-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 01 Jan 2024 23:22:33 -0700 Source: golang-1.21 Architecture: source Version: 1.21.5-1~bpo12+1 Distribution: bookworm-backports Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Anthony Fok <foka@debian.org> Changes: golang-1.21 (1.21.5-1~bpo12+1) bookworm-backports; urgency=medium . * Rebuild for bookworm-backports. . golang-1.21 (1.21.5-1) unstable; urgency=medium . * Team upload * New upstream version 1.21.5 + CVE-2023-39326: net/http: limit chunked data overhead + CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git + CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths like \\?\c:\ Checksums-Sha1: 0a4fff083968966fd9a5b22ffc33a24dfc69c2ca 2955 golang-1.21_1.21.5-1~bpo12+1.dsc 7186e3c28796976348c5185b0f4044a81985b939 36792 golang-1.21_1.21.5-1~bpo12+1.debian.tar.xz b5c4f1f1fbc8d33e4df6de2343290825b4ee5b49 7147 golang-1.21_1.21.5-1~bpo12+1_amd64.buildinfo Checksums-Sha256: 33ffc4d6fbe65752ab77691b96b4698168e9b165bdaebc6da50585f72ab02c63 2955 golang-1.21_1.21.5-1~bpo12+1.dsc 2ef484c07cf90b78405a094050e23738fa8df2321c9cf0f5763dbff9d1f44131 36792 golang-1.21_1.21.5-1~bpo12+1.debian.tar.xz 4279f6046648379c8bc879f6c35dda87aaf44fc985980c3859c87b98115562d3 7147 golang-1.21_1.21.5-1~bpo12+1_amd64.buildinfo Files: 0bfeb44ff6e581aabb687e5d65193185 2955 golang optional golang-1.21_1.21.5-1~bpo12+1.dsc fa5aaf8e2994b56e2fd9c07125f6c8ae 36792 golang optional golang-1.21_1.21.5-1~bpo12+1.debian.tar.xz 647fba3e372fdd6d28e891641924895e 7147 golang optional golang-1.21_1.21.5-1~bpo12+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAmWTsCEQHGZva2FAZGVi aWFuLm9yZwAKCRDqJQC0EsWaz7N5D/0bpgB7ZIe3EMr4GbKJ3ZafSgvcFU0QYMfv DW0GzivPh3KwkbvTQ2PNeqd5qxvPvY91RsqWUfHc1rj2AvjK3Jx4KzuMKcjjNRqH zcas2BeJljNL7VcmrfDe3zh7L3ipAQESty/qg//9Y1n0UpLVpAnMYvHcxpnmAFW6 Jr/6uENBDxAhZsNT+Uso9NsLltXv9x/6W1tg7HyuEoeWey/js7rSsFnatiX+Nv7j vxwNhij87EIm97/4UEnqBpsg4rCB1ILWSA9GjftR/6Vy2P0kH012z3MzhtPh6+1k S6XXqY7qIoUockyHluhTwG3vJLnfcy+Km3Rrcq3dR61o92AvaVVmZltApoRc0hqD ZS5KVPFlUlnrzPfR+0NEYkk4kvG92LLhbrIsLDppH7hKqSZ3xCtFvCLNdvU9jBjI 3K0bBrCGYfIMu8R/YbCHJpSvpBBaVhVeeZX/nvQOPjIy0O6ikXWM0gKc6BhCyxvb zfjjOgOr1zNcj6gjhn2sDADKba/Z2ddbD5zNZuG5ZdFVPMcQf3n/JWRgURMd17gm tGNFXmntSZt7BOoPk7DjRMma9xAMPHGu5QhydEforItpdpxWRdKbCe1UUgAgGcuq L6rah4FhBJAvZddznxi0URNj9n+vX2t6VMLvWIPf1Q2yetkjyLd/epbXYkCuEERj cDNJzoVxgw== =C/c6 -----END PGP SIGNATURE-----