-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 05 Mar 2025 00:30:11 +0800 Source: golang-github-go-jose-go-jose Architecture: source Version: 4.0.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Bo YU <vimer@debian.org> Closes: 1098908 Changes: golang-github-go-jose-go-jose (4.0.5-1) unstable; urgency=medium . * New upstream version. Fixes: - CVE-2025-27144: DoS in go-jose Parsing. (Closes: #1098908) * Bump std-ver to 4.7.2 * Update year of d/copyright * Update my email Checksums-Sha1: 86a097294311573b256dc566bb72e733bab2d327 2421 golang-github-go-jose-go-jose_4.0.5-1.dsc 461f77ce15071245ed583e9a83d05b7f88354935 319177 golang-github-go-jose-go-jose_4.0.5.orig.tar.gz 1387aa7b4f9ad0c2e38906ca98c9692ba4c6c0f1 4096 golang-github-go-jose-go-jose_4.0.5-1.debian.tar.xz 4f919b0074972a8d21071ed6eaa1bf87418bfa00 7091 golang-github-go-jose-go-jose_4.0.5-1_amd64.buildinfo Checksums-Sha256: 80cce9f2a3d0138ebe1b9167b103fa6dd59866cc3ce41e16c7bc4a8fc5cef369 2421 golang-github-go-jose-go-jose_4.0.5-1.dsc 32e492484a20e15aea103a27df243f34c93b9c0f2b34093dac0af9415443f179 319177 golang-github-go-jose-go-jose_4.0.5.orig.tar.gz 2456eafc9edae528cd6321f1e41fdf07282219860178863bbdb9894e52597648 4096 golang-github-go-jose-go-jose_4.0.5-1.debian.tar.xz f8224b9a18255e868d4787ded310986f44505c41c5644ac5855bd6195ad37e16 7091 golang-github-go-jose-go-jose_4.0.5-1_amd64.buildinfo Files: ce0c841ba8eaffa938ccaee18081e5b9 2421 golang optional golang-github-go-jose-go-jose_4.0.5-1.dsc 478295eabe78c5e81609c424e9350840 319177 golang optional golang-github-go-jose-go-jose_4.0.5.orig.tar.gz 993e7378628ca940b094cfe30724b322 4096 golang optional golang-github-go-jose-go-jose_4.0.5-1.debian.tar.xz 8441b23a070d6916b4a7dcdf5e1ecb36 7091 golang optional golang-github-go-jose-go-jose_4.0.5-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIcmhjYVTlmab0tjp+RVP3hQ+S68FAmfHMhwACgkQ+RVP3hQ+ S69OyxAAgAd3LtkQpb/r5CJyL2YG5j04KvvGhLis6OtaDL2k24oozwQLW1NEaMtd BKbBcizn6CXkIQyw128N/cTZv8qcwY5pw1ZHIw+cPKT+yccejhtDhgLf0NgfjCPL 1fn1o7S2K89xWpqOrUT+QnNBFfRObkZ/sJl6w7saTiLiNw7OyjShBS1mf/0xAeqG jErGqqtzE6IKN0gvnpNRvqtCEfmFhNZUqobTwmWYtG5Mzb91pzykLjUkyPm1l1l4 X07bOdwsrYTRxGuUEMH+HW4zBAK52q7fUTTFE/cQThDDTv4/UPN6Kr/V6pw7nQ0g zYwVZlDcAfihxc1Gm8o65qLw4YiYue4yVf4mspnMX5HcwkcjyBFd2NGYlqLbNUob mHgYHWkHCNwNmAydttXGl50wbMYzAVH22HVtSyFig6+FEJwszh0A6MullSP41qLb lVzAELBTPBhp8mUGGDkjAgos35mbFuihMCR0UyNosB3xEuAZgZ46zqz5p+hRjh9b WpdiIVZiMa9A5yt5c6mvTGQ5oYdujswlBvRG+BJEgZV9N3QgF5OUpZBuEALICo2I tA28Ad8mEEuNqjqiNcljawsSJY6EHQz/nuf9A24H4mubHV1VXKtUaLLjERr5r2nT OOqtf5seVTocpFKg22dqLPf0a2bsDzdAEia+jptFKWHpePllswk= =iS1n -----END PGP SIGNATURE-----
