[Bug 2080209] [NEW] Sync golang-1.23 1.23.1-1 (main) from Debian unstable (main)
Launchpad Bug Tracker
2080209 at bugs.launchpad.net
Tue Sep 10 08:10:58 UTC 2024
You have been subscribed to a public bug by Shengjing Zhu (zhsj):
Please sync golang-1.23 1.23.1-1 (main) from Debian unstable (main)
Changelog entries since current oracular version 1.23.0-1:
golang-1.23 (1.23.1-1) unstable; urgency=medium
* Team upload
* New upstream version 1.23.1
+ CVE-2024-34155: go/parser: stack exhaustion in all Parse* functions
+ CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
+ CVE-2024-34158: go/build/constraint: stack exhaustion in Parse
-- Shengjing Zhu <zhsj at debian.org> Mon, 09 Sep 2024 16:26:12 +0800
** Affects: golang-1.23 (Ubuntu)
Importance: Wishlist
Status: New
--
Sync golang-1.23 1.23.1-1 (main) from Debian unstable (main)
https://bugs.launchpad.net/bugs/2080209
You received this bug notification because you are a member of Ubuntu Sponsors, which is subscribed to the bug report.
More information about the Ubuntu-sponsors
mailing list