golang-1.21 (1.21.9-1)
[PTS] [DDPO]
OLD: VCS is behind the version in the archive: 1.21.8-1 < 1.21.9-1.
- Git: https://salsa.debian.org/go-team/compiler/golang.git -b golang-1.21
-
- Branch: golang-1.21
- Path: debian/changelog
- Repo size: 4370432
- Browser: https://salsa.debian.org/go-team/compiler/golang/tree/golang-1.21
- Last scan: 2024-04-24 01:15:15+00
- Next scan: 2024-04-30 04:43:00+00
- Merge requests: 1
- Debian changelog in Git:
golang-1.21 (1.21.8-1) unstable; urgency=medium
* Team upload
* New upstream version 1.21.8
+ CVE-2024-24783: crypto/x509: Verify panics on certificates with an
unknown public key algorithm
+ CVE-2023-45290: net/http: memory exhaustion in Request.ParseMultipartForm
+ CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of
sensitive headers and cookies on HTTP redirect
+ CVE-2024-24785: html/template: errors returned from MarshalJSON methods
may break template escaping
+ CVE-2024-24784: net/mail: comments in display names are incorrectly
handled
* Update upstream signing key
-- Shengjing Zhu <zhsj@debian.org> Wed, 06 Mar 2024 15:14:10 +0800
- This branch is even with tag debian/1.21.8-1