-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 15 Jun 2023 17:47:17 +0800 Source: golang-1.19 Architecture: source Version: 1.19.10-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.19 (1.19.10-2) unstable; urgency=medium . * Team upload * Upload to unstable . golang-1.19 (1.19.10-1) experimental; urgency=medium . * Team upload * New upstream version 1.19.10 + CVE-2023-29402: cmd/go: cgo code injection + CVE-2023-29403: runtime: unexpected behavior of setuid/setgid binaries + CVE-2023-29404/CVE-2023-29405: cmd/go: improper sanitization of LDFLAGS . golang-1.19 (1.19.9-1) experimental; urgency=medium . * Team upload * New upstream version 1.19.9 + CVE-2023-24539: html/template: improper sanitization of CSS values + CVE-2023-24540: html/template: improper handling of JavaScript whitespace + CVE-2023-29400: html/template: improper handling of empty HTML attributes Checksums-Sha1: df2b5977dd0609de6bc4c2519fc8e4bf1ae308c1 2241 golang-1.19_1.19.10-2.dsc 45481a954af69dc206d4fb3f446a47dc46e665db 42076 golang-1.19_1.19.10-2.debian.tar.xz 2ae0aff13b1d62e9f35e4d94ac607171fe373664 4854 golang-1.19_1.19.10-2_source.buildinfo Checksums-Sha256: 4ceab15bf1961d64320b8c4c731dd8c7aa1e9272433e97ead19052e51d6f6f7d 2241 golang-1.19_1.19.10-2.dsc dc22237240efed1cf9e2626583fb5062a369698ccd5e2b3f211efa242be9ed0e 42076 golang-1.19_1.19.10-2.debian.tar.xz 575938929589669c43b85b255310f77301c6639816fc5fb91142bdb1519a98c4 4854 golang-1.19_1.19.10-2_source.buildinfo Files: c3473ac79ca4d8bbc14cea36f3e916a2 2241 golang optional golang-1.19_1.19.10-2.dsc 7b029b880ba7292e182352469e1e5e79 42076 golang optional golang-1.19_1.19.10-2.debian.tar.xz 82531347bc5262bfc7b31fe26c5d999f 4854 golang optional golang-1.19_1.19.10-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZIredwAKCRB/RPol6lUU y2J3AP40Tz28kQIW+UAlbCeztZ+nudAOnzKX6l+oSjG2zoBkSAD7BdxSVEuO132J 0vbdiYvffaZ7n52DlUYTdj+uri0WFwQ= =6EPs -----END PGP SIGNATURE-----