分享每一天-Go 发布了安全更新 Go 1.20.1 和 Go 1.19.6,建议更新！

Go 发布了安全更新 Go 1.20.1 和 Go 1.19.6,建议更新！

GoLang 924 0 创建时间：2023-02-15 10:33:58

golang更新

## Go 发布了安全更新 Go 1.20.1 和 Go 1.19.6

北京时间 2023 年 02 月 15 日凌晨（纽约时间 2023.02.14） Go 团队发布了安全更新 Go 1.20.1 和 Go 1.19.6。

Go 1.20.1 主要是修复 crypto/tls, mime/multipart, net/http, 和 path/filepath  等包的安全问题，也包括 compiler、go 命令、linker、runtime 和 time 包的 bug fix。

![](https://www.seedblog.cn/uploads/article/2023-02-15/BnZ9BmaEgSVwYwrSKcX9GK9Un5z93oDbPvAksjrf.png)

https://github.com/golang/go/issues?q=milestone%3AGo1.20.1+label%3ACherryPickApproved

#### 历史版本信息
```go
Release Polic
Each major Go release is supported until there are two newer major releases. For examole,Go 1.5 was supported until the Go 1.7 release, and Go 1.6 was supoorteduntl the Go 1.8 release. We fx critical oroblems, includina critica security problems,in supported releases as neded by issuing minor revisions for example, Go1.6.1. Go 1.6.2 and so on).
go1.20 (released 2023-02-01)
Go 1.20 is a major release of Go. Read the Go 1.20 Release Notes for more information.
Minor revisions
go1.201 (released 2023-02-14) includes security fixes to the ,, and packages, as wel as bug fixes to the compiler, the command, the linker, the runtime, and thepackage. See the Go 1.20.1 milestone on our issue tracker for details. crypto/tlsmime/multipartnet/httppath/filepathgotime
```
https://go.dev/doc/devel/release#policy

我们来看看修复时 CL 标题来了解大概信息：
- path/filepath: path traversal in filepath.Clean on Windows
- net/http, mime/multipart: denial of service from excessive resource consumption
- crypto/tls: large handshake records may cause panics
- net/http: avoid quadratic complexity in HPACK decoding

Go 发布了安全更新 Go 1.20.1 和 Go 1.19.6,建议更新！

商品推荐

广告推荐

推荐文章