[ubuntu/lunar-proposed] golang-1.20 1.20.3-1 (Accepted)

Shengjing Zhu zsj950618 at gmail.com
Wed Apr 5 11:21:13 UTC 2023


golang-1.20 (1.20.3-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.20.3
    + CVE-2023-24537: go/parser: infinite loop in parsing
    + CVE-2023-24538: html/template: backticks not treated as string delimiters
    + CVE-2023-24534: net/http, net/textproto: denial of service from excessive
      memory allocation
    + CVE-2023-24536: net/http, net/textproto, mime/multipart: denial of
      service from excessive resource consumption

Date: 2023-04-04 22:27:55.356603+00:00
Signed-By: Graham Inggs <graham.inggs+ubuntu at gmail.com>
https://launchpad.net/ubuntu/+source/golang-1.20/1.20.3-1
-------------- next part --------------
Sorry, changesfile not available.


More information about the lunar-changes mailing list