Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

security: fix CVE-2023-39324 #63212

Closed
rolandshoemaker opened this issue Sep 25, 2023 · 3 comments
Closed

security: fix CVE-2023-39324 #63212

rolandshoemaker opened this issue Sep 25, 2023 · 3 comments
Labels
NeedsFix The path to resolution is known, but the work has not been done. release-blocker Security
Milestone
Go1.22

Comments

@rolandshoemaker
Copy link
Member

This is a PRIVATE issue for CVE-2023-39324, tracked in http://b/301082407 and fixed by http://tg/2036089.

/cc @golang/security and @golang/release
@rolandshoemaker
Copy link
Member Author

@gopherbot please open backport issues.

This was referenced Sep 25, 2023
Closed
Closed
@gopherbot
Copy link
Contributor

Backport issue(s) opened: #63215 (for 1.20), #63216 (for 1.21).

Remember to create the cherry-pick CL(s) as soon as the patch is submitted to master, according to https://go.dev/wiki/MinorReleases.

@thanm thanm added the NeedsFix The path to resolution is known, but the work has not been done. label Sep 27, 2023
@dmitshur dmitshur added this to the Go1.22 milestone Oct 1, 2023
@rolandshoemaker
Copy link
Member Author

This ended up not being needed.

@dmitshur dmitshur closed this as not planned Won't fix, can't repro, duplicate, stale May 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
NeedsFix The path to resolution is known, but the work has not been done. release-blocker Security
Projects
None yet
Milestone
Go1.22
Development

No branches or pull requests
4 participants
@dmitshur @rolandshoemaker @gopherbot @thanm