5d95b4d90d
go1.21.1 (released 2023-09-06) includes four security fixes to the cmd/go, crypto/tls, and html/template packages, as well as bug fixes to the compiler, the go command, the linker, the runtime, and the context, crypto/tls, encoding/gob, encoding/xml, go/types, net/http, os, and path/filepath packages. Security fixes: CVE-2023-39320: cmd/go: go.mod toolchain directive allows arbitrary execution CVE-2023-39318: html/template: improper handling of HTML-like comments within script contexts CVE-2023-39319: html/template: improper handling of special tags within script contexts CVE-2023-39321: crypto/tls: panic when processing post-handshake message on QUIC connections https://go.dev/doc/devel/release#go1.21.0 Signed-off-by: Christian Stewart <christian@aperture.us> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
4 lines
201 B
Plaintext
4 lines
201 B
Plaintext
# From https://go.dev/dl
|
|
sha256 bfa36bf75e9a1e9cbbdb9abcf9d1707e479bd3a07880a8ae3564caee5711cb99 go1.21.1.src.tar.gz
|
|
sha256 2d36597f7117c38b006835ae7f537487207d8ec407aa9d9980794b2030cbc067 LICENSE
|