-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 06 Dec 2023 15:36:27 +0800 Source: golang-1.20 Architecture: source Version: 1.20.12-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: golang-1.20 (1.20.12-1) unstable; urgency=medium . * Team upload. * New upstream version 1.20.12 + CVE-2023-39326: net/http: limit chunked data overhead + CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git + CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths like \\?\c:\ Checksums-Sha1: 113bb56bdad52b2b6e9ddc4718fc36b56574a464 2303 golang-1.20_1.20.12-1.dsc 38493b91c326107cbafcd547389b62ceb00fe390 26200362 golang-1.20_1.20.12.orig.tar.gz e9559e88aceb03e57f41ef0fa33c22b5baa4ecab 833 golang-1.20_1.20.12.orig.tar.gz.asc a5e54823d5f0cc6e4839e5a7b2cd2c2d464cd382 37872 golang-1.20_1.20.12-1.debian.tar.xz 22cc4f1b7d64491c5f3e484f1973f0c6bd7495fa 6333 golang-1.20_1.20.12-1_amd64.buildinfo Checksums-Sha256: e35c801420f8033928b7246f728ca9e2f82a07729bb015a5e2a4197c5ee6706c 2303 golang-1.20_1.20.12-1.dsc c5bf934751d31c315c1d0bb5fb02296545fa6d08923566f7a5afec81f2ed27d6 26200362 golang-1.20_1.20.12.orig.tar.gz d93af51415c59728deb2860c3354c6c757bc4cf0cc0b84377fc505921510821b 833 golang-1.20_1.20.12.orig.tar.gz.asc 4c48e8d58a814db789e13e988eaa9b9cf1df0874fa0d60455ea8e51eeaffcdf4 37872 golang-1.20_1.20.12-1.debian.tar.xz d54609c23dcbb3afca69793c47a7a930dc7ef1c33f5a11a8cbb8d943b30c11fa 6333 golang-1.20_1.20.12-1_amd64.buildinfo Files: b41296a582aa58ed32d5b0773c0dbc47 2303 golang optional golang-1.20_1.20.12-1.dsc 0438b991bbc4a4410e42662855cb95b9 26200362 golang optional golang-1.20_1.20.12.orig.tar.gz 240c3ff6ac44f150fe57bc06f5e733ce 833 golang optional golang-1.20_1.20.12.orig.tar.gz.asc 056b631962bac81a32d34fe2528dd2e1 37872 golang optional golang-1.20_1.20.12-1.debian.tar.xz bc2e1e4bc2b7e3fb6546d42471d60676 6333 golang optional golang-1.20_1.20.12-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZXAnqgAKCRB/RPol6lUU yzuqAP9aD/4uo01BzqDLFKg7yPcG/jye+BFK6+V4+ITiq5BPfgEAyItvve+JW7Lp Zt5cGCmSc4/drcN3VJHEM/GlGJxHbwU= =No9Z -----END PGP SIGNATURE-----