[security] Go 1.22.1 and Go 1.21.8 pre-announcement

[anno...@golang.org]

Hello gophers,

We plan to issue Go 1.22.1 and Go 1.21.8 during US business hours on Tuesday, March 5.

These minor releases include PRIVATE security fixes to the standard library, covering the following CVEs:

• CVE-2023-45289
• CVE-2023-45290
• CVE-2023-45289

Following our security policy, this is the pre-announcement of those releases.

Thanks,
Michael and Carlos for the Go team

[Carlos Amedee]

Hello gophers,

We accidentally repeated one of the CVEs in the pre-announcement. The correct list of CVEs being fixed are:

• CVE-2024-24783
  
• CVE-2023-45290
• CVE-2023-45289

Thanks,

Carlos for the Go team