-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 01 Jan 2024 23:46:37 -0700 Source: golang-1.20 Architecture: source Version: 1.20.12-1~bpo12+1 Distribution: bookworm-backports Urgency: medium Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org> Changed-By: Anthony Fok <foka@debian.org> Changes: golang-1.20 (1.20.12-1~bpo12+1) bookworm-backports; urgency=medium . * Rebuild for bookworm-backports. . golang-1.20 (1.20.12-1) unstable; urgency=medium . * Team upload. * New upstream version 1.20.12 + CVE-2023-39326: net/http: limit chunked data overhead + CVE-2023-45285: cmd/go: go get may unexpectedly fallback to insecure git + CVE-2023-45283: path/filepath: retain trailing \ when cleaning paths like \\?\c:\ Checksums-Sha1: accc6402044d689d1ab203d5bb07ff5ce30f03ef 2965 golang-1.20_1.20.12-1~bpo12+1.dsc 33e3208ce5fbaf0c23c8bfe03b757d0b23090415 38056 golang-1.20_1.20.12-1~bpo12+1.debian.tar.xz fb5fa32d73334728e172f769dc15b081bf6ed183 7164 golang-1.20_1.20.12-1~bpo12+1_amd64.buildinfo Checksums-Sha256: 5bcf86073db6b79037428a2ae8485a62c138461344656b3e808383f6d287e8ad 2965 golang-1.20_1.20.12-1~bpo12+1.dsc fdbbaacebaf5ba0b03042d6db89bdfcd6e1136b02abcce8f1816b29282407775 38056 golang-1.20_1.20.12-1~bpo12+1.debian.tar.xz c5635ffc579e287975a2301568bf213a64e512894be6634e3efb291f45b15fa8 7164 golang-1.20_1.20.12-1~bpo12+1_amd64.buildinfo Files: 503adef003ae8bc712bb2104eab5d7e3 2965 golang optional golang-1.20_1.20.12-1~bpo12+1.dsc d8f0964f0c5bf0e75cb5d8ba88a5f318 38056 golang optional golang-1.20_1.20.12-1~bpo12+1.debian.tar.xz d4bb41e4f6f4188573f17cb0668778a0 7164 golang optional golang-1.20_1.20.12-1~bpo12+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAmWTs0sQHGZva2FAZGVi aWFuLm9yZwAKCRDqJQC0EsWaz6F+D/4615FcWA80dFLib++HrH7y1BGGS4y0k2rU 9Yo0/rDj8nK4DHNPC/18VP7Uj3aYTrYB0XyFzxsZ16aDXEASIZXxYAA9QyAqvoUA Hd/s6wQ23JxXo187280neSjbQksq5jb833yt38o+OBMj6SlhKuInzCTwlW9yZRI7 c+JtcjJDgSsTKA4YtAeV75DMwGlgubyKKusGJ5iA4f0iY1Oc6jk90do0vvh579Xk 4Naau4AUKe7piZjv5B2CtTHjuUbj2cPOisJvq24kOcEk6oGIAomrl2A0xsyJ3Dg8 fbMmloVLbNw/duNXjepb3z8x1hvYpm9EnUVCco6FVF3LXGYIJTaLfJKcN2EdmQrS besfQlvNZhpiZgShjPVXBJGTD543/3jA3nkaMfyGsN6nlAuE2fMsEO5VlNFxABf4 tuEBgAKnlLsS/kKjTEkbJPO76O6QfiVVD6J+n3Htms6zSwLb2L7cvXWnQjaq47C4 UUMkBi7I2v1psVqmznkEzfwnXcIHmMhE9mp1HIjCklICQSUnVkBgD1XX/x2DmVBw ry8aQTH6h8yUYNW8dPfxHLrP72n7Fjfs9cDE+lqNc2iKSlLvgdnqczgkZq2DXpt6 xlAYsZxqU+YYrZEbOna7pTQ080t2om2ogzWSjLBni2M1yvFpd8YgFdp/4qZEYSYP 8TVit+KBlA== =rHKp -----END PGP SIGNATURE-----