=====================================================================

                             CERT-Renater

                 Note d'Information No. 2021/VULN543
_____________________________________________________________________

DATE                : 19/10/2021

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Go versions prior to 1.17.2,
                                         1.16.9.

=====================================================================
https://groups.google.com/g/golang-announce/c/AEBu9j7yj5A
_____________________________________________________________________

Photo du profil de Michael Knyszek
Michael Knyszek
à golan...@googlegroups.com


Hello gophers,

We have just released Go versions 1.17.2 and 1.16.9, minor point releases.

These minor releases include a security fix according to the new
security policy (#44918).

    When invoking functions from WASM modules, built using GOARCH=wasm
GOOS=js, passing very large arguments can cause portions of the module
to be overwritten with data from the arguments.


    If using wasm_exec.js to execute WASM modules, users will need to
replace their copy (as described in
https://golang.org/wiki/WebAssembly#getting-started) after rebuilding
any modules.

    This is issue #48797 and CVE-2021-38297. Thanks to Ben Lubar for
reporting this issue.


View the release notes for more information:
    https://golang.org/doc/devel/release.html#go1.17.minor

You can download binary and source distributions from the Go web site:
    https://golang.org/dl/

To compile from source using a Git clone, update to the release with
"git checkout go1.17.2" and build as usual.

Thanks to everyone who contributed to the releases.


Cheers,
Michael and Heschi for the Go team

=========================================================
+ CERT-RENATER       |    tel : 01-53-94-20-44          +
+ 23/25 Rue Daviel   |    fax : 01-53-94-20-41          +
+ 75013 Paris        |    email:cert@support.renater.fr +
=========================================================