-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Oct 2024 06:17:52 -0400 Source: golang-github-containers-common Architecture: source Version: 0.60.4+ds1-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1084061 Changes: golang-github-containers-common (0.60.4+ds1-1) unstable; urgency=medium . * New upstream release - pkg/subscriptions: use securejoin for the container path - Fixes: CVE-2024-9341, Closes: #1084061 Checksums-Sha1: 6234d976fc633a513c3010606f6a1ed22c3904e1 4390 golang-github-containers-common_0.60.4+ds1-1.dsc c5f7a8ad3c963f06a431c6f9e86a19ec1f2a66f5 1354648 golang-github-containers-common_0.60.4+ds1.orig.tar.xz e0d4147129481b9daeb5be2af59d3e2bfa3e10a7 7048 golang-github-containers-common_0.60.4+ds1-1.debian.tar.xz Checksums-Sha256: 2806b449a90d3269b46dea31fab55a3b8c1431039a9574a3154bcf82cde22ac2 4390 golang-github-containers-common_0.60.4+ds1-1.dsc 02b27f399d126759b2ea62cf6042479ce8a73ab9c2b522365292dcf6f4a00931 1354648 golang-github-containers-common_0.60.4+ds1.orig.tar.xz fe2665fbe29a470346b6011091298ec0fecae702b2cff7a2ab7be1fc7cbc5b87 7048 golang-github-containers-common_0.60.4+ds1-1.debian.tar.xz Files: fb225e0a78aa9e218a86e13a8e422bc4 4390 golang optional golang-github-containers-common_0.60.4+ds1-1.dsc a126ccbd97f80e67454223b3df11d4a8 1354648 golang optional golang-github-containers-common_0.60.4+ds1.orig.tar.xz 0a0dc85a23d7de982f63dca58d5bd1d0 7048 golang optional golang-github-containers-common_0.60.4+ds1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmcPlBUUHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJsvQ5w/6A2Mo/O9lnD2qo6N73BGXO8bIusTz KI4aZhQPrtAnyvGXTbOiKIxZ9Fev7Kcv+59KeYf6E3LBIJsmkDzQ3pXcsoxYdKL/ CoxYl7Ip93rxIH8F/A3NWQhG2XxZ/u27Gr72wO3uceEG2Q2eFSpFwLMZscAvOoKO aUPc9J59do28kXG//ZyTcbc0IRBXKIkQiOBiRNKbT7thkbqBvjeafVB2oFZqQsdY 67jkZmESaveN0DeF1GRTg9T5G/xIBUrc2X6aadfSENqqOHvtVxS1PVsnYcWeyLkm 9oBkjaE0i6/ACNXa82OaBI9IMWBBLpghvoA1lzEKxCp3F/Vbyf9Lf9yY/9gHIypV xd6ro1ux1Pp4YPAMjRy1fFlKpjJAPwC8wDS5fYNI+/235wJaKEdv1HYRSZqbfaJZ K73PSXPKDAK5EQDat3FDs7T8HcMokV2htBkxbAa9cVIwELkFwKQCqXCLYLtG2Ewp cQOBP4xGpUTSw63YzuvyZRdrv2c7xCGiZZvyw+F1erLHCQgqwC7SlKGwgtsBjJlB u4Am5Ji3ZKiJWnsXqCGerSGfFrj+/dn8hIV42FrOpsia5ZN7T8oFIqSb+ZJwcRwG jAiUquTtL4UZBC6ul2eYng/IMGu5zGjy2NbVlqvV8xryVNw69LpHO0/azXgfTbKe 9nhjIiAx/dwAYUM= =on7a -----END PGP SIGNATURE-----