From: Raspbian automatic forward porter <root@raspbian.org>
Date: Sat, 24 Sep 2022 18:58:16 +0000 (+0100)
Subject: Merge version 1.18.4-2+rpi1 and 1.18.6-1 to produce 1.18.6-1+rpi1
X-Git-Tag: archive/raspbian/1.18.6-1+rpi1^0
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=450993a1fed2011853eafd37bfcc17496d365071;p=golang-1.18.git

Merge version 1.18.4-2+rpi1 and 1.18.6-1 to produce 1.18.6-1+rpi1
---

450993a1fed2011853eafd37bfcc17496d365071
diff --cc debian/changelog
index 2eb538cf,aef094ce..added3c9
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,8 -1,23 +1,30 @@@
- golang-1.18 (1.18.4-2+rpi1) bookworm-staging; urgency=medium
++golang-1.18 (1.18.6-1+rpi1) bookworm-staging; urgency=medium
 +
++  [changes brought forward from 1.18.4-2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Tue, 09 Aug 2022 16:49:03 +0000]
 +  * Disable testsuite.
 +
-  -- Peter Michael Green <plugwash@raspbian.org>  Tue, 09 Aug 2022 16:49:03 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Sat, 24 Sep 2022 18:58:16 +0000
++
+ golang-1.18 (1.18.6-1) unstable; urgency=medium
+ 
+   * New upstream version 1.18.6
+     + CVE-2022-27664: net/http: handle server errors after sending GOAWAY
+     + CVE-2022-32190: net/url: JoinPath does not strip relative path
+       components in all circumstances
+ 
+  -- William 'jawn-smith' Wilson <jawn-smith@ubuntu.com>  Tue, 06 Sep 2022 15:05:10 -0500
+ 
+ golang-1.18 (1.18.5-1) unstable; urgency=medium
+ 
+   * New upstream version 1.18.5
+     + CVE-2022-32189: math/big: index out of range in Float.GobDecode
+     + cmd/go: Build information embedded by Go 1.18 impairs build
+       reproducibility with cgo flags (Closes: #1008114)
+   * Remove 0005-cmd-compile-revert-fix-missing-dict-pass-for-type-as.patch
+     which has been applied upstream in v1.18.5
+   * Bump Standards-Version to 4.6.1 (no change)
+ 
+  -- Anthony Fok <foka@debian.org>  Sat, 06 Aug 2022 04:56:18 -0600
  
  golang-1.18 (1.18.4-2) unstable; urgency=medium