net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) [1.19 backport]

[gopherbot]

@julieqiu requested issue #59153 to be considered for backport to the next 1.19 minor release.

@gopherbot please open backport issues.

[gopherbot]

Change https://go.dev/cl/481979 mentions this issue: [release-branch.go1.19] mime/multipart: limit parsed mime message sizes

[gopherbot]

Change https://go.dev/cl/481977 mentions this issue: [release-branch.go1.19] mime/multipart: avoid excessive copy buffer allocations in ReadForm

[gopherbot]

Change https://go.dev/cl/481978 mentions this issue: [release-branch.go1.19] net/textproto, mime/multipart: improve accounting of non-file data

[gopherbot]

Change https://go.dev/cl/481985 mentions this issue: [release-branch.go1.19] mime/multipart: limit parsed mime message sizes

[gopherbot]

Change https://go.dev/cl/481983 mentions this issue: [release-branch.go1.19] mime/multipart: avoid excessive copy buffer allocations in ReadForm

[gopherbot]

Change https://go.dev/cl/481984 mentions this issue: [release-branch.go1.19] net/textproto, mime/multipart: improve accounting of non-file data

[gopherbot]

Closed by merging 7a359a6 to release-branch.go1.19.

[gopherbot]

Closed by merging 7917b5f to release-branch.go1.19.

[gopherbot]

Closed by merging ef41a4e to release-branch.go1.19.