-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 15 Feb 2023 09:53:55 +0800
Source: golang-1.20
Architecture: source
Version: 1.20.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.20 (1.20.1-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.20.1
+ CVE-2022-41722: path/filepath: path traversal in filepath.Clean on
Windows
+ CVE-2022-41725: net/http, mime/multipart: denial of service from
excessive resource consumption
+ CVE-2022-41724: crypto/tls: large handshake records may cause panics
+ CVE-2022-41723: net/http: avoid quadratic complexity in HPACK decoding
Checksums-Sha1:
05ab1cd7f33e2be1eb15ef4f56d1e530964c5519 2234 golang-1.20_1.20.1-1.dsc
ee351b068c5d965e0d657dceccc91a5c5fb8e422 26172675 golang-1.20_1.20.1.orig.tar.gz
a14bbb130d997396fe0d04d57f998714e7f025f5 819 golang-1.20_1.20.1.orig.tar.gz.asc
c05c05f3365f8de7f358da93a3e922eecacaae86 36916 golang-1.20_1.20.1-1.debian.tar.xz
40a2e24418fd96b9c1d497cab42a7f7dd1cb57c6 6191 golang-1.20_1.20.1-1_amd64.buildinfo
Checksums-Sha256:
2aeaf7a8df7fe7e9e37721d23497a3301cdbc526cb27cbac8da1330255a03452 2234 golang-1.20_1.20.1-1.dsc
b5c1a3af52c385a6d1c76aed5361cf26459023980d0320de7658bae3915831a2 26172675 golang-1.20_1.20.1.orig.tar.gz
62787b7d7d39c18cb5cb1c940a372c3b742d509fe40fd8fd72c42390af45ef04 819 golang-1.20_1.20.1.orig.tar.gz.asc
b632a4df72975383a4a457649ddd4aba53a154f37dd164f1a168b01ce5632bd5 36916 golang-1.20_1.20.1-1.debian.tar.xz
82166f8dc8f2e8d885f0480a6cd412dee95121aec63ea177ce01bc4219119223 6191 golang-1.20_1.20.1-1_amd64.buildinfo
Files:
f6213add2d427fbde6f4fe5763a400b9 2234 golang optional golang-1.20_1.20.1-1.dsc
06544356f41811af9e73797d6962793c 26172675 golang optional golang-1.20_1.20.1.orig.tar.gz
08be5ef950cb44b732ac184a2948114b 819 golang optional golang-1.20_1.20.1.orig.tar.gz.asc
ab5e8dfcc8bcd5c7873d4971f3802658 36916 golang optional golang-1.20_1.20.1-1.debian.tar.xz
13986cd9bb5139aa4f17e4f54ef59d8b 6191 golang optional golang-1.20_1.20.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCY+w+IwAKCRB/RPol6lUU
yxF3AP0fw+9aKUvUhPDMEcMJe/utVi4PJrBOGJQ/9RP4KIo3+gD/bgcPIAZLffD4
AW+6Xq6zdBjo9RGftzSOZWRWCYt6bwA=
=JNls
-----END PGP SIGNATURE-----
