Hello gophers,
We accidentally repeated one of the CVEs in the pre-announcement. The 
correct list of CVEs being fixed are:

   - CVE-2024-24783
   - CVE-2023-45290
   - CVE-2023-45289

Thanks,
Carlos for the Go team

On Thursday, February 29, 2024 at 6:29:01 PM UTC-5 annou...@golang.org 
wrote:

> Hello gophers,
>
> We plan to issue Go 1.22.1 and Go 1.21.8 during US business hours on 
> Tuesday, March 5.
>
> These minor releases include PRIVATE security fixes to the standard 
> library, covering the following CVEs:
>
>    - CVE-2023-45289 
>    - CVE-2023-45290 
>    - CVE-2023-45289 
>
> Following our security policy, this is the pre-announcement of those 
> releases.
>
> Thanks,
> Michael and Carlos for the Go team
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/177c232f-2863-4d13-81ae-e8c86695c0b7n%40googlegroups.com.

Reply via email to