-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 04 Jun 2026 14:23:02 +0200
Source: golang-1.25
Architecture: source
Version: 1.25.11-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Dr. Tobias Quathamer <toddy@debian.org>
Changes:
golang-1.25 (1.25.11-1) unstable; urgency=medium
.
* New upstream version 1.25.11
- CVE-2026-27145
crypto/x509: split candidate hostname only once
- CVE-2026-42507
net/textproto: escape arbitrary input when including them in errors
- CVE-2026-42504
mime: avoid quadratic complexity in WordDecoder.DecodeHeader
Checksums-Sha1:
7911b1fc755c5ea717edeb3537351d8849195bb7 2925 golang-1.25_1.25.11-1.dsc
2e9f20818635b6b13ea8a948b90f7e3ea32985da 31999704 golang-1.25_1.25.11.orig.tar.gz
7a1b30d49225bfbf36e2bdb3b308871d9d502e3f 833 golang-1.25_1.25.11.orig.tar.gz.asc
afce607e7e022c5510cb827b37bd30612372f93c 47192 golang-1.25_1.25.11-1.debian.tar.xz
0927c7d2edf25ef80deba7411364e72c2f7d76af 6637 golang-1.25_1.25.11-1_amd64.buildinfo
Checksums-Sha256:
474a64fc3c56e88ef51362d89aa41471adf73f8cd97580a3ba4f023776799dc8 2925 golang-1.25_1.25.11-1.dsc
7b4e5b079b3c9bc420373ca68621a296b4d13c10735d4acac4171928d70f5480 31999704 golang-1.25_1.25.11.orig.tar.gz
582de1252871b3e723f698b6b26e6f924245bf6eef492d589a51a73e38e5bd7d 833 golang-1.25_1.25.11.orig.tar.gz.asc
35b0ea05f05479443ccd5f9285e154e29355c06ac0920adddd7a7934e3d293f4 47192 golang-1.25_1.25.11-1.debian.tar.xz
b695b272b1308745f07488deac8391c899689751a00a41fc7f0955f3f85441ef 6637 golang-1.25_1.25.11-1_amd64.buildinfo
Files:
7f1111ee422574ae0832336919b95006 2925 golang optional golang-1.25_1.25.11-1.dsc
bdde3483ed3c017e6d0110bc1580a249 31999704 golang optional golang-1.25_1.25.11.orig.tar.gz
e843e3e859d13882f1debcf10d65c8c1 833 golang optional golang-1.25_1.25.11.orig.tar.gz.asc
cc8a6ab11da86a55b9afa5d05c458027 47192 golang optional golang-1.25_1.25.11-1.debian.tar.xz
e8da2c851f5e9741c35f47b395169d2a 6637 golang optional golang-1.25_1.25.11-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Mt6F
-----END PGP SIGNATURE-----