-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 14 Feb 2022 20:45:30 -0700
Source: golang-1.17
Architecture: source
Version: 1.17.7-1~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Anthony Fok <foka@debian.org>
Changes:
golang-1.17 (1.17.7-1~bpo11+1) bullseye-backports; urgency=medium
.
* Rebuild for bullseye-backports.
.
golang-1.17 (1.17.7-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 1.17.7
+ CVE-2022-23806: crypto/elliptic: fix IsOnCurve for big.Int values
that are not valid coordinates
+ CVE-2022-23772: math/big: prevent large memory consumption in
Rat.SetString
+ CVE-2022-23773: cmd/go: prevent branches from materializing into versions
Checksums-Sha1:
fd899df746144d7ae1b7f9782e05a5492a27d2fb 2896 golang-1.17_1.17.7-1~bpo11+1.dsc
5a055c1d641abf917593d48dbe30d3ec630b7cdb 39260 golang-1.17_1.17.7-1~bpo11+1.debian.tar.xz
34ec058c75f9a907bcd10e2737973ce561cdacd4 7024 golang-1.17_1.17.7-1~bpo11+1_amd64.buildinfo
Checksums-Sha256:
b0e5e098c8533ed52d2b95bf8cfcc1d2ad5b80f4677be4296614ba23f23a7911 2896 golang-1.17_1.17.7-1~bpo11+1.dsc
05e3bbe959cb32cc38a87e272f2c9699f2ad561bb4ce712ce71cbaf4233c337f 39260 golang-1.17_1.17.7-1~bpo11+1.debian.tar.xz
53bac26c01cfb947deeee4700c7195615a102e7148951bed535f107828026126 7024 golang-1.17_1.17.7-1~bpo11+1_amd64.buildinfo
Files:
d2d780515cb0e58c3e4540d5e5a751d4 2896 golang optional golang-1.17_1.17.7-1~bpo11+1.dsc
9c8e4c1c22c11f73e76684b1566c9941 39260 golang optional golang-1.17_1.17.7-1~bpo11+1.debian.tar.xz
07e2fca8f3615ed8dcea603da1b12eaf 7024 golang optional golang-1.17_1.17.7-1~bpo11+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=R3y7
-----END PGP SIGNATURE-----
