[Bug 2106359] Re: Sync golang-1.23 1.23.8-1 (universe) from Debian unstable (main)

[Jeremy Bícha]

This bug was fixed in the package golang-1.23 - 1.23.8-1
Sponsored for Shengjing Zhu (zhsj)

---------------
golang-1.23 (1.23.8-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.23.8
    + CVE-2025-22871: net/http: request smuggling through invalid chunked data

 -- Shengjing Zhu <zhsj at debian.org>  Thu, 03 Apr 2025 15:05:52 +0800

** Changed in: golang-1.23 (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2025-22871

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.23 in Ubuntu.
https://bugs.launchpad.net/bugs/2106359

Title:
  Sync golang-1.23 1.23.8-1 (universe) from Debian unstable (main)

Status in golang-1.23 package in Ubuntu:
  Fix Released

Bug description:
  Please sync golang-1.23 1.23.8-1 (universe) from Debian unstable
  (main)

  Changelog entries since current plucky version 1.23.7-1:

  golang-1.23 (1.23.8-1) unstable; urgency=medium

    * Team upload
    * New upstream version 1.23.8
      + CVE-2025-22871: net/http: request smuggling through invalid chunked data

   -- Shengjing Zhu <zhsj at debian.org>  Thu, 03 Apr 2025 15:05:52 +0800

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.23/+bug/2106359/+subscriptions