Accepted golang-1.20 1.20.12-1~bpo12+1 (source) into stable-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 01 Jan 2024 23:46:37 -0700
Source: golang-1.20
Architecture: source
Version: 1.20.12-1~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Anthony Fok <foka@debian.org>
Changes:
golang-1.20 (1.20.12-1~bpo12+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports.
.
golang-1.20 (1.20.12-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 1.20.12
+ CVE-2023-39326: net/http: limit chunked data overhead
+ CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git
+ CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths
like \\?\c:\
Checksums-Sha1:
accc6402044d689d1ab203d5bb07ff5ce30f03ef 2965 golang-1.20_1.20.12-1~bpo12+1.dsc
33e3208ce5fbaf0c23c8bfe03b757d0b23090415 38056 golang-1.20_1.20.12-1~bpo12+1.debian.tar.xz
fb5fa32d73334728e172f769dc15b081bf6ed183 7164 golang-1.20_1.20.12-1~bpo12+1_amd64.buildinfo
Checksums-Sha256:
5bcf86073db6b79037428a2ae8485a62c138461344656b3e808383f6d287e8ad 2965 golang-1.20_1.20.12-1~bpo12+1.dsc
fdbbaacebaf5ba0b03042d6db89bdfcd6e1136b02abcce8f1816b29282407775 38056 golang-1.20_1.20.12-1~bpo12+1.debian.tar.xz
c5635ffc579e287975a2301568bf213a64e512894be6634e3efb291f45b15fa8 7164 golang-1.20_1.20.12-1~bpo12+1_amd64.buildinfo
Files:
503adef003ae8bc712bb2104eab5d7e3 2965 golang optional golang-1.20_1.20.12-1~bpo12+1.dsc
d8f0964f0c5bf0e75cb5d8ba88a5f318 38056 golang optional golang-1.20_1.20.12-1~bpo12+1.debian.tar.xz
d4bb41e4f6f4188573f17cb0668778a0 7164 golang optional golang-1.20_1.20.12-1~bpo12+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAmWTs0sQHGZva2FAZGVi
aWFuLm9yZwAKCRDqJQC0EsWaz6F+D/4615FcWA80dFLib++HrH7y1BGGS4y0k2rU
9Yo0/rDj8nK4DHNPC/18VP7Uj3aYTrYB0XyFzxsZ16aDXEASIZXxYAA9QyAqvoUA
Hd/s6wQ23JxXo187280neSjbQksq5jb833yt38o+OBMj6SlhKuInzCTwlW9yZRI7
c+JtcjJDgSsTKA4YtAeV75DMwGlgubyKKusGJ5iA4f0iY1Oc6jk90do0vvh579Xk
4Naau4AUKe7piZjv5B2CtTHjuUbj2cPOisJvq24kOcEk6oGIAomrl2A0xsyJ3Dg8
fbMmloVLbNw/duNXjepb3z8x1hvYpm9EnUVCco6FVF3LXGYIJTaLfJKcN2EdmQrS
besfQlvNZhpiZgShjPVXBJGTD543/3jA3nkaMfyGsN6nlAuE2fMsEO5VlNFxABf4
tuEBgAKnlLsS/kKjTEkbJPO76O6QfiVVD6J+n3Htms6zSwLb2L7cvXWnQjaq47C4
UUMkBi7I2v1psVqmznkEzfwnXcIHmMhE9mp1HIjCklICQSUnVkBgD1XX/x2DmVBw
ry8aQTH6h8yUYNW8dPfxHLrP72n7Fjfs9cDE+lqNc2iKSlLvgdnqczgkZq2DXpt6
xlAYsZxqU+YYrZEbOna7pTQ080t2om2ogzWSjLBni2M1yvFpd8YgFdp/4qZEYSYP
8TVit+KBlA==
=rHKp
-----END PGP SIGNATURE-----
Reply to: