-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 09 Aug 2020 16:12:45 +0200 Source: golang-1.15 Architecture: source Version: 1.15~rc2-1 Distribution: unstable Urgency: medium Maintainer: Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Dr. Tobias Quathamer <toddy@debian.org> Changes: golang-1.15 (1.15~rc2-1) unstable; urgency=medium . * New upstream version 1.15~rc2 - encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs. CVE-2020-16845 Checksums-Sha1: 0324e3a80f2fae4408afdad2b1df7cbf50b740a2 2892 golang-1.15_1.15~rc2-1.dsc 547226dff531f4c9738abf37b4bf8eddc4c39ef9 22999871 golang-1.15_1.15~rc2.orig.tar.gz 7d90b73659cd2697d4a99272a9ec1b022f5642d3 819 golang-1.15_1.15~rc2.orig.tar.gz.asc a5a3a43ee65e80bdc9d0b4fc8682583a3958efff 37940 golang-1.15_1.15~rc2-1.debian.tar.xz 039c95967133ee04d68080ab5ef00dc192b3d024 6317 golang-1.15_1.15~rc2-1_amd64.buildinfo Checksums-Sha256: c89e618af59a05cebcaf919c193eec15bf10eb2aac2436b6ad7a16d72a7cd162 2892 golang-1.15_1.15~rc2-1.dsc 3c6b4db00ec6d8958bb5693729343d08c245b634267130a966f052758579626b 22999871 golang-1.15_1.15~rc2.orig.tar.gz 67c4db4ac34797f02a85d61c347322fc9fcf5c30c136463a79d9e6c8e8b28938 819 golang-1.15_1.15~rc2.orig.tar.gz.asc 8c9c636299e704cd983432d0ca7088cd491f1bc6a64bb9e44db9c6b1038f19c1 37940 golang-1.15_1.15~rc2-1.debian.tar.xz 489a828ef119e401aceadbd26c0d81132a1c9071bcc556ed3e1acb16f01b6611 6317 golang-1.15_1.15~rc2-1_amd64.buildinfo Files: 38c5ae95266e5127076515227666ce25 2892 devel optional golang-1.15_1.15~rc2-1.dsc bde06d5f80c9d1bb589cfd47a90952d5 22999871 devel optional golang-1.15_1.15~rc2.orig.tar.gz 33f03ec72155945e5c2ab0b298537279 819 devel optional golang-1.15_1.15~rc2.orig.tar.gz.asc 2772596695c63ea8f98ba7c6a69ab5e4 37940 devel optional golang-1.15_1.15~rc2-1.debian.tar.xz b7017797b8c7e35b05d0f1dd5043c07d 6317 devel optional golang-1.15_1.15~rc2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE0cuPObxd7STF0seMEwLx8Dbr6xkFAl8wBkIACgkQEwLx8Dbr 6xnAlA/+LydLKHE8y7I0T0xOqElXmTljegb8xeNjXAmmtJpSFALcjjF4S66n82bM Y8FthoFktMhW7HjO9daK3TTFUpnCpP1s29Tg9XcUgFDpsnBQqeaZkWR0JhFaSc7F f0f1KiyNibZK8wlwFC28qUDpf/hqD4AkfsWsHPhgv4kspjoccZkuOB8fafevorlL 5wkgiuo2mL85wf9g6AjU36xVrmGkz9UyhDXiRxup62tZMhgkTlaqzIKGwv6awZAc F9xeGoPzODu2m1TNeg3uUWPGh/tB1mNww1aXgeOHFNmeazsGLBX6sgslxEK9SEQ1 BKp2mGHh4FnzqaqqHUVqFB1NRZk5+3jo4TRLUA3hWwwz6l4xP+c8EBr6xQvrriqT lqcmlIFQMy3aReEtbl0v8TLPq9btOBr1eaOrmSdLH5FDIQ2cg7nJyR6maZySoRCM BnA1Gxx2qzA1lQ9pAb004lwArgKAA2EdlIwtYYN+P/SUyZPZlcNaoJo5FAyEaKgJ yhDxjFe+eXXsNhdVWY93wq2n3LUWOW9wsls/D/R6BpQ4ichuGE+aewwbCCCfgESz 8+Zz+gr3adW9CaWgPIQ6Jc+kUHzmpJQXoq3vIG/EIbPgUlwPurKVAKIA0d3BDKXy +s8Qv6pRT44tafP/A3sfOoecgLN+lBkn4oWo0zwV3Mwk4nVUKvU= =IJdt -----END PGP SIGNATURE-----