Accepted golang-websocket 1.4.0-1+deb10u1 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 13 May 2023 23:01:34 CEST
Source: golang-websocket
Architecture: source
Version: 1.4.0-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
bab847670647a7c8b7f7bbf781e4caf38bd4f45d 2429 golang-websocket_1.4.0-1+deb10u1.dsc
04d23fc4fb03d77faaf2fb252e18ffad15653ec0 50228 golang-websocket_1.4.0.orig.tar.gz
245408c1e8fd445169ec5e10c1decfe194108351 7232 golang-websocket_1.4.0-1+deb10u1.debian.tar.xz
e9622f69f86806537741ef6f6ecde4b8acce1f52 6351 golang-websocket_1.4.0-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
dca6e6ee0f75a5679fcc7d341f8227d3e1bb572e5aea5ae6973b40083c983941 2429 golang-websocket_1.4.0-1+deb10u1.dsc
2b5743c72bd0930c5a80e49c0138b5b7d27fa7c085efd0c86805cccfa7220c9d 50228 golang-websocket_1.4.0.orig.tar.gz
3ce09f41f3a00b8abe8bd6530174be924a520027286fe06806565bbb82b1870a 7232 golang-websocket_1.4.0-1+deb10u1.debian.tar.xz
392a33155c0d69e21e539f485890635a56cf79c8a0a387f6ce77163ea4421014 6351 golang-websocket_1.4.0-1+deb10u1_amd64.buildinfo
Changes:
golang-websocket (1.4.0-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2020-27813: An integer overflow vulnerability exists with the length
of websocket frames received via a websocket connection. An attacker would
use this flaw to cause a denial of service attack on an HTTP Server allowing
websocket connections.
Files:
4d70de645581da69ea1c6b00156cf67a 2429 devel optional golang-websocket_1.4.0-1+deb10u1.dsc
2cb0c26b0b541029d9c195424a6515de 50228 devel optional golang-websocket_1.4.0.orig.tar.gz
1fff44b6282a73f71052d827b2ad0f2c 7232 devel optional golang-websocket_1.4.0-1+deb10u1.debian.tar.xz
9c59cf5471ef4a64905adbb25ec7fb00 6351 devel optional golang-websocket_1.4.0-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmRf+6ZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkxNkQAKcrVTYYZb/MdybpqadsXOSmCzw/tcNebtmv
WPkBOAhtzmxjTyPCHRhbfqPfp3BQqPkeo3BubPJeXWmf79lJIrYgom57fxQA2MOx
/4GP5ei2bVYU7M+youuban094Zj11FP49/zv4jGpBd5Sw3EfnBNpdGrhK9zSxoUI
o814wvResYaApWgrC3RijefeinbjVBKPho4o50QIIGclR55lIajmbQZb12lRN0MR
xF1/nyNZ7Lc+AhcaXCtj6eSN1pV1PifTieu2kITFtl96pMz9JZyRnHv1x3I3Awgs
yv01obu3Kiz4W874R1xOgoFRGPBLgvWqjdZwTzKPRXOyTUHX9QxgB9oyF73MwQyj
4mIzkWn4tXuDReNz9ZrFtPOyOPQ/gNxFtsaZTgkn1b7DGq2nvd4t03LtPMuNuI12
Iy3QdryIJl301+fZfIlF/XOeNcAdu7wZ/dFBE+K2Y4CwAubk250aPtyfNaGscF6X
2gFtAwt7tVVdzYuu2FYLV9LZjxg7Fa3LqfD5nSwOFKqVCmrdWAPU4nPUnkaHouGO
p2N1q3T/12BNlTgKzR9Xp/v3rMC/DR6LxdUnI1IfXIeAy/UpgAi6cI3dlTWw6W1y
gNOF6ssqH/MxkbDlBxoXFmCbhOrB2wSZ3NEOoNJPO/EzCmJyoFeB4/caHh5EysIc
PwYjunvz
=3Bnw
-----END PGP SIGNATURE-----
Reply to: