[go-nuts] Go 1.18 Beta 2 is released

[Alex Rakoczy]

Hello gophers,

We have just released go1.18beta2, a beta version of Go 1.18.
It is cut from the master branch at the revision tagged go1.18beta2.

Please try your production load tests and unit tests with the new version.
Your help testing these pre-release versions is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.18beta2
is by using the go command:
$ go get golang.org/dl/go1.18beta2
$ go1.18beta2 download

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.18beta2

To find out what has changed in Go 1.18, read the draft release notes:
https://tip.golang.org/doc/go1.18

Cheers,
The Go Team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdSwm5kJXW9eaw0eqvcjFqfFv1G9mN%2BmgDP_yLmX5b4wKw%40mail.gmail.com.

[go-nuts] [security] Go 1.17.5 and Go 1.16.12 are released

[Alex Rakoczy]

Hello gophers,

We have just released Go versions 1.17.5 and 1.16.12, minor point releases.

These minor releases include two security fixes following the security
policy :

   - net/http: limit growth of header canonicalization cache

   An attacker can cause unbounded memory growth in a Go server accepting
   HTTP/2 requests.

For users who cannot immediately update to the new release, setting the
GODEBUG=http2server=0 environment variable before calling Serve will
disable HTTP/2 unless it was manually configured through the
golang.org/x/net/http2 package.

This issue is also fixed in golang.org/x/net/http2
v0.0.0-20211209124913-491a49abca63, for users manually configuring HTTP/2.

Thank you to murakmii for reporting this issue.

This is CVE-2021-44716 and Go issue go.dev/issue/50058.


   - syscall: don’t close fd 0 on ForkExec error

   When a Go program running on a Unix system is out of file descriptors
   and calls syscall.ForkExec (including indirectly by using the os/exec
   package), syscall.ForkExec can close file descriptor 0 as it fails. If this
   happens (or can be provoked) repeatedly, it can result in misdirected I/O
   such as writing network traffic intended for one connection to a different
   connection, or content intended for one file to a different one.

   For users who cannot immediately update to the new release, the bug can
   be mitigated by raising the per-process file descriptor limit.

   Thank you to Tomasz Maczukin and Kamil Trzciński of GitLab for reporting
   this issue.

   This is CVE-2021-44717 and Go issue go.dev/issue/50057.

View the release notes for more information:
https://golang.org/doc/devel/release.html#go1.17.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.17.5" and build as usual.

Thanks to everyone who contributed to the releases.

Cheers,
Alex and Filippo for the Go team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdSJpsFC4xQdPu%2B%2BMnjNyGR4RFGX_-w4R-pkAcTuu2x7jA%40mail.gmail.com.

[go-nuts] Go 1.16.7 and Go 1.15.15 are released

[Alex Rakoczy]

Hello gophers,

We have just released Go versions 1.16.7 and 1.15.15, minor point releases.

These minor releases include a security fix according to the new security
policy.

A net/http/httputil ReverseProxy can panic due to a race condition if its
Handler aborts with ErrAbortHandler, for example due to an error in copying the
response body. An attacker might be able to force the conditions leading to the
race condition.

This is issue https://golang.org/issue/46866 and CVE-2021-36221. Thanks to
Andrew Crump (VMware) for reporting this issue.

View the release notes for more information:
https://golang.org/doc/devel/release.html#go1.16.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.16.7" and build as usual.

Thanks to everyone who contributed to the releases.

Cheers,
David, Carlos, and Alex for the Go team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdQp1vfCXRPE3C44zp7hsNNWddTi2kQe%2BayXwu%3DGHvKqaA%40mail.gmail.com.

[go-nuts] Go 1.17 Release Candidate 2 is released

[Alex Rakoczy]

Hello gophers,

We have just released go1.17rc2, a release candidate version of Go 1.17.
It is cut from release-branch.go1.17 at the revision tagged go1.17rc2.

Please try your production load tests and unit tests with the new version.
Your help testing these pre-release versions is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.17rc2
is by using the go command:
$ go get golang.org/dl/go1.17rc2
$ go1.17rc2 download

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.17rc2

To find out what has changed in Go 1.17, read the draft release notes:
https://tip.golang.org/doc/go1.17

Cheers,
The Go Team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdSSkE8M76dFO%2BLMWJbS1-UpdNaSCB70F_4DuRBkwANKXA%40mail.gmail.com.

[go-nuts] Go 1.16 is released

[Alex Rakoczy]

Hello gophers,

We just released Go 1.16

To find out what has changed in Go 1.16, read the release notes:
https://golang.org/doc/go1.16

You can download binary and source distributions from our download page:
https://golang.org/dl/

If you have Go installed already, an easy way to try go1.16
is by using the go command:
$ go get golang.org/dl/go1.16
$ go1.16 download

To compile from source using a Git clone, update to the release with
"git checkout go1.16" and build as usual.

Thanks to everyone who contributed to the release!

Cheers,
Alex and Dmitri for the Go Team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdQA7pqS8yeRvXa6UFC_8_LD___qtt_QOY%2BYZg6Pn64R4Q%40mail.gmail.com.

[go-nuts] Go 1.16 Release Candidate 1 is released

[Alex Rakoczy]

Hello gophers,

We have just released go1.16rc1, a release candidate version of Go 1.16.
It is cut from release-branch.go1.16 at the revision tagged go1.16rc1.

Please try your production load tests and unit tests with the new version.
Your help testing these pre-release versions is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.16rc1
is by using the go command:
$ go get golang.org/dl/go1.16rc1
$ go1.16rc1 download

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.16rc1

To find out what has changed in Go 1.16, read the draft release notes:
https://tip.golang.org/doc/go1.16

Cheers,
The Go Team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdTVa3rg-azA9gqBne6iLM003qdr%3D1coswefYSgBGrQhNA%40mail.gmail.com.

[go-nuts] Go 1.16 Beta 1 is released

[Alex Rakoczy]

Hello gophers,

We have just released go1.16beta1, a beta version of Go 1.16.
It is cut from the master branch at the revision tagged go1.16beta1.

Please try your production load tests and unit tests with the new version.
Your help testing these pre-release versions is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.16beta1
is by using the go command:
$ go get golang.org/dl/go1.16beta1
$ go1.16beta1 download

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.16beta1

To find out what has changed in Go 1.16, read the draft release notes:
https://tip.golang.org/doc/go1.16

Cheers,
The Go Team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdTGm2yDoSiwA65VK-HeRhsQJRubfL4LGdny2YKKkRRWDA%40mail.gmail.com.

[go-nuts] Go 1.15.4 and Go 1.14.11 are released

[Alex Rakoczy]

Hello gophers,

We have just released Go versions 1.15.4 and 1.14.11, minor point releases.

View the release notes for more information:
https://golang.org/doc/devel/release.html#go1.15.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.15.4" and build as usual.

Thanks to everyone who contributed to the releases.

Cheers,
Alex and Dmitri for the Go team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdSRmjAmckss57v3ejoCNEQoC%3DMPvvEdV1kBbQavrLQKAg%40mail.gmail.com.

[go-nuts] Go 1.15.3 and Go 1.14.10 are released

[Alex Rakoczy]

Hello gophers,

We have just released Go versions 1.15.3 and 1.14.10, minor point releases.

View the release notes for more information:
https://golang.org/doc/devel/release.html#go1.15.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.15.3" and build as usual.

Thanks to everyone who contributed to the releases.

Cheers,
Alex and Dmitri for the Go team

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CA%2BxaJdQAJPvEOfhK7Z-sBv8JSbrDM1A%2Bg-76eTDA_%3Doe8TskmA%40mail.gmail.com.