Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module proxy and are fetching modules directly (i.e. GOPROXY=off).
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.20-src": "1.20.3-1ubuntu0.1~20.04.1", "golang-1.20": "1.20.3-1ubuntu0.1~20.04.1", "golang-1.20-doc": "1.20.3-1ubuntu0.1~20.04.1", "golang-1.20-go": "1.20.3-1ubuntu0.1~20.04.1", "golang-1.20-go-dbgsym": "1.20.3-1ubuntu0.1~20.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.20-src": "1.20.3-1ubuntu0.1~22.04.1", "golang-1.20": "1.20.3-1ubuntu0.1~22.04.1", "golang-1.20-doc": "1.20.3-1ubuntu0.1~22.04.1", "golang-1.20-go": "1.20.3-1ubuntu0.1~22.04.1", "golang-1.20-go-dbgsym": "1.20.3-1ubuntu0.1~22.04.1" } ] }