-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 04 Dec 2021 17:37:57 +0800 Source: golang-1.15 Architecture: source Version: 1.15.15-1~deb11u2 Distribution: bullseye Urgency: medium Maintainer: Go Compiler Team <team+go-compi...@tracker.debian.org> Changed-By: Shengjing Zhu <z...@debian.org> Changes: golang-1.15 (1.15.15-1~deb11u2) bullseye; urgency=medium . * Backport patch for CVE-2021-38297 When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js, passing very large arguments can cause portions of the module to be overwritten with data from the arguments. * Backport patch for CVE-2021-41771 debug/macho: invalid dynamic symbol table command can cause panic * Backport patch for CVE-2021-44716 net/http: limit growth of header canonicalization cache * Backport patch for CVE-2021-44717 syscall: don’t close fd 0 on ForkExec error Checksums-Sha1: 9c2e37ddc7cfd92b9370b8d0ef9011f099946bb0 2336 golang-1.15_1.15.15-1~deb11u2.dsc 91a89b2aecf21d46d9a873bfc4ef388a1c700c99 46208 golang-1.15_1.15.15-1~deb11u2.debian.tar.xz d2755e9fc1e28b781b2657db18a6730f81248b78 6370 golang-1.15_1.15.15-1~deb11u2_amd64.buildinfo Checksums-Sha256: ffe79983c77c2f0f82f6b3b9c0fd7c5713a8a23a3698d55ad2ff2e6101d1d440 2336 golang-1.15_1.15.15-1~deb11u2.dsc 1acc6cbaee32071183c3cc1b397bed67565194cd03e41867bf58ad643f13152e 46208 golang-1.15_1.15.15-1~deb11u2.debian.tar.xz fe0abd8d200f883b6ae37758a1533679ff3a36dc8acea323536e193b2072e3f3 6370 golang-1.15_1.15.15-1~deb11u2_amd64.buildinfo Files: af7829186d83285d24ca5d11ae21c3ac 2336 golang optional golang-1.15_1.15.15-1~deb11u2.dsc ad8b1b451c7230940f0948d840b063fd 46208 golang optional golang-1.15_1.15.15-1~deb11u2.debian.tar.xz 8ab725b689e324ef9c779fcb33dbf7c5 6370 golang optional golang-1.15_1.15.15-1~deb11u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iIYEARYIAC4WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCYbU43RAcemhzakBkZWJp YW4ub3JnAAoJEH9E+iXqVRTLw3EA/3sUA08AA+YDwFBZib+rDytIk1SzR2u2WYKx K2hRgdu1AQCMP92jcuuJPC06trwjv+DkCIktIhnj167QEtedvJfxBw== =bucT -----END PGP SIGNATURE-----