golang-1.20 1.20.3-1ubuntu0.1~22.04.1 source package in Ubuntu

Changelog

golang-1.20 (1.20.3-1ubuntu0.1~22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: XSS issue
    - debian/patches/CVE-2023-39318.patch: support HTML-like comments in
      script contexts
    - debian/patches/CVE-2023-39319.patch: roperly handle special tags
      within the script context
    - CVE-2023-39318
    - CVE-2023-39319
  * SECURITY UPDATE: bypass directives restrictions
    - debian/patches/CVE-2023-39323.patch: cmd/compile: use absolute file
      name in isCgo check
    - CVE-2023-39323
  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2023-39325_44487.patch: http2: limit maximum
      handler goroutines to MaxConcurrentStreams
    - CVE-2023-39325
    - CVE-2023-44487
  * SECURITY UPDATE: out-of-bound read
    - debian/patches/CVE-2023-39326.patch: net/http: limit chunked data
      overhead
    - CVE-2023-39326
  * SECURITY UPDATE: bypass secure protocol
    - debian/patches/CVE-2023-45285.patch: error out if the requested repo
      does not support a secure protocol
    - CVE-2023-45285

 -- Nishit Majithia <email address hidden>  Wed, 10 Jan 2024 11:28:05 +0530

Upload details

Uploaded by:
Nishit Majithia
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64 ppc64el riscv64 s390x all
Section:
golang
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates universe golang
Jammy security universe golang

Downloads

File Size SHA-256 Checksum
golang-1.20_1.20.3.orig.tar.gz 25.0 MiB e447b498cde50215c4f7619e5124b0fc4e25fb5d16ea47271c47f278e7aa763a
golang-1.20_1.20.3.orig.tar.gz.asc 819 bytes ebf41effa9ddc0f56c07bfeb53c65c3e1e34cbb99cff576134eedb6228dd8217
golang-1.20_1.20.3-1ubuntu0.1~22.04.1.debian.tar.xz 48.7 KiB 0ad86bab3c78cc5b9a65336c08c95dbb5aefb979a86fcdbfc84424023321e0f7
golang-1.20_1.20.3-1ubuntu0.1~22.04.1.dsc 2.8 KiB 3a6d832d7756238cd7eb8c68adfd43e9dce6b593a096472e39dd49fb61a73b37

View changes file

Binary packages built by this source

golang-1.20: Go programming language compiler - metapackage

 The Go programming language is an open source project to make
 programmers more productive. Go is expressive, concise, clean, and
 efficient. Its concurrency mechanisms make it easy to write programs
 that get the most out of multicore and networked machines, while its
 novel type system enables flexible and modular program construction.
 Go compiles quickly to machine code yet has the convenience of
 garbage collection and the power of run-time reflection. It's a
 fast, statically typed, compiled language that feels like a
 dynamically typed, interpreted language.
 .
 This package is a metapackage that, when installed, guarantees
 that (most of) a full Go development environment is installed.
 .
 To use this version, instead of the default one provided by golang-go
 package, add /usr/lib/go-1.20/bin/ to PATH, or invoke /usr/lib/go-1.20/bin/go
 directly.

golang-1.20-doc: Go programming language - documentation

 The Go programming language is an open source project to make
 programmers more productive. Go is expressive, concise, clean, and
 efficient. Its concurrency mechanisms make it easy to write programs
 that get the most out of multicore and networked machines, while its
 novel type system enables flexible and modular program construction.
 Go compiles quickly to machine code yet has the convenience of
 garbage collection and the power of run-time reflection. It's a fast,
 statically typed, compiled language that feels like a dynamically
 typed, interpreted language.
 .
 This package provides the documentation for the Go programming
 language.

golang-1.20-go: Go programming language compiler, linker, compiled stdlib

 The Go programming language is an open source project to make programmers more
 productive. Go is expressive, concise, clean, and efficient. Its concurrency
 mechanisms make it easy to write programs that get the most out of multicore
 and networked machines, while its novel type system enables flexible and
 modular program construction. Go compiles quickly to machine code yet has the
 convenience of garbage collection and the power of run-time reflection. It's a
 fast, statically typed, compiled language that feels like a dynamically typed,
 interpreted language.
 .
 This package provides an assembler, compiler, linker, and compiled libraries
 for the Go programming language.
 .
 To use this version, instead of the default one provided by golang-go package,
 add /usr/lib/go-1.20/bin/ to PATH, or invoke /usr/lib/go-1.20/bin/go directly.

golang-1.20-go-dbgsym: debug symbols for golang-1.20-go
golang-1.20-src: Go programming language - source files

 The Go programming language is an open source project to make programmers more
 productive. Go is expressive, concise, clean, and efficient. Its concurrency
 mechanisms make it easy to write programs that get the most out of multicore
 and networked machines, while its novel type system enables flexible and
 modular program construction. Go compiles quickly to machine code yet has the
 convenience of garbage collection and the power of run-time reflection. It's a
 fast, statically typed, compiled language that feels like a dynamically typed,
 interpreted language.
 .
 This package provides the Go programming language source files needed for
 compilation.