-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 07 Sep 2023 11:58:16 +0800 Source: golang-1.20 Architecture: source Version: 1.20.8-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.20 (1.20.8-1) unstable; urgency=medium . * Team upload. * New upstream version 1.20.8 + CVE-2023-39318: html/template: improper handling of HTML-like comments within script contexts + CVE-2023-39319: html/template: improper handling of special tags within script contexts Checksums-Sha1: 8e61a6651db631cc6b9abf17384616fbe920a4d6 2293 golang-1.20_1.20.8-1.dsc 190de517720f490e26116c69cef7a3c5a7170dde 26197375 golang-1.20_1.20.8.orig.tar.gz c6c1345cf09d52c24565f8970db3940b29ead681 833 golang-1.20_1.20.8.orig.tar.gz.asc 7d409ae3e5a84d744f02d5e002745a83b3db15be 37620 golang-1.20_1.20.8-1.debian.tar.xz 220a89cb763f584b40e5e84d8eaf40d80a677e45 6205 golang-1.20_1.20.8-1_amd64.buildinfo Checksums-Sha256: 0abab82fe58dc98488d5a57a70340d0afa72ecc06788f287ac4524e88d6358e8 2293 golang-1.20_1.20.8-1.dsc 38d71714fa5279f97240451956d8e47e3c1b6a5de7cb84137949d62b5dd3182e 26197375 golang-1.20_1.20.8.orig.tar.gz 935806ac2d9853df8d5ee23b4d6561aa021c151fca5ddaf7a080bcd9be061c09 833 golang-1.20_1.20.8.orig.tar.gz.asc bbc7bcb8e7af7a911cf50efa1d7b82114a78ff58d46822eaa2dfd14eb7bb9f90 37620 golang-1.20_1.20.8-1.debian.tar.xz abe30a09b8f9c441e17fddc1979be3514437535431d7ed85cbf4f447e78dab12 6205 golang-1.20_1.20.8-1_amd64.buildinfo Files: 70ff022de56e909141ff8a9998e93852 2293 golang optional golang-1.20_1.20.8-1.dsc 74abab80fb225f0d1c22865ba31ea65a 26197375 golang optional golang-1.20_1.20.8.orig.tar.gz 5a3764804b66540a2a6e059f3c90b067 833 golang optional golang-1.20_1.20.8.orig.tar.gz.asc d09a5c5a8fe151571168a67059a3c497 37620 golang optional golang-1.20_1.20.8-1.debian.tar.xz 55f25487c2d6a94a8795f5df1d68cd31 6205 golang optional golang-1.20_1.20.8-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZPlYmQAKCRB/RPol6lUU y8AGAQDdp6VQIQz4C+2jFvPjmborLtCTTjCB6q19ftMHu22PGQEA8mLEwOW1eLgR UUyTf1WZ4VBEW8AjnmgG+0jz/9KOuQA= =CdsH -----END PGP SIGNATURE-----