golang-1.21.git
21 months agogolang-1.21 (1.21.8-1) unstable; urgency=medium
Shengjing Zhu [Wed, 6 Mar 2024 07:14:10 +0000 (15:14 +0800)]
golang-1.21 (1.21.8-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.21.8
    + CVE-2024-24783: crypto/x509: Verify panics on certificates with an
      unknown public key algorithm
    + CVE-2023-45290: net/http: memory exhaustion in Request.ParseMultipartForm
    + CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of
      sensitive headers and cookies on HTTP redirect
    + CVE-2024-24785: html/template: errors returned from MarshalJSON methods
      may break template escaping
    + CVE-2024-24784: net/mail: comments in display names are incorrectly
      handled
  * Update upstream signing key

[dgit import unpatched golang-1.21 1.21.8-1]

21 months agoImport golang-1.21_1.21.8.orig.tar.gz
Shengjing Zhu [Wed, 6 Mar 2024 07:14:10 +0000 (15:14 +0800)]
Import golang-1.21_1.21.8.orig.tar.gz

[dgit import orig golang-1.21_1.21.8.orig.tar.gz]

21 months agoImport golang-1.21_1.21.8-1.debian.tar.xz
Shengjing Zhu [Wed, 6 Mar 2024 07:14:10 +0000 (15:14 +0800)]
Import golang-1.21_1.21.8-1.debian.tar.xz

[dgit import tarball golang-1.21 1.21.8-1 golang-1.21_1.21.8-1.debian.tar.xz]