-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 06 Aug 2022 04:56:18 -0600 Source: golang-1.18 Architecture: source Version: 1.18.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Anthony Fok <foka@debian.org> Closes: 1008114 Changes: golang-1.18 (1.18.5-1) unstable; urgency=medium . * New upstream version 1.18.5 + CVE-2022-32189: math/big: index out of range in Float.GobDecode + cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags (Closes: #1008114) * Remove 0005-cmd-compile-revert-fix-missing-dict-pass-for-type-as.patch which has been applied upstream in v1.18.5 * Bump Standards-Version to 4.6.1 (no change) Checksums-Sha1: 2fcfc9c94fa12ff147a158b4a144f3c0d3b91cdb 2861 golang-1.18_1.18.5-1.dsc beaf943c6ef80e484ea42fa823abf2a0f32e884e 22847094 golang-1.18_1.18.5.orig.tar.gz 1d657269e8860bba7db86e19541a1b51110a5409 819 golang-1.18_1.18.5.orig.tar.gz.asc 05f5d56803a958d02c87bf8d17576554ec433fc2 41868 golang-1.18_1.18.5-1.debian.tar.xz 215c832ef31d70d7566f5e294922f6af1769f879 7072 golang-1.18_1.18.5-1_amd64.buildinfo Checksums-Sha256: e3d855b32151c316cd72a49d5d2f97150f09a17937c876c72ba933179a18c0f0 2861 golang-1.18_1.18.5-1.dsc 9920d3306a1ac536cdd2c796d6cb3c54bc559c226fc3cc39c32f1e0bd7f50d2a 22847094 golang-1.18_1.18.5.orig.tar.gz 64fbb0a2bccdf4d796c0e739a302b96346784e7f3e1cb77cbffefc24ad4389ac 819 golang-1.18_1.18.5.orig.tar.gz.asc 752cd4d1ca0f33ba21469aea6f74bdae4134ae70ed7bc34d740cc5200e91c436 41868 golang-1.18_1.18.5-1.debian.tar.xz 6a5ec8cbb4d1bc97394065b0d5cc03fcc2924729243f39eceb25b985d395f8d9 7072 golang-1.18_1.18.5-1_amd64.buildinfo Files: dc9aca7945d7985e7b469f5ad62e2fae 2861 golang optional golang-1.18_1.18.5-1.dsc 8aa3105925106f7fdfd966d12a83833a 22847094 golang optional golang-1.18_1.18.5.orig.tar.gz df6cfc1ce77695ccfb5c76b231e6c322 819 golang optional golang-1.18_1.18.5.orig.tar.gz.asc a11d2b51820ef5df5966c15779a0e040 41868 golang optional golang-1.18_1.18.5-1.debian.tar.xz 410b0ebb978a44db232d3dbeae6d167a 7072 golang optional golang-1.18_1.18.5-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAmLuXKgQHGZva2FAZGVi aWFuLm9yZwAKCRDqJQC0EsWazx62D/9LWwPxCh1kdgafd2YK7N7yDj8s2cLh0178 2z/uclJY2OSR0o1ngwtEfCRUQNk2FUR9Vpa4+84ieG2hw4iVl2MntM/hWYN0AaKw kjs9sfqVk+qGnHueVTLZ2c16pOmTAi2ZEi0EFOplfl4H89Y8HbLrfdOuYf9Ftv6g CK2exy+4FA4EAyhRsTzRUAggqv+NQKklZhFu/Z3RHRqAMU2CexUR5vzazklmthFc Z0PQuMlgs1jOkKAXBR/ejWF6xROKZ8pOl9P1aMEKGey0pemPZ1MlQ5rq0QQrq1Gz mkmjcF7MRi7lADUuUZONKuq4TmuctBA4gdvNV191OaYrCjfmyHXkdlq7/NYt43sp X7dc0NVfW66RBOCEoAwoM5fRhD4UA8di/Ilx09Jmf9JyCPtVTrSGR4OW/+OwsJhk xQc0k0YLe2Iw0P//UN+XFl0Q+eLiotfhIkLlnC7RwcxDvYSgnMB6h8/HB2m0zfMW 8ikT8XkHuTYyxyPNX0iB6A9uP6CcIupmKf7h7Fj2HE3uTk1VKWc/OCHtSdNMYUOH Cq0qn5irCfOx5Sr/5fNjn+tRFlj4kcj0q8HzTy5IZGuc4nOk2vYl2DbhhrfJZNiP UYCxw40Xx9YsCMSxKy8SUN/g8GliYhaTJ753e1Gun9P7SBy4fbRpGgGzny+cfSDg bedfTkqySQ== =5TbO -----END PGP SIGNATURE-----