Package "golang-1.22"
Name: |
golang-1.22
|
Description: |
Go programming language compiler - metapackage
|
Latest version: |
1.22.2-2ubuntu0.1 |
Release: |
noble (24.04) |
Level: |
security |
Repository: |
main |
Homepage: |
https://go.dev/ |
Links
Download "golang-1.22"
Other versions of "golang-1.22" in Noble
Packages in group
Deleted packages are displayed in grey.
Changelog
golang-1.22 (1.22.2-2ubuntu0.1) noble-security; urgency=medium
* SECURITY UPDATE: denial of service issue
- debian/patches/CVE-2024-24788.patch: net: check SkipAdditional error
result
- CVE-2024-24788
* SECURITY UPDATE: denial of service issue
- debian/patches/CVE-2024-24789.patch: archive/zip: treat truncated
EOCDR comment as an error
- debian/source/include-binaries: Add zip testdata file
- CVE-2024-24789
* SECURITY UPDATE: incorrect IPv4-mapped IPv6 addresses issue
- debian/patches/CVE-2024-24790.patch: net/netip: check if address is
v6 mapped in Is methods
- CVE-2024-24790
-- Nishit Majithia <email address hidden> Mon, 08 Jul 2024 17:42:31 +0530
|
CVE-2024-24788 |
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop. |
CVE-2024-24789 |
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment cou |
CVE-2024-24790 |
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which woul |
|
About
-
Send Feedback to @ubuntu_updates