Accepted golang-1.17 1.17.1-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 10 Sep 2021 18:01:21 -0600
Source: golang-1.17
Architecture: source
Version: 1.17.1-1
Distribution: unstable
Urgency: high
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Anthony Fok <foka@debian.org>
Changes:
golang-1.17 (1.17.1-1) unstable; urgency=high
.
* New upstream version 1.17.1
+ CVE-2021-39293: security fix to the archive/zip package
The fix for CVE-2021-33196 can be bypassed by crafted inputs.
As a result, the NewReader and OpenReader functions in archive/zip
can still cause a panic or an unrecoverable fatal error when reading
an archive that claims to contain a large number of files,
regardless of its actual size.
Thanks to the OSS-Fuzz project for discovering this issue
and to Emmanuel Odeke for reporting it.
+ bug fixes to the archive/zip, go/internal/gccgoimporter,
html/template, net/http, and runtime/pprof packages
* Re-add "Multi-Arch: foreign" hint
* Rename Maintainer from "Go Compiler Team" to "Debian Go Compiler Team"
* Bump Standards-Version to 4.6.0 (no change)
Checksums-Sha1:
871abd52a80956d8408312258ddec8345b759fa0 2864 golang-1.17_1.17.1-1.dsc
49ca0cbc1cfcc18601249cb388ac693a4726b3da 22181735 golang-1.17_1.17.1.orig.tar.gz
f57f5a4dcb598af483756d7342fae1c916f25cf5 819 golang-1.17_1.17.1.orig.tar.gz.asc
d76747ffefa5696567cef4fdfb6a6028d39dddad 38696 golang-1.17_1.17.1-1.debian.tar.xz
6bd6cd1179e5c71b767d208cc42287db5e380487 6752 golang-1.17_1.17.1-1_amd64.buildinfo
Checksums-Sha256:
3676205e3dec0c61c2537cf79e8e2abedba191f6fe63bfd94c9f116821ce47bf 2864 golang-1.17_1.17.1-1.dsc
49dc08339770acd5613312db8c141eaf61779995577b89d93b541ef83067e5b1 22181735 golang-1.17_1.17.1.orig.tar.gz
a5afdd84e1c7526adc5511e1c97da335878e8d47808188dc65f44ee79472ecb0 819 golang-1.17_1.17.1.orig.tar.gz.asc
d6c62fca336cc5634701bfb1fe68b19d64f8bebfb1c6c522a811342afaae162d 38696 golang-1.17_1.17.1-1.debian.tar.xz
e8cf7a5bf7ed49c496827f1b6e9bc1d87f5674fc0e6702f2f6e5b410bab844c6 6752 golang-1.17_1.17.1-1_amd64.buildinfo
Files:
851bf24c4fcf0483e24797d499bcaaf8 2864 golang optional golang-1.17_1.17.1-1.dsc
a78205838c2a7054522cb91c12982f26 22181735 golang optional golang-1.17_1.17.1.orig.tar.gz
31448be7682357a15c07fc0b1bffa529 819 golang optional golang-1.17_1.17.1.orig.tar.gz.asc
91f08ba20fe8878e99b9951bef18ff25 38696 golang optional golang-1.17_1.17.1-1.debian.tar.xz
69324c0019638f4dcac1d2f1356c85f6 6752 golang optional golang-1.17_1.17.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=jqiq
-----END PGP SIGNATURE-----