[Bug 2106360] Re: Sync golang-1.24 1.24.2-1 (main) from Debian unstable (main)

[Jeremy Bícha]

This bug was fixed in the package golang-1.24 - 1.24.2-1
Sponsored for Shengjing Zhu (zhsj)

---------------
golang-1.24 (1.24.2-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.24.2
    + CVE-2025-22871: net/http: request smuggling through invalid chunked data

 -- Shengjing Zhu <zhsj at debian.org>  Thu, 03 Apr 2025 14:56:38 +0800

** Changed in: golang-1.24 (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2025-22871

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.24 in Ubuntu.
https://bugs.launchpad.net/bugs/2106360

Title:
  Sync golang-1.24 1.24.2-1 (main) from Debian unstable (main)

Status in golang-1.24 package in Ubuntu:
  Fix Released

Bug description:
  Please sync golang-1.24 1.24.2-1 (main) from Debian unstable (main)

  Changelog entries since current plucky version 1.24.1-1:

  golang-1.24 (1.24.2-1) unstable; urgency=medium

    * Team upload
    * New upstream version 1.24.2
      + CVE-2025-22871: net/http: request smuggling through invalid chunked data

   -- Shengjing Zhu <zhsj at debian.org>  Thu, 03 Apr 2025 14:56:38 +0800

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.24/+bug/2106360/+subscriptions