diff options
| author | Stanislav Petrashov <s@petrashov.ru> | 2022-10-20 22:18:19 +0200 |
|---|---|---|
| committer | Stanislav Petrashov <s@petrashov.ru> | 2022-11-14 20:23:44 +0100 |
| commit | 0ad7a2fe1841a46107b88026a3b95b54571afb88 (patch) | |
| tree | cf420ba1c5307eb012265e16d3feacf4e78827c5 /admin | |
| parent | 4d667ec8e8ffb23e2d42a42c58f0318b3d248dff (diff) | |
golang: update to v1.19.2
Includes fixes for security vulnerabilities:
* [CVE-2022-27664](https://github.com/advisories/GHSA-69cg-p879-7622) net/http: handle server errors after sending GOAWAY
* [CVE-2022-32190](https://github.com/golang/go/issues/54385) net/url: JoinPath does not strip relative path components in all circumstances
* [CVE-2022-2879](https://github.com/golang/go/issues/54853) archive/tar: unbounded memory consumption when reading headers
* [CVE-2022-2880](https://github.com/golang/go/issues/54663) net/http/httputil: ReverseProxy should not forward unparseable query parameters
* [CVE-2022-41715](https://github.com/golang/go/issues/55949) regexp/syntax: limit memory used by parsing regexps
Addresses the build failure:
* https://github.com/openwrt/packages/pull/19613
Signed-off-by: Stanislav Petrashov <s@petrashov.ru>
Diffstat (limited to 'admin')
0 files changed, 0 insertions, 0 deletions