summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Shengjing Zhu [Mon, 26 Feb 2024 09:03:06 +0000 (17:03 +0800)]
Skip flaky TestCrashDumpsAllThreads on mips64le
crash_unix_test.go:145: found 3 instances of main.crashDumpsAllThreadsLoop; expected 4
Gbp-Pq: Name 0001-Skip-flaky-TestCrashDumpsAllThreads-on-mips64le.patch
Shengjing Zhu [Wed, 6 Mar 2024 07:14:10 +0000 (15:14 +0800)]
golang-1.21 (1.21.8-1) unstable; urgency=medium
* Team upload
* New upstream version 1.21.8
+ CVE-2024-24783: crypto/x509: Verify panics on certificates with an
unknown public key algorithm
+ CVE-2023-45290: net/http: memory exhaustion in Request.ParseMultipartForm
+ CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of
sensitive headers and cookies on HTTP redirect
+ CVE-2024-24785: html/template: errors returned from MarshalJSON methods
may break template escaping
+ CVE-2024-24784: net/mail: comments in display names are incorrectly
handled
* Update upstream signing key
[dgit import unpatched golang-1.21 1.21.8-1]
Shengjing Zhu [Wed, 6 Mar 2024 07:14:10 +0000 (15:14 +0800)]
Import golang-1.21_1.21.8.orig.tar.gz
[dgit import orig golang-1.21_1.21.8.orig.tar.gz]
Shengjing Zhu [Wed, 6 Mar 2024 07:14:10 +0000 (15:14 +0800)]
Import golang-1.21_1.21.8-1.debian.tar.xz
[dgit import tarball golang-1.21 1.21.8-1 golang-1.21_1.21.8-1.debian.tar.xz]