-
Notifications
You must be signed in to change notification settings - Fork 4k
Closed
Labels
A-build-systemC-bugCode not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.
Description
(Also in the v22.1 branch)
We'll want to pick up the following fixes from 1.17.12:
- io/fs: stack exhaustion in Glob (CVE-2022-30630) [1.17 backport] golang/go#53719
- compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) [1.17 backport] golang/go#53717
- path/filepath: stack exhaustion in Glob (CVE-2022-30632) [1.17 backport] golang/go#53713
- runtime/metrics: data race detected in Read [1.17 backport] golang/go#53589
- net/http: improper sanitization of Transfer-Encoding header [1.17 backport] golang/go#53432
Also, from 1.17.13:
- cmd/compile: condition in for loop body is incorrectly optimised away [1.17 backport] golang/go#53617
- go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call [1.17 backport] golang/go#53396
- runtime: gentraceback() dead loop on arm64 casued the process hang [1.17 backport] golang/go#53111
- cmd/compile: miscompilation in pointer operations [1.17 backport] golang/go#52960
Jira issue: CRDB-17738
Metadata
Metadata
Assignees
Labels
A-build-systemC-bugCode not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.Code not up to spec/doc, specs & docs deemed correct. Solution expected to change code/behavior.