golang-1.21 (1.21.1-1) unstable; urgency=medium
authorShengjing Zhu <zhsj@debian.org>
Thu, 7 Sep 2023 03:51:55 +0000 (04:51 +0100)
committerShengjing Zhu <zhsj@debian.org>
Thu, 7 Sep 2023 03:51:55 +0000 (04:51 +0100)
commitc805b39b6b6c76ed41b7068f80f43b5198eabb0a
treeb77f36b77bc88d715cc38d5f37f422ee5f78a537
parent145c03ae92a4f51c73a89b50343d5ebdaec94089
parenteb3df51b0b3e399f6abeffed24b8dd9fe15fe0bf
golang-1.21 (1.21.1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.21.1
    + CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary
      execution
    + CVE-2023-39318: html/template: improper handling of HTML-like comments
      within script contexts
    + CVE-2023-39319: html/template: improper handling of special tags within
      script contexts
    + CVE-2023-39321/CVE-2023-39322: crypto/tls: panic when processing
      post-handshake message on QUIC connections

[dgit import unpatched golang-1.21 1.21.1-1]
26 files changed:
debian/changelog
debian/control
debian/control.in
debian/copyright
debian/docs
debian/gbp.conf
debian/gbp.conf.in
debian/golang-X.Y-doc.dirs
debian/golang-X.Y-doc.install
debian/golang-X.Y-doc.links
debian/golang-X.Y-go.dirs
debian/golang-X.Y-go.install
debian/golang-X.Y-go.links
debian/golang-X.Y-go.lintian-overrides
debian/golang-X.Y-src.install
debian/golang-X.Y-src.lintian-overrides
debian/helpers/goenv.sh
debian/rules
debian/source/format
debian/source/lintian-overrides
debian/tests/control
debian/tests/hello-world
debian/tests/regression-test
debian/upstream/signing-key.asc
debian/watch
debian/watch.in