Search results

cmd/compile: ambiguous selector with generic interface & embedded types [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

Status: Closed (completed).

#53723 In golang/go;

· by gopherbot was closed on Jul 7, 2022

 ·  

Go1.18.4

io/fs: stack exhaustion in Glob (CVE-2022-30630) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53720 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53718 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53716 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

path/filepath: stack exhaustion in Glob (CVE-2022-30632) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53714 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53712 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53710 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53708 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

release-blocker

Security

Status: Closed (completed).

#53621 In golang/go;

· by gopherbot was closed on Jul 12, 2022

 ·  

Go1.18.4

cmd/compile: condition in for loop body is incorrectly optimised away [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

Status: Closed (completed).

#53618 In golang/go;

· by gopherbot was closed on Jul 6, 2022

 ·  

Go1.18.4

syscall: NewCallback triggers data race on Windows when used from different goroutine [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

Status: Closed (completed).

#53613 In golang/go;

· by gopherbot was closed on Jul 6, 2022

 ·  

Go1.18.4

runtime/metrics: data race detected in Read [1.18 backport]

CherryPickApprovedUsed during the release process for point releasesUsed during the release process for point releases

FrozenDueToAge

Status: Closed (completed).

#53590 In golang/go;

· by gopherbot was closed on Jul 6, 2022

 ·  

Go1.18.4