[security] Go 1.22.1 and Go 1.21.8 pre-announcement

3,733 views
Skip to first unread message

anno...@golang.org

unread,
Feb 29, 2024, 4:55:28 PMFeb 29
to golan...@googlegroups.com

Hello gophers,

We plan to issue Go 1.22.1 and Go 1.21.8 during US business hours on Tuesday, March 5.

These minor releases include PRIVATE security fixes to the standard library, covering the following CVEs:

  • CVE-2023-45289
  • CVE-2023-45290
  • CVE-2023-45289

Following our security policy, this is the pre-announcement of those releases.

Thanks,
Michael and Carlos for the Go team

Carlos Amedee

unread,
Feb 29, 2024, 6:31:27 PMFeb 29
to golang-announce
Hello gophers,
We accidentally repeated one of the CVEs in the pre-announcement. The correct list of CVEs being fixed are:
  • CVE-2024-24783
  • CVE-2023-45290
  • CVE-2023-45289
Thanks,
Carlos for the Go team

Reply all
Reply to author
Forward
0 new messages