-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 07 Jul 2026 22:40:49 +0200
Source: golang-1.26
Architecture: source
Version: 1.26.5-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Dr. Tobias Quathamer <toddy@debian.org>
Changes:
golang-1.26 (1.26.5-1) unstable; urgency=medium
.
* New upstream version 1.26.5
- CVE-2026-39822
os: properly handle trailing slashes in paths in Root
- CVE-2026-42505
crypto/tls: omit PSK in ECH outer client hello
* Mark patch as Forwarded: not-needed
Checksums-Sha1:
cdfd4f67399dd034a73f1f43847c99687f5fe946 2915 golang-1.26_1.26.5-1.dsc
d3fc5c837a2018cff6b388bc2b635c08d3040d65 34140216 golang-1.26_1.26.5.orig.tar.gz
f2444e711872d50c54bc74c78ae34b9906f45489 833 golang-1.26_1.26.5.orig.tar.gz.asc
8242406ec4c254eeba064ee01d45abbe84362a84 47512 golang-1.26_1.26.5-1.debian.tar.xz
b2d9e52a05a733d38c47806d102962f975399f29 6673 golang-1.26_1.26.5-1_amd64.buildinfo
Checksums-Sha256:
6530bf9ffba9b6403b6846122dc9fbfc038f6474d421a88d173d849393fe06a8 2915 golang-1.26_1.26.5-1.dsc
495be4bc87176ac567392e5b4116abd98466d33d7b49d41e764ccc6976b2dc42 34140216 golang-1.26_1.26.5.orig.tar.gz
c8d32eaebabdead37aa5b035d18454da3aa37b63d10c4519db2e8dede539f1c8 833 golang-1.26_1.26.5.orig.tar.gz.asc
ccf3cbb89e0037142e2a2f731474eba0d22e70a659da2d859aeeb79b55c98639 47512 golang-1.26_1.26.5-1.debian.tar.xz
e35d62ff9f4ee842cb5b46f78db31e28bc626e588833503945df3b5173eeb339 6673 golang-1.26_1.26.5-1_amd64.buildinfo
Files:
1aaf4ba162fdee324762815f0ac893d0 2915 golang optional golang-1.26_1.26.5-1.dsc
ff03d7ab678c97c62dc84b41fdd317a4 34140216 golang optional golang-1.26_1.26.5.orig.tar.gz
a12851797f142683f8f7c8a5dd88f9d1 833 golang optional golang-1.26_1.26.5.orig.tar.gz.asc
9d93fdf0041ab696739448b78066199e 47512 golang optional golang-1.26_1.26.5-1.debian.tar.xz
20ebc9772181dfcce9cf5959389c196a 6673 golang optional golang-1.26_1.26.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=sowH
-----END PGP SIGNATURE-----
