Go 1.18.5 and Go 1.17.13 versions released

Golang team at Google released Go 1.18.5 and Go 1.17.13 versions.

As part of this minor release, Go language team addressed following security issue.

  1. CVE-2022-32189: math/big: index out of range in Float.GobDecode.

CVE-2022-32189: math/big: index out of range in Float.GobDecode

This includes security fixes to the encoding/gob and math/big packages.

Decoding big.Float and big.Rat types can panic if the encoded message is too short.

The issue is found by https://github.com/catenacyber/ngolo-fuzzing on oss-fuzz https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49120.

Have a look at the Github issue for more details.

https://github.com/golang/go/issues/53871

Other bug fixes

Here is the list minor bugs fixed in this release.

Go 1.18.5 milestone

Go 1.17.13 milestone

Update to Go 1.18.5 version

Use the below download link to update to Go 1.18.5 version

https://golang.org/dl/#go1.18.5

or through command prompt

>go get golang.org/dl/go1.18.5
>go1.18.5 download
Downloaded   0.0% (     3275 / 150380150 bytes) ...
Downloaded   0.0% (    32768 / 150380150 bytes) ...
Downloaded   1.6% (  2342896 / 150380150 bytes) ...
Downloaded 100.0% (150380150 / 150380150 bytes)
Unpacking C:\Users\arunkumarg\sdk\go1.18.5\go1.18.5.windows-amd64.zip ...
Success. You may now run '1.18.5'

Now to check the version use the below command

>go1.18.5 version
go version go1.18.2 windows/amd64

Update to Go 1.17.13 version

Use the below download link to update to Go 1.17.13 version

https://golang.org/dl/#go1.17.13

or through command prompt

>go get golang.org/dl/go1.17.13
>go1.17.13 download
Downloaded   0.0% (     3275 / 150380150 bytes) ...
Downloaded   0.0% (    32768 / 150380150 bytes) ...
Downloaded   1.6% (  2342896 / 150380150 bytes) ...
Downloaded 100.0% (150380150 / 150380150 bytes)
Unpacking C:\Users\arunkumarg\sdk\go1.17.13\go1.17.13.windows-amd64.zip ...
Success. You may now run 'go1.17.13'

Now to check the version use the below command

>go1.17.13 version
go version go1.17.13 windows/amd64

Official Announcement

The official announcement

https://groups.google.com/g/golang-announce/c/YqYYG87xB10/m/NzQjeXshBAAJ

Follow us @ twitter, facebook and linkedin For latest news and articles about Go Language

☝ ✍ Go Language Tutorial ✍☝
Get a short & sweet Go Language tutorials delivered to your inbox every couple of days. No spam ever. Unsubscribe any time.
Avatar

Arunkumar Gudelli

I am One among a million Software engineers of India. I write beautiful markup.I make the Web useful.