File _patchinfo of Package patchinfo.30605

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.30605

<patchinfo incident="30605">
  <issue tracker="bnc" id="1215084">VUL-0: CVE-2023-39318: go1.20,go1.21: html/template: improper handling of HTML-like comments within script contexts</issue>
  <issue tracker="bnc" id="1215090">go1.20,go1.21: Go toolchain packages missing src/cmd/vendor/github.com/google/pprof/internal/driver/html/</issue>
  <issue tracker="bnc" id="1215085">VUL-0: CVE-2023-39319: go1.20,go1.21: html/template: improper handling of special tags within script contexts</issue>
  <issue tracker="bnc" id="1206346">go1.20 release tracking</issue>
  <issue tracker="cve" id="2023-39318"/>
  <issue tracker="cve" id="2023-39319"/>
  <packager>jfkw</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for go1.20</summary>
  <description>This update for go1.20 fixes the following issues:

Update to go1.20.8 (bsc#1206346).

- CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template (bsc#1215084).
- CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template (bsc#1215085).

The following non-security bug was fixed:

- Add missing directory pprof html asset directory to package (bsc#1215090).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.30605

Places