Peter Korsgaard bc0f65857e package/go: security bump to version 1.20.10 ...

Fixes CVE-2023-39325: rapid stream resets can cause excessive work

A malicious HTTP/2 client which rapidly creates requests and immediately
resets them can cause excessive server resource consumption.  While the
total number of requests is bounded to the http2.Server.MaxConcurrentStreams
setting, resetting an in-progress request allows the attacker to create a
new request while the existing one is still executing.

go1.20.10 (released 2023-10-10) includes a security fix to the net/http
package.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2023-10-13 20:42:32 +02:00

..

0001-build.go-explicit-option-for-crosscompilation.patch

…

0002-cmd-dist-set-buildvcs-false-when-building-go-bootstr.patch

package/go: adjust Upstream header in patch

2023-07-28 22:09:22 +02:00

Config.in.host

package/go: adjust comments

2023-07-22 23:00:06 +02:00

go.hash

package/go: security bump to version 1.20.10

2023-10-13 20:42:32 +02:00

go.mk

package/go: security bump to version 1.20.10

2023-10-13 20:42:32 +02:00