Accepted golang-gopkg-yaml.v3 3.0.1-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 13 Jun 2022 04:56:55 -0600
Source: golang-gopkg-yaml.v3
Architecture: source
Version: 3.0.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Anthony Fok <foka@debian.org>
Closes: 1011338
Changes:
golang-gopkg-yaml.v3 (3.0.1-1) unstable; urgency=medium
.
* New upstream version 3.0.1
+ CVE-2022-28948 - crash when attempting to deserialize invalid input
Thanks to Neil William for the Debian bug report! (Closes: #1011338)
See also https://github.com/go-yaml/yaml/issues/666
* Change debian/watch to track v3 release tarballs
now that v3.0.0 and v3.0.1 have been released
* Reorder fields in debian/control and debian/copyright
* Update comment in debian/watch according to upstream LICENSE file
* Mark library package with "Multi-Arch: foreign"
* Bump Standards-Version to 4.6.1 (no change)
Checksums-Sha1:
8c1183c56ddd034073b9ee1538493a8e617dc522 2226 golang-gopkg-yaml.v3_3.0.1-1.dsc
cc7bb69c6a34bf61440d47ac00108f51cffea65f 91173 golang-gopkg-yaml.v3_3.0.1.orig.tar.gz
bf83009323f3b834e470b2d2f6199e638b6a38a6 4392 golang-gopkg-yaml.v3_3.0.1-1.debian.tar.xz
ecf148b35c2026ccabf0cc06e0065154a85cf749 6500 golang-gopkg-yaml.v3_3.0.1-1_amd64.buildinfo
Checksums-Sha256:
f3d721f4ee9d5903d1c3fac1e89f8e8a54e98dc4cb48cb8a1f878fd652fe998b 2226 golang-gopkg-yaml.v3_3.0.1-1.dsc
cf05411540d3e6ef8f1fd88434b34f94cedaceb540329031d80e23b74540c4e5 91173 golang-gopkg-yaml.v3_3.0.1.orig.tar.gz
3e073f881a5927b5bd1b05cba3ceb6f4c3116dfc67aa012112160c81567b7261 4392 golang-gopkg-yaml.v3_3.0.1-1.debian.tar.xz
bc8f0f49b93c557778d1e741db720b058774810ad94d0d58f2d84b5b98b5e1f6 6500 golang-gopkg-yaml.v3_3.0.1-1_amd64.buildinfo
Files:
585fa81c82e4c14ec98457642e5bbe59 2226 golang optional golang-gopkg-yaml.v3_3.0.1-1.dsc
3653fca1491a8b432d590ed3dab3aa77 91173 golang optional golang-gopkg-yaml.v3_3.0.1.orig.tar.gz
7e5e825ff2bff8ab5feca52717322046 4392 golang optional golang-gopkg-yaml.v3_3.0.1-1.debian.tar.xz
70a876e5059e4f7fa57fd3ba94c26efc 6500 golang optional golang-gopkg-yaml.v3_3.0.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=taW4
-----END PGP SIGNATURE-----
Reply to: