golang-1.15 (1.15.15-1~deb11u2) bullseye; urgency=medium
authorShengjing Zhu <zhsj@debian.org>
Sat, 4 Dec 2021 09:37:57 +0000 (09:37 +0000)
committerShengjing Zhu <zhsj@debian.org>
Sat, 4 Dec 2021 09:37:57 +0000 (09:37 +0000)
commit7ccbb7d9f4b97bf7979354221fc121ac0771f36a
treeb2ce41f9d752a18cdb1314b1fd2186ab5fc58587
parent7459693a5a4d3915c61a7701d1158686028a2f54
parentacca5c4220745f2282847001f2d6b02131633720
golang-1.15 (1.15.15-1~deb11u2) bullseye; urgency=medium

  * Backport patch for CVE-2021-38297
    When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js,
    passing very large arguments can cause portions of the module to be
    overwritten with data from the arguments.
  * Backport patch for CVE-2021-41771
    debug/macho: invalid dynamic symbol table command can cause panic
  * Backport patch for CVE-2021-44716
    net/http: limit growth of header canonicalization cache
  * Backport patch for CVE-2021-44717
    syscall: don’t close fd 0 on ForkExec error

[dgit import unpatched golang-1.15 1.15.15-1~deb11u2]
38 files changed:
debian/changelog
debian/control
debian/control.in
debian/copyright
debian/docs
debian/gbp.conf
debian/gbp.conf.in
debian/golang-X.Y-doc.dirs
debian/golang-X.Y-doc.install
debian/golang-X.Y-doc.links
debian/golang-X.Y-doc.lintian-overrides
debian/golang-X.Y-go.dirs
debian/golang-X.Y-go.install
debian/golang-X.Y-go.links
debian/golang-X.Y-go.lintian-overrides
debian/golang-X.Y-go.postinst
debian/golang-X.Y-src.install
debian/golang-X.Y-src.lintian-overrides
debian/helpers/goenv.sh
debian/patches/0001-Disable-test-for-UserHomeDir.patch
debian/patches/0002-Fix-Lintian-warnings-about-wrong-interpreter-path.patch
debian/patches/0003-cmd-go-cmd-cgo-pass-mfp32-and-mhard-soft-float-to-MI.patch
debian/patches/0004-cmd-dist-fix-build-failure-of-misc-cgo-test-on-arm64.patch
debian/patches/0005-cmd-dist-increase-default-timeout-scale-for-arm.patch
debian/patches/0006-skip-userns-test-in-schroot-as-well.patch
debian/patches/0007-CVE-2021-39293.patch
debian/patches/0008-CVE-2021-38297.patch
debian/patches/0009-CVE-2021-41771.patch
debian/patches/0010-CVE-2021-44716.patch
debian/patches/0011-CVE-2021-44717.patch
debian/patches/series
debian/rules
debian/source/format
debian/source/lintian-overrides
debian/source/lintian-overrides.in
debian/upstream/signing-key.asc
debian/watch
debian/watch.in