Bugs fixes in "golang-1.22"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-78659 | When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the serv | 2026-10-21 |
| CVE | CVE-2026-78663 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-b | 2026-10-21 |
| CVE | CVE-2026-78669 | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small | 2026-10-21 |
| CVE | CVE-2026-78667 | When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amoun | 2026-10-21 |
| CVE | CVE-2026-94439 | When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly con | 2026-10-21 |
| CVE | CVE-2026-56866 | When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing afte | 2026-10-21 |
| CVE | CVE-2026-94440 | Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is le | 2026-10-21 |
| CVE | CVE-2026-78660 | Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 fram | 2026-10-21 |
| CVE | CVE-2026-56865 | A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist | 2026-10-21 |
| CVE | CVE-2026-33818 | Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. | 2026-10-21 |
| CVE | CVE-2026-56859 | Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. | 2026-10-21 |
| CVE | CVE-2026-56862 | Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a re | 2026-10-21 |
| CVE | CVE-2026-78659 | When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the serv | 2026-10-21 |
| CVE | CVE-2026-78663 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-b | 2026-10-21 |
| CVE | CVE-2026-78669 | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small | 2026-10-21 |
| CVE | CVE-2026-78667 | When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amoun | 2026-10-21 |
| CVE | CVE-2026-94439 | When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly con | 2026-10-21 |
| CVE | CVE-2026-56866 | When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing afte | 2026-10-21 |
| CVE | CVE-2026-94440 | Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is le | 2026-10-21 |
| CVE | CVE-2026-78660 | Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 fram | 2026-10-21 |
About
-
Send Feedback to @ubuntu_updates
