Accepted golang-1.21 1.21.5-1~bpo12+1 (source) into stable-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 01 Jan 2024 23:22:33 -0700
Source: golang-1.21
Architecture: source
Version: 1.21.5-1~bpo12+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Anthony Fok <foka@debian.org>
Changes:
golang-1.21 (1.21.5-1~bpo12+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports.
.
golang-1.21 (1.21.5-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.21.5
+ CVE-2023-39326: net/http: limit chunked data overhead
+ CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git
+ CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths
like \\?\c:\
Checksums-Sha1:
0a4fff083968966fd9a5b22ffc33a24dfc69c2ca 2955 golang-1.21_1.21.5-1~bpo12+1.dsc
7186e3c28796976348c5185b0f4044a81985b939 36792 golang-1.21_1.21.5-1~bpo12+1.debian.tar.xz
b5c4f1f1fbc8d33e4df6de2343290825b4ee5b49 7147 golang-1.21_1.21.5-1~bpo12+1_amd64.buildinfo
Checksums-Sha256:
33ffc4d6fbe65752ab77691b96b4698168e9b165bdaebc6da50585f72ab02c63 2955 golang-1.21_1.21.5-1~bpo12+1.dsc
2ef484c07cf90b78405a094050e23738fa8df2321c9cf0f5763dbff9d1f44131 36792 golang-1.21_1.21.5-1~bpo12+1.debian.tar.xz
4279f6046648379c8bc879f6c35dda87aaf44fc985980c3859c87b98115562d3 7147 golang-1.21_1.21.5-1~bpo12+1_amd64.buildinfo
Files:
0bfeb44ff6e581aabb687e5d65193185 2955 golang optional golang-1.21_1.21.5-1~bpo12+1.dsc
fa5aaf8e2994b56e2fd9c07125f6c8ae 36792 golang optional golang-1.21_1.21.5-1~bpo12+1.debian.tar.xz
647fba3e372fdd6d28e891641924895e 7147 golang optional golang-1.21_1.21.5-1~bpo12+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=C/c6
-----END PGP SIGNATURE-----
Reply to: