golang-1.18 (1.18.8-1) unstable; urgency=medium
authorWilliam 'jawn-smith' Wilson <jawn-smith@ubuntu.com>
Thu, 3 Nov 2022 13:20:54 +0000 (13:20 +0000)
committerWilliam 'jawn-smith' Wilson <jawn-smith@ubuntu.com>
Thu, 3 Nov 2022 13:20:54 +0000 (13:20 +0000)
commitf47086d06bfb910afae8dc8adb0d293691212465
tree2d48936e13002d70923b1295ac4abbef51c3b23a
parent5edee2b0173c5f5a4d5b55369b0201f758001e6e
parent8b32a4322e0d6c1e35cf4d896a83f9181af244ae
golang-1.18 (1.18.8-1) unstable; urgency=medium

  * New upstream version 1.18.8
    + CVE-2022-41716: syscall, os/exec: unsanitized NUL in environment variables
      On Windows, syscall.StartProcess and os/exec.Cmd did not properly check
      for invalid environment variable values. A malicious environment variable
      value could exploit this behavior to set a value for a different
      environment variable.

[dgit import unpatched golang-1.18 1.18.8-1]
29 files changed:
debian/changelog
debian/control
debian/control.in
debian/copyright
debian/docs
debian/gbp.conf
debian/gbp.conf.in
debian/golang-X.Y-doc.dirs
debian/golang-X.Y-doc.install
debian/golang-X.Y-doc.links
debian/golang-X.Y-go.dirs
debian/golang-X.Y-go.install
debian/golang-X.Y-go.links
debian/golang-X.Y-go.lintian-overrides
debian/golang-X.Y-src.install
debian/golang-X.Y-src.lintian-overrides
debian/helpers/goenv.sh
debian/patches/0001-Disable-test-for-UserHomeDir.patch
debian/patches/0002-Fix-Lintian-warnings-about-wrong-interpreter-path.patch
debian/patches/0003-cmd-dist-increase-default-timeout-scale-for-arm.patch
debian/patches/0004-skip-userns-test-in-schroot-as-well.patch
debian/patches/series
debian/rules
debian/source/format
debian/source/lintian-overrides
debian/source/lintian-overrides.in
debian/upstream/signing-key.asc
debian/watch
debian/watch.in