UbuntuUpdates.org

Package "golang-1.13-go"

Name: golang-1.13-go

Description:

Go programming language compiler, linker, compiled stdlib

Latest version: 1.13.8-1ubuntu1~18.04.4
Release: bionic (18.04)
Level: security
Repository: universe
Head package: golang-1.13
Homepage: https://golang.org

Links


Download "golang-1.13-go"


Other versions of "golang-1.13-go" in Bionic

Repository Area Version
updates universe 1.13.8-1ubuntu1~18.04.4

Changelog

Version: 1.13.8-1ubuntu1~18.04.4 2022-11-15 10:06:22 UTC

  golang-1.13 (1.13.8-1ubuntu1~18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: Infinite read loop via invalid inputs
    - debian/patches/CVE-2020-16845.patch: ensure that ReadUvarint
      reads a limited amount of data in src/encoding/binary/varint.go.
    - CVE-2020-16845

 -- David Fernandez Gonzalez <email address hidden> Wed, 09 Nov 2022 11:26:09 +0100

Source diff to previous version
CVE-2020-16845 Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.

Version: 1.13.8-1ubuntu1~18.04.3 2021-05-19 11:06:21 UTC

  golang-1.13 (1.13.8-1ubuntu1~18.04.3) bionic-security; urgency=medium

  * No change rebuild

 -- Eduardo Barretto <email address hidden> Mon, 17 May 2021 13:01:29 +0200




About   -   Send Feedback to @ubuntu_updates