-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Oct 2022 15:23:25 -0500 Source: golang-1.19 Built-For-Profiles: noudeb Architecture: source Version: 1.19.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: William 'jawn-smith' Wilson <jawn-smith@ubuntu.com> Changes: golang-1.19 (1.19.2-1) unstable; urgency=medium . * New upstream version 1.19.2 + CVE-2022-2879: archive/tar: unbounded memory consumption when reading headers + CVE-2022-2880: net/http/httputil: ReverseProxy should not forward unparseable query parameters + CVE-2022-41715: regexp/syntax: limit memory used by parsing regexps Checksums-Sha1: 38af7286bfdfecc9207477259055e5cc6d64d868 2836 golang-1.19_1.19.2-1.dsc 08a593aeb87f8a00617f5168c64c24868c3d950c 26534465 golang-1.19_1.19.2.orig.tar.gz 043aab3d8d4709f0d90543ef162e6fbc537dbf06 819 golang-1.19_1.19.2.orig.tar.gz.asc 5fa507209cf985c2d5116f269b1c09a271b1eabe 41348 golang-1.19_1.19.2-1.debian.tar.xz 9de5b0da6edcb4177232d6fc41fee7793bc4a4d2 7189 golang-1.18_1.18.7-1_source.buildinfo c3a7a2357164d4cf15e0991e62eb89517725fc97 7189 golang-1.19_1.19.2-1_source.buildinfo Checksums-Sha256: 7dc3a8519ac94f7f429636f91d78254dc5466097213a6ada4bef70b9d14f2a6f 2836 golang-1.19_1.19.2-1.dsc 2ce930d70a931de660fdaf271d70192793b1b240272645bf0275779f6704df6b 26534465 golang-1.19_1.19.2.orig.tar.gz bdf5bc6e6a3f071b773e70ae704c4285aa678af73ceae42f73ea80392510b1b6 819 golang-1.19_1.19.2.orig.tar.gz.asc 9a8ebb1df8afcf76d448f324f2cffdf570b2c6625d8bccb0c0496559a1ccd2a3 41348 golang-1.19_1.19.2-1.debian.tar.xz 5e7f0810896a422592d5f0183c5bb3d4b5071ff5ef7584efb297150501ea04e2 7189 golang-1.18_1.18.7-1_source.buildinfo 0e13303fd820f7df024a04c9d3e31d1b987efc5f1bcbb9ffac87fc3135d25011 7189 golang-1.19_1.19.2-1_source.buildinfo Files: 3d53484d1bd3d2f13b4a6b58d59a2aa2 2836 golang optional golang-1.19_1.19.2-1.dsc 59ca075e532508f50c2714da4148e4b3 26534465 golang optional golang-1.19_1.19.2.orig.tar.gz e66fb7ffc0505ab4a6bac3f4598c3909 819 golang optional golang-1.19_1.19.2.orig.tar.gz.asc ea5dcc0eac568c7bd89e3a92647d7c04 41348 golang optional golang-1.19_1.19.2-1.debian.tar.xz 3caedf9f7f4a0089045443e89140f281 7189 golang optional golang-1.18_1.18.7-1_source.buildinfo 77c55dd87eec48248057903b3b77da7a 7189 golang optional golang-1.19_1.19.2-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEiiBE+E9xaoW3f/djEd9ClMyjmJMFAmM8socACgkQEd9ClMyj mJMScw/+PHrHHwdHGSbmx2Nxt0QHyGHRqEruWVol06Dk2/J08ZmO7+6FILySp/Ql BkRxlqSJb5LaTZMFQVANaFAFV9Ra6XzT/8Szp3dUPBPR0zUPAoGkBWTK6gOfIC0B wNkz213HEzd+SuaKv0aoPCgHbgg4W4BtuUjfeqzHbXZQlM+tme8UNH23BEq5NRla 2gDSj0NajzA2IlKqGwyRXO6tSrOwwqPxs0TZh7BXXEgLvuXUMmjdTRaiIEcIPPwD 2nlLQ+bvO/YNv74BXWP6l1ByVq+9YeZXLAzbSmMl3/UwXnjohPw2HOtuG5/vtGHm bRO7OoJJ0tP6HcM5IUpUQJ2PW2uGMRMrAwyCpHH766Bi4qQ8N6RCfIeaIUfkkHz8 x5AJRH68lgRVgxh1lHP6WSQ6xYRNXZ/8xNIWpQoyqLzddqPJr6abEBic7/t1H2L8 UkwykebZn1kGXhZazaqRHIIkrySV2hS6t7jTgO9mljFvyxcHINFICqq3f6tDu4Ei XZ+KJo0aPkru7Cp5zm8urombtPI/ugW/v4yoG4wWb5UNk/lrIwRPs4qDw+jZnn2x urzf/0+tDxpLiWIrLeElC7vKGlHSL+ul7kV1XjWRsW7rM2vHBcslrnehWvOqOX0r 5eBCXuAZiElthFJK7l7o44Wdrl/ZLZL4Q6oNaFdrcZiF458UkI8= =sF++ -----END PGP SIGNATURE-----