-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 06 Mar 2026 16:41:19 -0800
Source: golang-1.26
Architecture: source
Version: 1.26.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Tianon Gravi <tianon@debian.org>
Changes:
golang-1.26 (1.26.1-1) unstable; urgency=medium
.
* Update to 1.26.1 upstream release
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk/m/41DopX_WAAAJ
- CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints
- CVE-2026-27138: crypto/x509: panic in name constraint checking for
malformed certificates
- CVE-2026-27142: html/template: URLs in meta content attribute actions
are not escaped
- CVE-2026-25679: net/url: reject IPv6 literal not at start of host
- CVE-2026-27139: os: FileInfo can escape from a Root
* Drop 0004-Replace-localhostCert-and-localhostKey.patch (obsolete via
https://github.com/golang/go/commit/c5723195a670a09e64769554163ae12b25839819)
Checksums-Sha1:
643b029f55614a21c786fbe32acbd1ab75a17e99 2940 golang-1.26_1.26.1-1.dsc
3f44f23d969158af09c9ea31d3e334deedb338d6 34108253 golang-1.26_1.26.1.orig.tar.gz
863a48e985fda05fbac77ab269dbf2cec6950c7b 833 golang-1.26_1.26.1.orig.tar.gz.asc
363264a453298f9af961492124121cd470d1e46c 45864 golang-1.26_1.26.1-1.debian.tar.xz
a5535df072f1a0b0f9c91722aa43bcca0af730d2 5480 golang-1.26_1.26.1-1_source.buildinfo
Checksums-Sha256:
ce3d2edd50b073c9d4ba47742eea81b10befc0059d781dad18505d3ea30b77ad 2940 golang-1.26_1.26.1-1.dsc
3172293d04b209dc1144698e7ba13f0477f6ba8c5ffd0be66c20fdbc9785dfbb 34108253 golang-1.26_1.26.1.orig.tar.gz
4289b02063fb13528fdb806406c2ccb05c6f4b756d1b03feef16f29751aa3c08 833 golang-1.26_1.26.1.orig.tar.gz.asc
43b9efcf6558e2f6d577f6a1945f111e65f9fb575ba1aebc7c75ce1518d073a9 45864 golang-1.26_1.26.1-1.debian.tar.xz
9fb5cb2b98a9ec560292708f21795f6b97d31b97f61f11196984cb96ed41bb63 5480 golang-1.26_1.26.1-1_source.buildinfo
Files:
92624f0547b811897dbedf2be8de1054 2940 golang optional golang-1.26_1.26.1-1.dsc
34d8de912c54b27af01a12586492d377 34108253 golang optional golang-1.26_1.26.1.orig.tar.gz
21f9cdce1d8fd0834bca1ca65a543090 833 golang optional golang-1.26_1.26.1.orig.tar.gz.asc
3d3266c74f4426227185591919f78b93 45864 golang optional golang-1.26_1.26.1-1.debian.tar.xz
54944326e04d29a10839a12942944a79 5480 golang optional golang-1.26_1.26.1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Kz97
-----END PGP SIGNATURE-----
