-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 09 Sep 2024 16:26:12 +0800
Source: golang-1.23
Architecture: source
Version: 1.23.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.23 (1.23.1-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.23.1
+ CVE-2024-34155: go/parser: stack exhaustion in all Parse* functions
+ CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
+ CVE-2024-34158: go/build/constraint: stack exhaustion in Parse
Checksums-Sha1:
40a89cd194a07e577c0c740fd89559c3039d8b13 2483 golang-1.23_1.23.1-1.dsc
716d66905796cea98f603db809de622106f35ebe 28164249 golang-1.23_1.23.1.orig.tar.gz
5c7ff635cdf31f74d746dd24eac4570c1c6963b7 833 golang-1.23_1.23.1.orig.tar.gz.asc
e9d73a1ecbbea1af75056f61c4222d556db5ddfa 41404 golang-1.23_1.23.1-1.debian.tar.xz
cd297419825d5e86147a303c6b0702d5c8a9fc80 6284 golang-1.23_1.23.1-1_amd64.buildinfo
Checksums-Sha256:
56b28da56a7e1fa8a03982be6c2c388603164d4067b6f164734c7b08d506c90b 2483 golang-1.23_1.23.1-1.dsc
6ee44e298379d146a5e5aa6b1c5b5d5f5d0a3365eabdd70741e6e21340ec3b0d 28164249 golang-1.23_1.23.1.orig.tar.gz
0d922d1c0fbcc4dfcbb5fe4c79eab60a1c4ed9acc98dc3bb9ce135e1a91e349d 833 golang-1.23_1.23.1.orig.tar.gz.asc
53297d31ff302d3c7454fbca9ef1e3fcfc405283f5a1a15ce4a62e6b39266d49 41404 golang-1.23_1.23.1-1.debian.tar.xz
d9c76f0a879b64c6e2a9f0c00768ec61487df121bbf6e3603e3024fb9209ce37 6284 golang-1.23_1.23.1-1_amd64.buildinfo
Files:
baccc05d6858d61606b7fa309112d0c0 2483 golang optional golang-1.23_1.23.1-1.dsc
b74d06bc271cf602a3812398ad0b1b26 28164249 golang optional golang-1.23_1.23.1.orig.tar.gz
5023ba7bee0ebad7278828041a9c9bdc 833 golang optional golang-1.23_1.23.1.orig.tar.gz.asc
a3f70b180d726fbe507b98cfea556465 41404 golang optional golang-1.23_1.23.1-1.debian.tar.xz
9446eb9321eb89d24e678f1f0c916d73 6284 golang optional golang-1.23_1.23.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEc793ixFTU9Vien7Zh7Iv85yjO70FAmbeuTIACgkQh7Iv85yj
O72spwgAoBCEpS6qiH7RPlmwiWWby0XTKtONVITcFjB8ECKPEnnXaN60wJ6aWFWl
iZ26CSTLpnice2OjyOkbAkG+iiudmPOruxIFrTy8MufX34CkuuMj/7hAhe8YX8uo
bF8h5ZoaJdxuUc9+kfT95pfmqvyr9m8hNKuuAIReqKJ82UoMFjyuQhhYG63dsH8Y
WHrh25DyLKokmOqbvRSlGj2w7cNiKYX53gJgnbc6jCgLL1eTBIgPD4QPr5xVDllr
DuuoSNC11uHRdGHI7xgNrfrHWAFORnAFEdGhem0jkq1SB6dqcuNnLOXd8Fi4l4I8
RffDq1LREGlEQ1PRweFMczIP+PEa1A==
=vBmK
-----END PGP SIGNATURE-----
