Accepted golang-1.21 1.21.1-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted golang-1.21 1.21.1-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 07 Sep 2023 05:08:31 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: golang-1.21_1.21.1-1_source.changes
- Debian-source: golang-1.21
- Debian-suite: unstable
- Debian-version: 1.21.1-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=fYyBpksG7TQErliVYPYC+Atb7QA8zLOheDaphvJbMw0=; b=iH3NQQZ4QipB7UEiAIcKV/RfRP owCCAcQp0ptVtXX/N5X3fW5+TjCNWXtkc3z3uTzwWuGiXkKHhtYh/LDprcDzpzK1IEIDmxyripAcI Vospxlvua01dAX2pZt64pUljX9OP8+dQ+rNy7WEIsJirV2Or1C4nuK8aNVffebjlcxtTQvDhaq7Cy UwTw4ITIODBpZayPwim6rarUK4p+0VwWHHzPAKSAHj4mrQa46qsdYciM0w4vDvHTkFis2HDZLLdIV /iRb0hTI/TYPAoKfyF+7hg04rXspxWpBkw/vNt0m41XRmfDmTz7MVZ6qbMUzhmTvzAp8iIchPUgOt pJBfAVIQ==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1qe7Fn-004AuP-0d@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 07 Sep 2023 11:51:55 +0800
Source: golang-1.21
Architecture: source
Version: 1.21.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.21 (1.21.1-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.21.1
+ CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary
execution
+ CVE-2023-39318: html/template: improper handling of HTML-like comments
within script contexts
+ CVE-2023-39319: html/template: improper handling of special tags within
script contexts
+ CVE-2023-39321/CVE-2023-39322: crypto/tls: panic when processing
post-handshake message on QUIC connections
Checksums-Sha1:
719d0567c4bcd5021cd44d15b92227399f282f86 2293 golang-1.21_1.21.1-1.dsc
ffa63be4fa3511c44ad201dead5e368fe7ddf46a 26974429 golang-1.21_1.21.1.orig.tar.gz
d45a49db59c9ea78df1ce1d5cd04cbb07876023a 833 golang-1.21_1.21.1.orig.tar.gz.asc
332538bfc32459b9295ec2b54b6a095b54f9c2a3 36396 golang-1.21_1.21.1-1.debian.tar.xz
1e85a3b87b6afe3f915683c8d5eb0b7475a03a07 6205 golang-1.21_1.21.1-1_amd64.buildinfo
Checksums-Sha256:
57a63e79fefa4be1d0a8a76b9f3884c3a1e2fb3259a9f59ddca777f34aa23be9 2293 golang-1.21_1.21.1-1.dsc
bfa36bf75e9a1e9cbbdb9abcf9d1707e479bd3a07880a8ae3564caee5711cb99 26974429 golang-1.21_1.21.1.orig.tar.gz
de6c8e0b031f3d3a46a9ecd4419150c83b00f4d45eadab6b3bd08609edcf825a 833 golang-1.21_1.21.1.orig.tar.gz.asc
1ed8963b00b1f3001bc46852f5fc14e5b75b840d3d7a20f44d67af627725a69a 36396 golang-1.21_1.21.1-1.debian.tar.xz
020ea16c7d8d2bedaed4780c2cf1dbcd057a1f6064860a366a09099c5aa2a8e4 6205 golang-1.21_1.21.1-1_amd64.buildinfo
Files:
06ddc72d33aa1130a66ea2ac58a8fc13 2293 golang optional golang-1.21_1.21.1-1.dsc
00ef7b2f4c47990c37dd60bd15fa8c0f 26974429 golang optional golang-1.21_1.21.1.orig.tar.gz
f0bdb9bded2608788148e626a3d49954 833 golang optional golang-1.21_1.21.1.orig.tar.gz.asc
af21546ab69233dacb36ada202702ba2 36396 golang optional golang-1.21_1.21.1-1.debian.tar.xz
d1508446b5629c70e8b02e4c136b3642 6205 golang optional golang-1.21_1.21.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZPlYnwAKCRB/RPol6lUU
y1Y/AP9mkdgXxCUDB7t+LkUK6Az1iMFAzD7k7yVRXcw0OyST6AEAxMJYMbSkNhSb
x6h2jDP+KIM2pfgQdM6D3NHeHsXZFwQ=
=IG+Q
-----END PGP SIGNATURE-----