-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 07 Jun 2023 12:28:33 +0800 Source: golang-1.19 Architecture: source Version: 1.19.10-1 Distribution: experimental Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.19 (1.19.10-1) experimental; urgency=medium . * Team upload * New upstream version 1.19.10 + CVE-2023-29402: cmd/go: cgo code injection + CVE-2023-29403: runtime: unexpected behavior of setuid/setgid binaries + CVE-2023-29404/CVE-2023-29405: cmd/go: improper sanitization of LDFLAGS Checksums-Sha1: 5dacdd1e8c0c9670f3ac54c586345dce56b25247 2241 golang-1.19_1.19.10-1.dsc 84092157553e6a76d00d22800f97c1727e764a02 26563069 golang-1.19_1.19.10.orig.tar.gz af81e247294ab4cb09f00261d00b90654e726e1d 819 golang-1.19_1.19.10.orig.tar.gz.asc 0be25fd1f95576c883ac6465a8182b4ca292ea64 42056 golang-1.19_1.19.10-1.debian.tar.xz cf50d4bf3cc664bcb5fdd84a4695faf23171d1ab 6230 golang-1.19_1.19.10-1_amd64.buildinfo Checksums-Sha256: 3b5b123407390a4c29eecf7112fc6907878932e14adea404503eb119ffd1ab1d 2241 golang-1.19_1.19.10-1.dsc 13755bcce529747d5f2930dee034730c86d02bd3e521ab3e2bbede548d3b953f 26563069 golang-1.19_1.19.10.orig.tar.gz e80b3d740c1b2499bad60887f5497a382e17079d78a3fad045d42bc4bad1ea33 819 golang-1.19_1.19.10.orig.tar.gz.asc be9aa8e3b6aeafd54066fbe9d199a6a24472d9f115d30f71d478ebb586c00e4a 42056 golang-1.19_1.19.10-1.debian.tar.xz 6df808465b27d6ddbd6338f2c2627ab48b4730183c1abcc8fc7a2adfe17f302f 6230 golang-1.19_1.19.10-1_amd64.buildinfo Files: d7220969c25848fada57055a4e4d86c4 2241 golang optional golang-1.19_1.19.10-1.dsc d2f0ba6706f54f2cb8f0814c4fed8a06 26563069 golang optional golang-1.19_1.19.10.orig.tar.gz 837dd363c88d0ed798ba8ce3bec70412 819 golang optional golang-1.19_1.19.10.orig.tar.gz.asc 4c83d261d9345aba9b01dc03ce77a339 42056 golang optional golang-1.19_1.19.10-1.debian.tar.xz 509dbb431e543187406efef726bf2538 6230 golang optional golang-1.19_1.19.10-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZIAcTwAKCRB/RPol6lUU y4iVAQDA2KQY9osBiI9L+al/tWAUP/7dXggV4nXitccLM/otFwD+PQ6ZjnmesDOX buSgb+Pj/MBag1l/mtPM6frQZCxFIgc= =Kdlc -----END PGP SIGNATURE-----