Comment 15 for bug 1914372

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package golang-1.10 - 1.10.4-2ubuntu1~18.04.2

---------------
golang-1.10 (1.10.4-2ubuntu1~18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: XSS (LP: #1914372)
    - debian/patches/CVE-2020-24553.patch: Add Content-Type detection in
      net/http/cgi and net/http/fcgi.
    - CVE-2020-24553

 -- Dariusz Gadomski <email address hidden> Wed, 03 Feb 2021 08:42:42 +0100