-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 07 Sep 2023 11:51:55 +0800 Source: golang-1.21 Architecture: source Version: 1.21.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.21 (1.21.1-1) unstable; urgency=medium . * Team upload * New upstream version 1.21.1 + CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary execution + CVE-2023-39318: html/template: improper handling of HTML-like comments within script contexts + CVE-2023-39319: html/template: improper handling of special tags within script contexts + CVE-2023-39321/CVE-2023-39322: crypto/tls: panic when processing post-handshake message on QUIC connections Checksums-Sha1: 719d0567c4bcd5021cd44d15b92227399f282f86 2293 golang-1.21_1.21.1-1.dsc ffa63be4fa3511c44ad201dead5e368fe7ddf46a 26974429 golang-1.21_1.21.1.orig.tar.gz d45a49db59c9ea78df1ce1d5cd04cbb07876023a 833 golang-1.21_1.21.1.orig.tar.gz.asc 332538bfc32459b9295ec2b54b6a095b54f9c2a3 36396 golang-1.21_1.21.1-1.debian.tar.xz 1e85a3b87b6afe3f915683c8d5eb0b7475a03a07 6205 golang-1.21_1.21.1-1_amd64.buildinfo Checksums-Sha256: 57a63e79fefa4be1d0a8a76b9f3884c3a1e2fb3259a9f59ddca777f34aa23be9 2293 golang-1.21_1.21.1-1.dsc bfa36bf75e9a1e9cbbdb9abcf9d1707e479bd3a07880a8ae3564caee5711cb99 26974429 golang-1.21_1.21.1.orig.tar.gz de6c8e0b031f3d3a46a9ecd4419150c83b00f4d45eadab6b3bd08609edcf825a 833 golang-1.21_1.21.1.orig.tar.gz.asc 1ed8963b00b1f3001bc46852f5fc14e5b75b840d3d7a20f44d67af627725a69a 36396 golang-1.21_1.21.1-1.debian.tar.xz 020ea16c7d8d2bedaed4780c2cf1dbcd057a1f6064860a366a09099c5aa2a8e4 6205 golang-1.21_1.21.1-1_amd64.buildinfo Files: 06ddc72d33aa1130a66ea2ac58a8fc13 2293 golang optional golang-1.21_1.21.1-1.dsc 00ef7b2f4c47990c37dd60bd15fa8c0f 26974429 golang optional golang-1.21_1.21.1.orig.tar.gz f0bdb9bded2608788148e626a3d49954 833 golang optional golang-1.21_1.21.1.orig.tar.gz.asc af21546ab69233dacb36ada202702ba2 36396 golang optional golang-1.21_1.21.1-1.debian.tar.xz d1508446b5629c70e8b02e4c136b3642 6205 golang optional golang-1.21_1.21.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZPlYnwAKCRB/RPol6lUU y1Y/AP9mkdgXxCUDB7t+LkUK6Az1iMFAzD7k7yVRXcw0OyST6AEAxMJYMbSkNhSb x6h2jDP+KIM2pfgQdM6D3NHeHsXZFwQ= =IG+Q -----END PGP SIGNATURE-----