projects / feed / packages.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8c1d7f0) | patch
golang: Update to 1.17.3
authorJeffery To <jeffery.to@gmail.com>
Thu, 18 Nov 2021 19:40:17 +0000 (03:40 +0800)
committerJeffery To <jeffery.to@gmail.com>
Thu, 18 Nov 2021 19:40:17 +0000 (03:40 +0800)
commit901f80aae7d14b48e1ff94b59ef03eeeae7b0900
tree669ab1f811178ca8ec3c9fa051c70d6c6adddf9atree | snapshot
parent8c1d7f0733b309981d1c20bf590e124ccf215c0ccommit | diff
golang: Update to 1.17.3

Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
lang/golang/golang/Makefile diff | blob | history
Mirror of packages feed