-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 29 Sep 2022 00:11:17 -0600 Source: golang-gopkg-yaml.v3 Binary: golang-gopkg-yaml.v3-dev Architecture: source all Version: 3.0.1-1~bpo11+1 Distribution: bullseye-backports Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Anthony Fok <foka@debian.org> Description: golang-gopkg-yaml.v3-dev - YAML support for the Go language Closes: 1011338 Changes: golang-gopkg-yaml.v3 (3.0.1-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports. . golang-gopkg-yaml.v3 (3.0.1-1) unstable; urgency=medium . * New upstream version 3.0.1 + CVE-2022-28948 - crash when attempting to deserialize invalid input Thanks to Neil William for the Debian bug report! (Closes: #1011338) See also https://github.com/go-yaml/yaml/issues/666 * Change debian/watch to track v3 release tarballs now that v3.0.0 and v3.0.1 have been released * Reorder fields in debian/control and debian/copyright * Update comment in debian/watch according to upstream LICENSE file * Mark library package with "Multi-Arch: foreign" * Bump Standards-Version to 4.6.1 (no change) . golang-gopkg-yaml.v3 (3.0.0~git20210107.496545a-1) unstable; urgency=medium . * New upstream version 3.0.0~git20210107.496545a * Fix "pretty" version from 3.0~ to 3.0.0~ in debian/watch * Bump debhelper dependency to "Build-Depends: debhelper-compat (= 13)" * Bump Standards-Version to 4.6.0 (no change) * Add myself to the list of Uploaders Checksums-Sha1: 597536416b006218c59f3bb05e5d2fe6e79d621b 2258 golang-gopkg-yaml.v3_3.0.1-1~bpo11+1.dsc 8725002831a1347d26448f9b3fa00baecabb32b8 4436 golang-gopkg-yaml.v3_3.0.1-1~bpo11+1.debian.tar.xz 9f95e9dcb7efe03a6f76c093c81791edb7b800e3 74232 golang-gopkg-yaml.v3-dev_3.0.1-1~bpo11+1_all.deb 318c1a1fccacdf0f3a5caf23e6af93c5bc393bbf 6568 golang-gopkg-yaml.v3_3.0.1-1~bpo11+1_amd64.buildinfo Checksums-Sha256: f951c8e2bd7236dc5a72d3759efca97f273c7d72c531fc51c8058b0334937526 2258 golang-gopkg-yaml.v3_3.0.1-1~bpo11+1.dsc 1b920f71fda7a059bc57763be564e9965c7a3a6cf5bf85fde0b2012894dabbd0 4436 golang-gopkg-yaml.v3_3.0.1-1~bpo11+1.debian.tar.xz 42545d409fb2c16e14138a999bdb9a04161eabf49850f567056d35ff2ee15f7a 74232 golang-gopkg-yaml.v3-dev_3.0.1-1~bpo11+1_all.deb 192d3b7599b267cb1b763fa435c3b201f343f4af64ab2c6ca1c5a3ac8cb46bc9 6568 golang-gopkg-yaml.v3_3.0.1-1~bpo11+1_amd64.buildinfo Files: cdf6a7155e5523fff909be1e347a280f 2258 golang optional golang-gopkg-yaml.v3_3.0.1-1~bpo11+1.dsc 8dfe3a668e8e2f8b204b378077ac52ec 4436 golang optional golang-gopkg-yaml.v3_3.0.1-1~bpo11+1.debian.tar.xz 758d3a5059a5f1d3257244c04ca75a18 74232 golang optional golang-gopkg-yaml.v3-dev_3.0.1-1~bpo11+1_all.deb 0758bd12b0b6c48d28728c9fe2a856d6 6568 golang optional golang-gopkg-yaml.v3_3.0.1-1~bpo11+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAmM1OF0QHGZva2FAZGVi aWFuLm9yZwAKCRDqJQC0EsWazygHD/4oeb6Fow68nDXJMz5UAP7CIs4gcXs8OJq4 6Ev6TIWDZVyPIofK15aEJ+PSiMbleXZIDN8lEdkcJsgKXKStfROqkPMlT0facTmG ojeHj2gCxvTghWyEANQokMzFkfFMXCPoLDpBXhMHE9IvwkbyOAt0ll1h8uSQh20s 1TyzhCBJkE6OkijMXwKIXGnwEdLThiSMebrDMIYa5caZl6+jQbTfVAUaEsUSUogv TNnWNGJ9RXiFu4GKxNZl7od5Yr07pAbUV8Umrhtk42gxgnmOQTJpNjGIbUKvqr1U p4MtgUTnsOPVK5CiGsYS35eAD3TjPT8RZRybCarhinT8egzjAG44WRhPS/2B3li+ +DUx3PW0A9aCqF0i4Pgzyz0HarMvZeG9IywLbfIS+ExgK70cyPAV/k9a+SPatNod o04l0Ids+f120HiBllRKwEbmOso58ZME7rzILAqzM7QGQhU52UZRP9csvQoYkDIa 0fvozz2uaZNXgevgJB3npVfsToqNGRQUIn1VAXxLScLS4+KYPt8Slni/4arusKNF 05GFz9z1eR2j10FG4srTlLsKMDO68pHsG7YeCrhu1G7OtxnmPXVF4Oc86lo5/wxu v+t+02Wz8JHVxan10YFKzt1bNy0Fhlb/CKCQopen5RrdnHClJsZS7XqJX4OlBZNX a6bDjZkH7w== =uoD5 -----END PGP SIGNATURE-----