Hello gophers,

We have just released Go versions 1.17.2 and 1.16.9, minor point releases.

These minor releases include a security fix according to the new security
policy (#44918 <https://golang.org/issue/44918>).

When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js,
passing very large arguments can cause portions of the module to be
overwritten with data from the arguments.


If using wasm_exec.js to execute WASM modules, users will need to replace
their copy (as described in
https://golang.org/wiki/WebAssembly#getting-started) after rebuilding any
modules.


This is issue #48797 <https://github.com/golang/go/issues/48797> and
CVE-2021-38297. Thanks to Ben Lubar for reporting this issue.


View the release notes for more information:
    https://golang.org/doc/devel/release.html#go1.17.minor

You can download binary and source distributions from the Go web site:
    https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.17.2" and build as usual.

Thanks to everyone who contributed to the releases.

Cheers,
Michael and Heschi for the Go team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CAN%3D%2BcNobSW%3DrQF_5LhX%2BnrU4XooL6QbUpvA77qf5R8ybWmGOiQ%40mail.gmail.com.

Reply via email to