Merge version 1.15.9-3+rpi1 and 1.15.9-5 to produce 1.15.9-5+rpi1 archive/raspbian/1.15.9-5+rpi1 raspbian/1.15.9-5+rpi1
authorRaspbian automatic forward porter <root@raspbian.org>
Thu, 10 Jun 2021 21:58:35 +0000 (22:58 +0100)
committerRaspbian automatic forward porter <root@raspbian.org>
Thu, 10 Jun 2021 21:58:35 +0000 (22:58 +0100)
1  2 
debian/changelog

index 9d3dc8f5a0904cd76a2cdcf922aee8d649cefdc5,16f67c41e2464404613a3923ea9a891945cee577..f6a31139bd0239b5a7abcb9b55c8af57f867d83a
@@@ -1,14 -1,23 +1,35 @@@
- golang-1.15 (1.15.9-3+rpi1) bullseye-staging; urgency=medium
++golang-1.15 (1.15.9-5+rpi1) bullseye-staging; urgency=medium
 +
 +  [changes brought forward from golang-1.10 1.10~rc2-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 24 Feb 2018 12:22:04 +0000]
 +  * Build with GOARM=6
 +  * Disable testsuite.
 +  * Fix clean target.
 +
 +  [changes introduced in golang-1.12 1.12.7-3+rpi1 by Peter Michael Green]
 +  * Further clean target fixing.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Thu, 13 May 2021 16:03:24 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Thu, 10 Jun 2021 21:58:35 +0000
++
+ golang-1.15 (1.15.9-5) unstable; urgency=medium
+   * Team upload.
+   * Backport patches for CVE-2021-33195 CVE-2021-33197 CVE-2021-33198
+     + CVE-2021-33195: net: Lookup functions may return invalid host names
+     + CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection
+       headers if first one is empty
+     + CVE-2021-33198: math/big: (*Rat).SetString with "1.770p02041010010011001001"
+       crashes with "makeslice: len out of range"
+  -- Shengjing Zhu <zhsj@debian.org>  Sat, 05 Jun 2021 19:36:34 +0800
+ golang-1.15 (1.15.9-4) unstable; urgency=medium
+   * Team upload.
+   * Backport patch for CVE-2021-33196
+     archive/zip: malformed archive may cause panic or memory exhaustion
+     https://github.com/golang/go/issues/46396
+  -- Shengjing Zhu <zhsj@debian.org>  Wed, 02 Jun 2021 10:56:03 +0800
  
  golang-1.15 (1.15.9-3) unstable; urgency=medium