net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536) [1.20 backport]

[gopherbot]

@julieqiu requested issue #59153 to be considered for backport to the next 1.20 minor release.

@gopherbot please open backport issues.

[gopherbot]

Change https://go.dev/cl/481989 mentions this issue: [release-branch.go1.20] mime/multipart: avoid excessive copy buffer allocations in ReadForm

[gopherbot]

Change https://go.dev/cl/481990 mentions this issue: [release-branch.go1.20] net/textproto, mime/multipart: improve accounting of non-file data

[gopherbot]

Change https://go.dev/cl/481991 mentions this issue: [release-branch.go1.20] mime/multipart: limit parsed mime message sizes

[gopherbot]

Closed by merging ea6b5a6 to release-branch.go1.20.