[go-nuts] [security] Go 1.24.3 and Go 1.23.9 are released

Hello gophers, We have just released Go versions 1.24.3 and 1.23.9, minor point releases. The Go 1.24.3 minor release includes 1 security fix following the security policy : - os: Root permits access to parent directory It was possible to improperly access the

[go-nuts] [security] Go 1.24 Release Candidate 3 is released

Hello gophers, We have just released go1.24rc3, a release candidate version of Go 1.24. This release candidate includes 2 security fixes following the security policy : - cmd/go: arbitrary code execution during build on darwin On Darwin, building a Go module

[go-nuts] [security] Go 1.22.3 and Go 1.21.10 are released

Hello gophers, We have just released Go versions 1.22.3 and 1.21.10, minor point releases. These minor releases include 2 security fixes following the security policy : - cmd/go: arbitrary code execution during build on darwin On Darwin, building a Go module w

[go-nuts] [security] Go 1.21.1 and Go 1.20.8 are released

Hello gophers, We have just released Go versions 1.21.1 and 1.20.8, minor point releases. These minor releases include 4 security fixes following the security policy: - cmd/go: go.mod toolchain directive allows arbitrary execution The go.mod toolchain directive, introduced in Go 1.21

[go-nuts] [security] Go 1.17.7 and Go 1.16.14 are released

Hello gophers, We have just released Go versions 1.17.7 and 1.16.14, minor point releases. These minor releases include three security fixes following the security policy : - crypto/elliptic: fix IsOnCurve for big.Int values that are not valid coordinates Some

[go-nuts] Go 1.18 Beta 1 is released

Hello gophers, We have just released go1.18beta1, a beta version of Go 1.18. It is cut from the master branch at the revision tagged go1.18beta1. Please try your production load tests and unit tests with the new version. Your help testing these pre-release versions is invaluable. Report any prob

[go-nuts] Go 1.17 Release Candidate 1 is released

Hello gophers, We have just released go1.17rc1, a release candidate version of Go 1.17. It is cut from release-branch.go1.17 at the revision tagged go1.17rc1. Please try your production load tests and unit tests with the new version. Your help testing these pre-release versions is invaluable. Re