-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 04 Jun 2026 14:35:47 +0200
Source: golang-1.26
Architecture: source
Version: 1.26.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Dr. Tobias Quathamer <toddy@debian.org>
Changes:
golang-1.26 (1.26.4-1) unstable; urgency=medium
.
* New upstream version 1.26.4
- CVE-2026-27145
crypto/x509: split candidate hostname only once
- CVE-2026-42507
net/textproto: escape arbitrary input when including them in errors
- CVE-2026-42504
mime: avoid quadratic complexity in WordDecoder.DecodeHeader
Checksums-Sha1:
c91e214488a42c6e32446ce4dc408b3248b96c1a 2915 golang-1.26_1.26.4-1.dsc
19237a7599b6f1d167f0b6dc5c08f5e9dea8b485 34118246 golang-1.26_1.26.4.orig.tar.gz
5b795e45a585c32fa26d94555da1dfafd4c57621 833 golang-1.26_1.26.4.orig.tar.gz.asc
0b61596f3646bf8486fce177d79192494f6348e3 47444 golang-1.26_1.26.4-1.debian.tar.xz
4ab6d69d3b25d3b063db80e0dcea3ebe849b95c2 6620 golang-1.26_1.26.4-1_amd64.buildinfo
Checksums-Sha256:
1350df4d81938a3e23350f170a04c5b68f788c76b4c54b71449f3902dc485386 2915 golang-1.26_1.26.4-1.dsc
4f668a32fbfc1132e6a881fb968c2f1dada631492a339211735fbb255a42602d 34118246 golang-1.26_1.26.4.orig.tar.gz
ff1c17ac000e3ea4be533d02075340265d2b7e58e86705301f4e2b9b3003bbe9 833 golang-1.26_1.26.4.orig.tar.gz.asc
2b5ad809266b5439d408545de342a1a3a2f1e0ee2d9d7c78e1e4b6789a87a499 47444 golang-1.26_1.26.4-1.debian.tar.xz
d0048fdf721d96ce4dfd6c65f0cb2563e9d65f8aa748753270cae1c66a717ec2 6620 golang-1.26_1.26.4-1_amd64.buildinfo
Files:
814b6be6bf0f0f24ff1225aac24dbb03 2915 golang optional golang-1.26_1.26.4-1.dsc
9dcdbb8815120ece08562fcaecf193ae 34118246 golang optional golang-1.26_1.26.4.orig.tar.gz
223f6173a03712c70c500eef0e898124 833 golang optional golang-1.26_1.26.4.orig.tar.gz.asc
f6ce7207986a6ee0f1e39f3fa801d461 47444 golang optional golang-1.26_1.26.4-1.debian.tar.xz
104f51fae1cf95e24c5077c9459f0e7f 6620 golang optional golang-1.26_1.26.4-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=i9XU
-----END PGP SIGNATURE-----
