-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 11 Feb 2022 23:02:48 +0800 Source: golang-1.17 Architecture: source Version: 1.17.7-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.17 (1.17.7-1) unstable; urgency=medium . * Team upload. * New upstream version 1.17.7 + CVE-2022-23806: crypto/elliptic: fix IsOnCurve for big.Int values that are not valid coordinates + CVE-2022-23772: math/big: prevent large memory consumption in Rat.SetString + CVE-2022-23773: cmd/go: prevent branches from materializing into versions Checksums-Sha1: 7fd9edc0587212a27d9f134b7a1c6ef16bbb6224 2258 golang-1.17_1.17.7-1.dsc b0b3fd5885360df71018f850d66fa3ef5c85b523 22195583 golang-1.17_1.17.7.orig.tar.gz 82781bd2333f23ec321df93ba9aa831eb9214347 819 golang-1.17_1.17.7.orig.tar.gz.asc d84260bfa426eaaebb2c31d0d9d064b8e7060690 39136 golang-1.17_1.17.7-1.debian.tar.xz 811dd092d4655ac90666449b2ed8485eca4a3664 6227 golang-1.17_1.17.7-1_amd64.buildinfo Checksums-Sha256: 458defc21285414184ef156820d3394a3571137756654fcf917769964ffa261b 2258 golang-1.17_1.17.7-1.dsc c108cd33b73b1911a02b697741df3dea43e01a5c4e08e409e8b3a0e3745d2b4d 22195583 golang-1.17_1.17.7.orig.tar.gz 7edc7a6b1965e2a8d74c05a8c94a9c040999fba2763418af079f231cbd4d5d69 819 golang-1.17_1.17.7.orig.tar.gz.asc f6266890e86c0039fce1d6192450aaa3df1b2efe9de7ba81e855403cb80327f8 39136 golang-1.17_1.17.7-1.debian.tar.xz 95791f66a9d10c3c3160eb67a4ff78e7e6ee3b4a7ecc98b8b243cdc41f7f6a1f 6227 golang-1.17_1.17.7-1_amd64.buildinfo Files: a3e290f3ff19de8f4ad05edcd417ff6a 2258 golang optional golang-1.17_1.17.7-1.dsc 063999612df20d2f9b5777fb60eb2f82 22195583 golang optional golang-1.17_1.17.7.orig.tar.gz 2e17b8aeab033c4090d7fa4fb50bee80 819 golang optional golang-1.17_1.17.7.orig.tar.gz.asc b4f57fe3792b606b85707878821d5bd4 39136 golang optional golang-1.17_1.17.7-1.debian.tar.xz 8fd79c3475cfbfdb509ed235f9200dad 6227 golang optional golang-1.17_1.17.7-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iIYEARYIAC4WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCYgZ+zxAcemhzakBkZWJp YW4ub3JnAAoJEH9E+iXqVRTL1aMA/jZx5GmQTMv8wiqWzfWWBfzqKh9nbNM35Azo tSfT+iTdAQCDfNf6zUGWcWd9EMBnV2EeGSCbTqD/dB0x4oSwNwReBw== =WZNV -----END PGP SIGNATURE-----