Debian Package Tracker - golang-x-text

general

source: golang-x-text (main)
version: 0.3.2-1
maintainer: Debian Go packaging team (DMD)
uploaders: Martín Ferrari [DMD] – Anthony Fok [DMD]
arch: all
std-ver: 4.4.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 0.0~git20161013.0.c745997-2
old-bpo: 0.3.0-1~bpo9+1
stable: 0.3.0-2
testing: 0.3.2-1
unstable: 0.3.2-1

versioned links

0.0~git20161013.0.c745997-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.3.0-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.3.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.3.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

golang-golang-x-text-dev
golang-x-text-dev

action needed

Marked for autoremoval on 17 August: #964271 high

Version 0.3.2-1 of golang-x-text is marked for autoremoval from testing on Mon 17 Aug 2020. It is affected by #964271. You should try to prevent the removal by fixing these RC bugs.

Created: 2020-07-11 Last update: 2020-08-11 13:34

A new upstream version is available: 0.3.3 high

A new upstream version 0.3.3 is available, you should consider packaging it.

Created: 2020-06-29 Last update: 2020-08-11 09:32

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2020-14040: The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

Please fix it.

Created: 2020-07-04 Last update: 2020-08-07 06:08

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2020-14040: The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

Please fix it.

Created: 2020-07-04 Last update: 2020-08-07 06:08

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

changelog package golang-golang-x-text does not match source golang-x-text

Created: 2019-11-20 Last update: 2020-08-04 04:07

RM: This package has been requested to be removed. normal

This package has been requested to be removed. This means that, when this request gets processed by an ftp-master, this package will no longer be in unstable, and will automatically be removed from testing too afterwards. If for some reason you want keep this package in unstable, please discuss so in the bug. Please see bug number #964921 for more information.

Created: 2020-07-12 Last update: 2020-07-12 15:05

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

golang-x-text-dev could be marked Multi-Arch: foreign

Created: 2020-02-28 Last update: 2020-08-11 09:35

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2020-14040: The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

Please fix it.

Created: 2020-07-04 Last update: 2020-08-07 06:08

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2020-14040: The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

Please fix it.

Created: 2020-07-04 Last update: 2020-08-07 06:08

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.0).

Created: 2019-09-29 Last update: 2020-01-21 05:06

news

[rss feed]

[2019-07-30] golang-x-text 0.3.2-1 MIGRATED to testing (Debian testing watch)
[2019-07-27] Accepted golang-x-text 0.3.2-1 (source) into unstable (Anthony Fok)
[2018-09-05] golang-x-text 0.3.0-2 MIGRATED to testing (Debian testing watch)
[2018-09-01] Accepted golang-x-text 0.3.0-2 (source) into unstable (Shengjing Zhu)
[2018-06-12] Accepted golang-x-text 0.3.0-1~bpo9+1 (source all) into stretch-backports (Anthony Fok)
[2018-05-15] Accepted golang-x-text 0.0~git20170627.0.6353ef0-1~bpo9+1 (source all) into stretch-backports, stretch-backports (Anthony Fok)
[2018-05-11] golang-x-text 0.3.0-1 MIGRATED to testing (Debian testing watch)
[2018-05-09] Accepted golang-x-text 0.3.0-1 (source all) into unstable (Anthony Fok)
[2017-07-04] golang-x-text 0.0~git20170627.0.6353ef0-1 MIGRATED to testing (Debian testing watch)
[2017-06-29] Accepted golang-x-text 0.0~git20170627.0.6353ef0-1 (source all) into unstable (Anthony Fok)
[2017-02-13] Accepted golang-x-text 0.0~git20161013.0.c745997-2~bpo8+1 (source all) into jessie-backports (Martín Ferrari)
[2016-11-26] golang-x-text 0.0~git20161013.0.c745997-2 MIGRATED to testing (Debian testing watch)
[2016-11-20] Accepted golang-x-text 0.0~git20161013.0.c745997-2 (source) into unstable (Martín Ferrari)
[2016-10-20] golang-x-text 0.0~git20161013.0.c745997-1 MIGRATED to testing (Debian testing watch)
[2016-10-14] Accepted golang-x-text 0.0~git20161013.0.c745997-1 (source all) into unstable (Anthony Fok)
[2016-09-03] golang-x-text 0.0~git20160816.0.d69c40b-1 MIGRATED to testing (Debian testing watch)
[2016-08-28] Accepted golang-x-text 0.0~git20160816.0.d69c40b-1 (source all) into unstable (Anthony Fok)
[2016-06-14] golang-x-text 0.0~git20160606.0.a4d77b4-1 MIGRATED to testing (Debian testing watch)
[2016-06-08] Accepted golang-x-text 0.0~git20160606.0.a4d77b4-1 (source all) into unstable (Anthony Fok)
[2016-05-29] Accepted golang-x-text 0.0~git20160420.0.3100578-2~bpo8+1 (source all) into jessie-backports, jessie-backports (Martín Ferrari)
[2016-05-07] golang-x-text 0.0~git20160420.0.3100578-2 MIGRATED to testing (Debian testing watch)
[2016-05-01] Accepted golang-x-text 0.0~git20160420.0.3100578-2 (source all) into unstable (Martín Ferrari)
[2016-04-29] Accepted golang-x-text 0.0~git20160420.0.3100578-1 (source all) into unstable, unstable (Anthony Fok)
[2016-02-12] golang-x-text 0+git20151217.cf49866-1 MIGRATED to testing (Debian testing watch)
[2016-02-06] Accepted golang-x-text 0+git20151217.cf49866-1 (source all) into unstable (Tim Potter) (signed by: Dmitry Smirnov)
[2015-06-14] golang-x-text 0+git20150518.c93e7c9-1 MIGRATED to testing (Britney)
[2015-06-08] Accepted golang-x-text 0+git20150518.c93e7c9-1 (source all) into unstable, unstable (Martín Ferrari)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.3.2-1