golang-1.21 (1.21.9-1) [PTS] [DDPO]

OLD: VCS is behind the version in the archive: 1.21.8-1 < 1.21.9-1.

Git: https://salsa.debian.org/go-team/compiler/golang.git -b golang-1.21
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: golang-1.21
Path: debian/changelog
Repo size: 4370432
Browser: https://salsa.debian.org/go-team/compiler/golang/tree/golang-1.21
Last scan: 2024-04-24 01:15:15+00
Next scan: 2024-04-30 04:43:00+00
Merge requests: 1

Debian changelog in Git:

golang-1.21 (1.21.8-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.21.8
    + CVE-2024-24783: crypto/x509: Verify panics on certificates with an
      unknown public key algorithm
    + CVE-2023-45290: net/http: memory exhaustion in Request.ParseMultipartForm
    + CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of
      sensitive headers and cookies on HTTP redirect
    + CVE-2024-24785: html/template: errors returned from MarshalJSON methods
      may break template escaping
    + CVE-2024-24784: net/mail: comments in display names are incorrectly
      handled
  * Update upstream signing key

 -- Shengjing Zhu <zhsj@debian.org>  Wed, 06 Mar 2024 15:14:10 +0800

This branch is even with tag debian/1.21.8-1