[go-nuts] Fuzz testing is now beta ready!

Hi gophers! Native fuzzing is ready for beta testing in its development branch, dev.fuzz! Check out https://blog.golang.org/fuzz-beta for more details. Fuzzing is a type of automated testing which continuously manipulates inputs to a program to find issues such as panics or bugs. These semi-rando

[go-nuts] [security] Go 1.16.1 and Go 1.15.9 are released

Hi gophers, We have just released Go 1.16.1 and Go 1.15.9 to address recently reported security issues. We recommend that all users update to one of these releases (if you’re not sure which, choose Go 1.16.1). - encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom Token

[go-nuts] [security] Go 1.16.1 and Go 1.15.9 pre-announcement

Hello gophers, We plan to issue Go 1.16.1 and Go 1.15.9 on Wednesday, March 10. These are minor releases that include security fixes. Following our policy at https://golang.org/security, this is the pre-announcement of those releases. Cheers, Katie on behalf of the Go team -- You receiv

[go-nuts] [security] Go 1.15.5 and Go 1.14.12 are released

Hi gophers, We have just released Go 1.15.5 and Go 1.14.12 to address recently reported security issues. We recommend that all users update to one of these releases (if you’re not sure which, choose Go 1.15.5). - math/big: panic during recursive division of very large numbers A number of math

[go-nuts] [security] Go 1.15.5 and Go 1.14.12 pre-announcement

Hello gophers, We plan to issue Go 1.15.5 and Go 1.14.12 on Thursday, November 12. These are minor releases that include security fixes. Following our policy at https://golang.org/security, this is the pre-announcement of those releases. Cheers, Katie on behalf of the Go team -- You re

[go-nuts] [security] Go 1.15.1 and Go 1.14.8 pre-announcement

Hello gophers, We plan to issue Go 1.15.1 and Go 1.14.8 on Tuesday, September 1. These are minor releases that include a security fix. Following our policy at https://golang.org/security, this is the pre-announcement of those releases. Cheers, Roberto and Katie on behalf of the Go team -- You

[go-nuts] [security] Go 1.14.7 and Go 1.13.15 are released

Hi gophers, We have just released Go 1.14.7 and Go 1.13.15 to address a recently reported security issue. We recommend that all users update to one of these releases (if you’re not sure which, choose Go 1.14.7). - encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of b

[go-nuts] [security] Go 1.14.7 and Go 1.13.15 pre-announcement

Hello gophers, We plan to issue Go 1.14.7 and Go 1.13.15 on Thursday, August 6. These are minor releases that include a security fix. Following our policy at https://golang.org/security, this is the pre-announcement of those releases. Cheers, Katie and Filippo on behalf of the Go team --

[go-nuts] [security] Go 1.14.5 and Go 1.13.13 are released

Hi gophers, We have just released Go 1.14.5 and Go 1.13.13 to address two recently reported security issues. We recommend that all users update to one of these releases (if you’re not sure which, choose Go 1.14.5). - Data race in certain net/http servers including ReverseProxy Servers wh

[go-nuts] [security] Go 1.14.5 and Go 1.13.13 are released

Hi gophers, We have just released Go 1.14.5 and Go 1.13.13 to address two recently reported security issues. We recommend that all users update to one of these releases (if you’re not sure which, choose Go 1.14.5). - Data race in certain net/http servers including ReverseProxy Servers

[go-nuts] [security] Go 1.14.5 and Go 1.13.13 pre-announcement

Hello gophers, We plan to issue Go 1.14.5 and Go 1.13.13 on Tuesday, July 14. These are minor releases that include multiple security fixes. Following our policy at https://golang.org/security, this is the pre-announcement of those releases. Cheers, Katie and Filippo on behalf of the Go t

[go-nuts] [security] Vulnerability in golang.org/x/text/encoding/unicode

Hello gophers, Version v0.3.3 of golang.org/x/text fixes a vulnerability in the golang.org/x/text/encoding/unicode package which could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16

[go-nuts] [security] Go 1.13.7 and Go 1.12.16 are released

Hi gophers, We have just released Go 1.13.7 and Go 1.12.16 to address recently reported security issues. We recommend that all users update to one of these releases (if you’re not sure which, choose Go 1.13.7). - X.509 certificate validation bypass on Windows 10 A Windows vulnerability

[go-nuts] [security] Go 1.12.16 and Go 1.13.7 pre-announcement

Hello gophers, We plan to issue Go 1.12.16 and Go 1.13.7 on Tuesday, January 28. These are minor releases that include two security fixes. One mitigates the CVE-2020-0601 certificate verification bypass on Windows. The other affects only 32-bit architectures. Follow

[go-nuts] [security] Go 1.13.2 and Go 1.12.11 are released

Hi gophers, We have just released Go 1.13.2 and Go 1.12.11 to address a recently reported security issue. We recommend that all affected users update to one of these releases (if you’re not sure which, choose Go 1.13.2). Invalid DSA public keys can cause a panic in dsa.Verify. In particular, usin

[go-nuts] Re: [security] Go 1.13.2 and Go 1.12.11 pre-announcement

Katie Hockman wrote: > Hello gophers, > > We plan to issue Go 1.13.2 and Go 1.12.11 on Wednesday, October 16. > These are minor releases to fix security issues. > > Following our policy at https://golang.org/security, > this is the pre-announcement of those releases. > >

[go-nuts] Go 1.13.2 and Go 1.12.11 pre-announcement

Hello gophers, We plan to issue Go 1.13.2 and Go 1.12.11 on Wednesday, October 16. These are minor releases to fix security issues. Following our policy at https://golang.org/security, this is the pre-announcement of those releases. Cheers, Katie on behalf of the Go team -- You received this m

[go-nuts] Re: Go Module Mirror and Checksum Database officially launched!

I'm also excited to share that sum.golang.google.cn is now available to Chinese users as a mirror of sum.golang.org. You can use this service by setting GOSUMDB=sum.golang.google.cn in your local environment. On Thu, Aug 29, 2019 at 2:53 PM Katie Hockman wrote: > Hey Gophers! >

[go-nuts] Go Module Mirror and Checksum Database officially launched!

er the last few months. We’ve really appreciated it and it’s helped us build a more robust service! Cheers, Katie Hockman -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails f

Re: [go-nuts] Go Module Mirror and Checksum Database in Beta!

Thanks for the feedback! There is an issue tracking this here: https://github.com/golang/go/issues/32343 On Fri, May 31, 2019, 3:17 PM Jim Ancona wrote: > > > On Thu, May 30, 2019 at 5:14 PM Katie Hockman wrote: > >> Our privacy policy explains how we collect and use you

[go-nuts] Go Module Mirror and Checksum Database in Beta!

<https://github.com/golang/go/issues/new> if you spot them, with the title prefix “proxy.golang.org:” (or index.golang.org, or sum.golang.org). We look forward to hearing about how it’s working for you! Cheers, Katie Hockman -- You received this message because you are subscribed to the Go

[go-nuts] Go 1.12.1 and Go 1.11.6 are released

Hello gophers, We have just released Go versions 1.12.1 and 1.11.6, minor point releases. These releases include fixes to cgo, the compiler, the go command, and the fmt, net/smtp, os, path/filepath, sync, and template packages. View the release notes for more information: https://golang.org

[go-nuts] Go 1.11.1 is released

Hello gophers, We have just released Go version 1.11.1, a minor point release. This release includes fixes to the compiler, documentation, go command, runtime, and the crypto/x509, encoding/json, go/types, net, net/http, and reflect packages. View the release notes for more information: http