-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 09 Sep 2024 16:31:19 +0800
Source: golang-1.22
Architecture: source
Version: 1.22.7-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.22 (1.22.7-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.22.7
+ CVE-2024-34155: go/parser: stack exhaustion in all Parse* functions
+ CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
+ CVE-2024-34158: go/build/constraint: stack exhaustion in Parse
Checksums-Sha1:
29327c117b15cd7418af9ac12e3adf2614fa0d79 2483 golang-1.22_1.22.7-1.dsc
d7fb5272d9d81206aefd66091ecaa76beb4b8dc4 27562038 golang-1.22_1.22.7.orig.tar.gz
baf11dc331b1828f6310c646edcfba0451112bea 833 golang-1.22_1.22.7.orig.tar.gz.asc
d2691b5e177fe134524d1308a702fc40772e7b13 41304 golang-1.22_1.22.7-1.debian.tar.xz
79309c61bf996803e13d507b3dfe05bb2bbf19bf 6284 golang-1.22_1.22.7-1_amd64.buildinfo
Checksums-Sha256:
fb8422d1aa717e47e48673957f1c0871cba55ced452720dbfb713d0f047f3fec 2483 golang-1.22_1.22.7-1.dsc
66432d87d85e0cfac3edffe637d5930fc4ddf5793313fe11e4a0f333023c879f 27562038 golang-1.22_1.22.7.orig.tar.gz
9c7979cac2ea56fe6426bf42e84cda62b4419b6edafd6a59e64005d401981f7a 833 golang-1.22_1.22.7.orig.tar.gz.asc
f6ee85a5fc2c12526ffe64c2ce82e3d36bc5b32c336de563ae18aae78fc80e6a 41304 golang-1.22_1.22.7-1.debian.tar.xz
0b13c15af2b0bbe6ea5272c1ccf4a228020856e5ada5bf165aa1d6abb3722411 6284 golang-1.22_1.22.7-1_amd64.buildinfo
Files:
ea5f7225cf2d82cd77e34a71a29e0c36 2483 golang optional golang-1.22_1.22.7-1.dsc
59f70fbfefc4fd6d5ec1f1fd6ca81c32 27562038 golang optional golang-1.22_1.22.7.orig.tar.gz
1e3fcddb78460d3b2c0193510aff077d 833 golang optional golang-1.22_1.22.7.orig.tar.gz.asc
672b9ea438d80fb8cb033c53f5a68bbd 41304 golang optional golang-1.22_1.22.7-1.debian.tar.xz
c057ab3de99836d8c30c800bbacc0343 6284 golang optional golang-1.22_1.22.7-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEc793ixFTU9Vien7Zh7Iv85yjO70FAmbeuS0ACgkQh7Iv85yj
O71lPAgApmS4Ln1tp5UnceqdGVfi8rfK6VzydwSc0ef4T44ZaB22TY5sjS0fanSr
vhkFq9bLduD7DARqpeOy0EhiVvdDJf4a7o7EbX+pN9UZmqq1bHCzR6l8p3SgKuph
rWHQse5s1UiRNHEnz4XC0E0gdocclYCpyuwFsRy+sryFNyuCR713YyiFG1a4R+S7
iop4Rx/dwTkKIglKjG+UPK77XBjYGzTiLugA6YWt1PaFufPmXoVUjp6KR4o0dFAF
1IS8Klw2LpIJdlO0u4nB0XAHa0x/Ydrmxu6LWJbOWLF1w+mbBsJLErkVANT2Hy48
Im1+gULOLkyvdvHR9YtcXDlsiu1TNA==
=gbaJ
-----END PGP SIGNATURE-----
Attachment:
pgphpHXUUrk_e.pgp
Description: PGP signature