UbuntuUpdates.org

Package "golang-1.14"

Name: golang-1.14

Description:

Go programming language compiler - metapackage

Latest version: 1.14.3-2ubuntu2~20.04.2
Release: focal (20.04)
Level: updates
Repository: main
Homepage: https://golang.org

Links


Download "golang-1.14"


Other versions of "golang-1.14" in Focal

Repository Area Version
base main 1.14.2-1ubuntu1
security main 1.14.3-2ubuntu2~20.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.14.3-2ubuntu2~20.04.2 2021-03-08 20:07:34 UTC

  golang-1.14 (1.14.3-2ubuntu2~20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: XSS (LP: #1914372)
    - debian/patches/CVE-2020-24553.patch: Add Content-Type detection in
      net/http/cgi and net/http/fcgi.
    - CVE-2020-24553

 -- Dariusz Gadomski <email address hidden> Wed, 03 Feb 2021 10:03:32 +0100

Source diff to previous version
1914372 Ubuntu packages affected by CVE-2020-24553
CVE-2020-24553 Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.

Version: 1.14.3-2ubuntu2~20.04.1 2020-06-22 10:07:18 UTC

  golang-1.14 (1.14.3-2ubuntu2~20.04.1) focal; urgency=medium

  * Backport to focal. (LP: #1880040, #1881417)
  * Drop debhelper-compat back to 12.

 -- Michael Hudson-Doyle <email address hidden> Thu, 04 Jun 2020 11:58:08 +1200

1880040 missing cgo support on riscv



About   -   Send Feedback to @ubuntu_updates