Accepted golang-1.14 1.14.7-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 09 Aug 2020 15:50:49 +0200
Source: golang-1.14
Architecture: source
Version: 1.14.7-1
Distribution: unstable
Urgency: medium
Maintainer: Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Dr. Tobias Quathamer <toddy@debian.org>
Changes:
golang-1.14 (1.14.7-1) unstable; urgency=medium
.
* New upstream version 1.14.7
- encoding/binary: ReadUvarint and ReadVarint can read an unlimited
number of bytes from invalid inputs. CVE-2020-16845
Checksums-Sha1:
8bab987f381ae427daa125eb5a6c2570da655e20 2872 golang-1.14_1.14.7-1.dsc
e1dbd9e364dcadae84a8a123f944dcd1575f75be 22534747 golang-1.14_1.14.7.orig.tar.gz
037e696c16023e5b6fc0dc87ede1d7cf13601977 819 golang-1.14_1.14.7.orig.tar.gz.asc
13e571010e577c7cd31f07bf482253155419e48b 39068 golang-1.14_1.14.7-1.debian.tar.xz
dbf503944fcedbec78cb4226d80f2f049c319c42 6283 golang-1.14_1.14.7-1_amd64.buildinfo
Checksums-Sha256:
942eac1b4a431797a7c311e17626793db1c3c550dca9920d0e88f8ccf0371bf1 2872 golang-1.14_1.14.7-1.dsc
064392433563660c73186991c0a315787688e7c38a561e26647686f89b6c30e3 22534747 golang-1.14_1.14.7.orig.tar.gz
c6eb4d965347475388a617b93d6c1529f8ac607415b56dc204d3761f9d5f0d95 819 golang-1.14_1.14.7.orig.tar.gz.asc
0b0aed7948726fbb2f45cb908df6f7d3dd8876d5c04ea46772afc5a390e86881 39068 golang-1.14_1.14.7-1.debian.tar.xz
5e2c073999df253b8dc9c8e53d2aff5c47ffaefc2eaf6ba4f7e5815e946c4399 6283 golang-1.14_1.14.7-1_amd64.buildinfo
Files:
1008361d8b720196aaeb84b735a73022 2872 devel optional golang-1.14_1.14.7-1.dsc
413fb788e34198be3dfb85c68df80c68 22534747 devel optional golang-1.14_1.14.7.orig.tar.gz
68cc490b228b4dd6b1197db2a647eadc 819 devel optional golang-1.14_1.14.7.orig.tar.gz.asc
d1d45226a3d5270d84b3820ca0bfce0b 39068 devel optional golang-1.14_1.14.7-1.debian.tar.xz
496e3884705b44fad8eaf70910e3a7dd 6283 devel optional golang-1.14_1.14.7-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=wxYL
-----END PGP SIGNATURE-----