

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-34155

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-34158

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.22 in Ubuntu.
https://bugs.launchpad.net/bugs/2080207

Title:
  Sync golang-1.22 1.22.7-1 (main) from Debian unstable (main)

Status in golang-1.22 package in Ubuntu:
  Fix Released

Bug description:
  Please sync golang-1.22 1.22.7-1 (main) from Debian unstable (main)

  Changelog entries since current oracular version 1.22.6-1:

  golang-1.22 (1.22.7-1) unstable; urgency=medium

    * Team upload
    * New upstream version 1.22.7
      + CVE-2024-34155: go/parser: stack exhaustion in all Parse* functions
      + CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
      + CVE-2024-34158: go/build/constraint: stack exhaustion in Parse

   -- Shengjing Zhu <zhsj at debian.org>  Mon, 09 Sep 2024 16:31:19 +0800

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.22/+bug/2080207/+subscriptions