-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 03 May 2023 14:56:49 +0800 Source: golang-1.20 Architecture: source Version: 1.20.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.20 (1.20.4-1) unstable; urgency=medium . * Team upload * New upstream version 1.20.4 + CVE-2023-24539: html/template: improper sanitization of CSS values + CVE-2023-24540: html/template: improper handling of JavaScript whitespace + CVE-2023-29400: html/template: improper handling of empty HTML attributes Checksums-Sha1: d76b9729f2c25da830081802828282129ee01c86 2234 golang-1.20_1.20.4-1.dsc 1a51835ce400660e292ea88ff5489de80ad17629 26185429 golang-1.20_1.20.4.orig.tar.gz ba13557fa0cab1aaf889d6a7e9ee70f900771b50 819 golang-1.20_1.20.4.orig.tar.gz.asc 0a43705630e0cf9ef87062f6c90518f91a4f2c5d 37108 golang-1.20_1.20.4-1.debian.tar.xz d9ea761fd5151cfaf67af0cc8697ed9fe8bebcb8 2706 golang-1.20_1.20.4-1_source.buildinfo Checksums-Sha256: 134d73b4f468fbab30143bb75e381debd84f2c9834b4951376cae3cc52b166a5 2234 golang-1.20_1.20.4-1.dsc 9f34ace128764b7a3a4b238b805856cc1b2184304df9e5690825b0710f4202d6 26185429 golang-1.20_1.20.4.orig.tar.gz 85ae53efef68a71235bde15841df8cfe6e8959904eaf516b31e6027a33c7f356 819 golang-1.20_1.20.4.orig.tar.gz.asc 038ac58a13c295e7ba745d69f202c3bd1577e13aad5170cae97a2f7f12a07c8b 37108 golang-1.20_1.20.4-1.debian.tar.xz 3599974c21866b6af10bac279ff03b54ca1404ba2b55284309ab472541463997 2706 golang-1.20_1.20.4-1_source.buildinfo Files: c82fdae0b9b5dd8dc0be533028eea094 2234 golang optional golang-1.20_1.20.4-1.dsc 2ea74f4e87758e0fbeb4cc6d04d2e020 26185429 golang optional golang-1.20_1.20.4.orig.tar.gz 7098dc3b0b92dc986eee560d641c12fe 819 golang optional golang-1.20_1.20.4.orig.tar.gz.asc bd6629b9672ee74d97ad144db8fca0df 37108 golang optional golang-1.20_1.20.4-1.debian.tar.xz a661fa32f20520f06dab999fa0133c79 2706 golang optional golang-1.20_1.20.4-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iHQEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZFIJ7gAKCRB/RPol6lUU y832APiOQ1G1WFjk4CzVYx8xEYcuKI8xa2GwdZ0xx76rUtqlAP0VsOPLBYLakKIU Tufm90DrLq4mGNBL+LkR5zsvAsLAAg== =EXiL -----END PGP SIGNATURE-----