Accepted golang-1.20 1.20.12-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 06 Dec 2023 15:36:27 +0800
Source: golang-1.20
Architecture: source
Version: 1.20.12-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.20 (1.20.12-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 1.20.12
+ CVE-2023-39326: net/http: limit chunked data overhead
+ CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git
+ CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths
like \\?\c:\
Checksums-Sha1:
113bb56bdad52b2b6e9ddc4718fc36b56574a464 2303 golang-1.20_1.20.12-1.dsc
38493b91c326107cbafcd547389b62ceb00fe390 26200362 golang-1.20_1.20.12.orig.tar.gz
e9559e88aceb03e57f41ef0fa33c22b5baa4ecab 833 golang-1.20_1.20.12.orig.tar.gz.asc
a5e54823d5f0cc6e4839e5a7b2cd2c2d464cd382 37872 golang-1.20_1.20.12-1.debian.tar.xz
22cc4f1b7d64491c5f3e484f1973f0c6bd7495fa 6333 golang-1.20_1.20.12-1_amd64.buildinfo
Checksums-Sha256:
e35c801420f8033928b7246f728ca9e2f82a07729bb015a5e2a4197c5ee6706c 2303 golang-1.20_1.20.12-1.dsc
c5bf934751d31c315c1d0bb5fb02296545fa6d08923566f7a5afec81f2ed27d6 26200362 golang-1.20_1.20.12.orig.tar.gz
d93af51415c59728deb2860c3354c6c757bc4cf0cc0b84377fc505921510821b 833 golang-1.20_1.20.12.orig.tar.gz.asc
4c48e8d58a814db789e13e988eaa9b9cf1df0874fa0d60455ea8e51eeaffcdf4 37872 golang-1.20_1.20.12-1.debian.tar.xz
d54609c23dcbb3afca69793c47a7a930dc7ef1c33f5a11a8cbb8d943b30c11fa 6333 golang-1.20_1.20.12-1_amd64.buildinfo
Files:
b41296a582aa58ed32d5b0773c0dbc47 2303 golang optional golang-1.20_1.20.12-1.dsc
0438b991bbc4a4410e42662855cb95b9 26200362 golang optional golang-1.20_1.20.12.orig.tar.gz
240c3ff6ac44f150fe57bc06f5e733ce 833 golang optional golang-1.20_1.20.12.orig.tar.gz.asc
056b631962bac81a32d34fe2528dd2e1 37872 golang optional golang-1.20_1.20.12-1.debian.tar.xz
bc2e1e4bc2b7e3fb6546d42471d60676 6333 golang optional golang-1.20_1.20.12-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZXAnqgAKCRB/RPol6lUU
yzuqAP9aD/4uo01BzqDLFKg7yPcG/jye+BFK6+V4+ITiq5BPfgEAyItvve+JW7Lp
Zt5cGCmSc4/drcN3VJHEM/GlGJxHbwU=
=No9Z
-----END PGP SIGNATURE-----
Reply to: