Accepted golang-1.20 1.20.4-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 03 May 2023 14:56:49 +0800
Source: golang-1.20
Architecture: source
Version: 1.20.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.20 (1.20.4-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.20.4
+ CVE-2023-24539: html/template: improper sanitization of CSS values
+ CVE-2023-24540: html/template: improper handling of JavaScript whitespace
+ CVE-2023-29400: html/template: improper handling of empty HTML attributes
Checksums-Sha1:
d76b9729f2c25da830081802828282129ee01c86 2234 golang-1.20_1.20.4-1.dsc
1a51835ce400660e292ea88ff5489de80ad17629 26185429 golang-1.20_1.20.4.orig.tar.gz
ba13557fa0cab1aaf889d6a7e9ee70f900771b50 819 golang-1.20_1.20.4.orig.tar.gz.asc
0a43705630e0cf9ef87062f6c90518f91a4f2c5d 37108 golang-1.20_1.20.4-1.debian.tar.xz
d9ea761fd5151cfaf67af0cc8697ed9fe8bebcb8 2706 golang-1.20_1.20.4-1_source.buildinfo
Checksums-Sha256:
134d73b4f468fbab30143bb75e381debd84f2c9834b4951376cae3cc52b166a5 2234 golang-1.20_1.20.4-1.dsc
9f34ace128764b7a3a4b238b805856cc1b2184304df9e5690825b0710f4202d6 26185429 golang-1.20_1.20.4.orig.tar.gz
85ae53efef68a71235bde15841df8cfe6e8959904eaf516b31e6027a33c7f356 819 golang-1.20_1.20.4.orig.tar.gz.asc
038ac58a13c295e7ba745d69f202c3bd1577e13aad5170cae97a2f7f12a07c8b 37108 golang-1.20_1.20.4-1.debian.tar.xz
3599974c21866b6af10bac279ff03b54ca1404ba2b55284309ab472541463997 2706 golang-1.20_1.20.4-1_source.buildinfo
Files:
c82fdae0b9b5dd8dc0be533028eea094 2234 golang optional golang-1.20_1.20.4-1.dsc
2ea74f4e87758e0fbeb4cc6d04d2e020 26185429 golang optional golang-1.20_1.20.4.orig.tar.gz
7098dc3b0b92dc986eee560d641c12fe 819 golang optional golang-1.20_1.20.4.orig.tar.gz.asc
bd6629b9672ee74d97ad144db8fca0df 37108 golang optional golang-1.20_1.20.4-1.debian.tar.xz
a661fa32f20520f06dab999fa0133c79 2706 golang optional golang-1.20_1.20.4-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHQEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZFIJ7gAKCRB/RPol6lUU
y832APiOQ1G1WFjk4CzVYx8xEYcuKI8xa2GwdZ0xx76rUtqlAP0VsOPLBYLakKIU
Tufm90DrLq4mGNBL+LkR5zsvAsLAAg==
=EXiL
-----END PGP SIGNATURE-----
Reply to: