Bug#991961: golang-1.15: CVE-2021-36221

2021-08-06 Thread Paul Gevers
Hi Shengjing, On 06-08-2021 22:01, Shengjing Zhu wrote: > Should we fix it before the bullseye release? No, at least not in 11.0. Paul OpenPGP_signature Description: OpenPGP digital signature

Bug#991961: golang-1.15: CVE-2021-36221

2021-08-06 Thread Shengjing Zhu
Hi, On Sat, Aug 7, 2021 at 1:51 AM Salvatore Bonaccorso wrote: > > Source: golang-1.15 > Version: 1.15.9-6 > Severity: important > Tags: security upstream > Forwarded: https://github.com/golang/go/issues/46866 > X-Debbugs-Cc: car...@debian.org, Debian Security Team > > > Hi, > > The following v

Bug#991961: golang-1.15: CVE-2021-36221

2021-08-06 Thread Salvatore Bonaccorso
Source: golang-1.15 Version: 1.15.9-6 Severity: important Tags: security upstream Forwarded: https://github.com/golang/go/issues/46866 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for golang-1.15. CVE-2021-36221[0]: | net/http: panic due to