diff options
| author | Jeffery To <jeffery.to@gmail.com> | 2021-06-11 16:26:56 +0800 |
|---|---|---|
| committer | Jeffery To <jeffery.to@gmail.com> | 2021-06-11 16:26:56 +0800 |
| commit | fe3c49fe07dfcdd3794c588af916ba6a2c03db28 (patch) | |
| tree | e0eb7ff86491e2f1b38a835b5c12ed7c110f3ff2 /lang/python/python-incremental | |
| parent | ceaccc1c7a5aaca1c5fc4597bd724753b6bef358 (diff) | |
golang: Update to 1.16.5
1.16.1 included fixes for:
* CVE-2021-27918 - encoding/xml: infinite loop when using
xml.NewTokenDecoder with a custom TokenReader
* CVE-2021-27919 - archive/zip: can panic when calling Reader.Open
1.16.4 included fixes for:
* CVE-2021-31525 - net/http: ReadRequest can stack overflow due to
recursion with very large headers
1.16.5 includes fixes for:
* CVE-2021-33195 - net: Lookup functions may return invalid host names
* CVE-2021-33196 - archive/zip: malformed archive may cause panic or
memory exhaustion
* CVE-2021-33197 - net/http/httputil: ReverseProxy forwards Connection
headers if first one is empty
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Diffstat (limited to 'lang/python/python-incremental')
0 files changed, 0 insertions, 0 deletions