From: Raspbian automatic forward porter <root@raspbian.org>
Date: Sat, 16 Dec 2023 12:13:31 +0000 (+0000)
Subject: Merge version 1.21.4-1+rpi1 and 1.21.5-1 to produce 1.21.5-1+rpi1
X-Git-Tag: raspbian/1.21.5-1+rpi1
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=49da666d56a8a96df6174ad34698f0550739e88f;p=golang-1.21.git

Merge version 1.21.4-1+rpi1 and 1.21.5-1 to produce 1.21.5-1+rpi1
---

e71068dae32915f7fffddb2b51d3e23787462c72
diff --cc debian/changelog
index fe8ded14,609e4b55..1fd150f1
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,13 +1,20 @@@
- golang-1.21 (1.21.4-1+rpi1) trixie-staging; urgency=medium
++golang-1.21 (1.21.5-1+rpi1) trixie-staging; urgency=medium
 +
 +  [changes brought forward from 1.21.1-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 07 Oct 2023 14:01:26 +0000]
 +  * Disable testsuite.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Fri, 17 Nov 2023 05:35:28 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Sat, 16 Dec 2023 12:13:31 +0000
++
+ golang-1.21 (1.21.5-1) unstable; urgency=medium
+ 
+   * Team upload
+   * New upstream version 1.21.5
+     + CVE-2023-39326: net/http: limit chunked data overhead
+     + CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git
+     + CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths
+       like \\?\c:\
+ 
+  -- Shengjing Zhu <zhsj@debian.org>  Wed, 06 Dec 2023 15:32:23 +0800
  
  golang-1.21 (1.21.4-1) unstable; urgency=medium