-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 08 Oct 2026 22:13:40 +0200
Source: golang-golang-x-net
Architecture: source
Version: 1:0.60.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Dr. Tobias Quathamer <toddy@debian.org>
Changes:
golang-golang-x-net (1:0.60.0-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 0.60.0
- Refresh patches
- CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer
headers
- CVE-2026-78669: net/http: excessive CPU consumption from repeated
initial window changes
- CVE-2026-78663: net/http: double flow control refund on HTTP/2 server
streams
- CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race
Checksums-Sha1:
b7c65e434230f4d43c2fa3e4ff0dc3c9dce7f0a0 2467 golang-golang-x-net_0.60.0-1.dsc
a377d27c9423adabe5bd9cbd2779708952e07374 1410690 golang-golang-x-net_0.60.0.orig.tar.gz
7b9015d00583fe67a20716f2ec5c4a19d1be99b0 17556 golang-golang-x-net_0.60.0-1.debian.tar.xz
7b09ffb6f57de63d8836808c173bf68d3b27e788 5806 golang-golang-x-net_0.60.0-1_amd64.buildinfo
Checksums-Sha256:
7c0313925b57fe2d258289b14576521ed08d4e89fe7325d421bc9ec2b3ddb9d2 2467 golang-golang-x-net_0.60.0-1.dsc
27b053bc863306bd736faafced8e81aef4f2f5a6f78b8e8df566b8b400037fe2 1410690 golang-golang-x-net_0.60.0.orig.tar.gz
23e8e538f69492a541497117a1007318c4c6f066fba04be3f826ff77be3c9f03 17556 golang-golang-x-net_0.60.0-1.debian.tar.xz
bec9c9d1d8178a882cea2f5eed0af3cccc25b2b73472d3ee2eca80bf3b3c20fc 5806 golang-golang-x-net_0.60.0-1_amd64.buildinfo
Files:
6c2ea56b89680d0463998c63d14fbc42 2467 golang optional golang-golang-x-net_0.60.0-1.dsc
0d190592cc7ebd720e5db55b2320cca0 1410690 golang optional golang-golang-x-net_0.60.0.orig.tar.gz
86f17fdff8c21cf4b2b70abb41200a11 17556 golang optional golang-golang-x-net_0.60.0-1.debian.tar.xz
c958c092604a36c7e17d355245d14870 5806 golang optional golang-golang-x-net_0.60.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=9RQC
-----END PGP SIGNATURE-----
