Accepted golang-1.20 1.20.1-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted golang-1.20 1.20.1-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Wed, 15 Feb 2023 02:37:06 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: golang-1.20_1.20.1-1_source.changes
- Debian-source: golang-1.20
- Debian-suite: unstable
- Debian-version: 1.20.1-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=p8mXg4e3JPon+FEfjqnqmWk8uoQtrn7/ohppp5WVW2U=; b=n09Vii7XNVtgNYGITDJyYAOSqo wTIEO2+Wk+2KfCgzcCPnkV1G8SKKGaSwisyeALv/S3qhp91y2xvTeGPEF1qqdTseaOBnmq9F+J1Rs NtVUJKh2e81+a94CGOkQKaI2umEQaWTr3tCHyibjTwa0HU0i682x/srIUPQKSew/Mm90kNAY+KmvJ sd4dlG96qxIQwLHlAZ1Ws7TOSF8HJcrio4YuDyDtPRMKtW4ZwGWF9XFe2268+2BWYf9jmfmN+zCNI hUqml6lqsGcyRl/Sg41vnd+vxNOPL7SbSCutEvpLCH7GOAUjMcSeKzTaO1bb+1nh6G6dHIdsn09/w SxOYGQEQ==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1pS7fO-007PeS-3n@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 15 Feb 2023 09:53:55 +0800
Source: golang-1.20
Architecture: source
Version: 1.20.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compiler@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Changes:
golang-1.20 (1.20.1-1) unstable; urgency=medium
.
* Team upload
* New upstream version 1.20.1
+ CVE-2022-41722: path/filepath: path traversal in filepath.Clean on
Windows
+ CVE-2022-41725: net/http, mime/multipart: denial of service from
excessive resource consumption
+ CVE-2022-41724: crypto/tls: large handshake records may cause panics
+ CVE-2022-41723: net/http: avoid quadratic complexity in HPACK decoding
Checksums-Sha1:
05ab1cd7f33e2be1eb15ef4f56d1e530964c5519 2234 golang-1.20_1.20.1-1.dsc
ee351b068c5d965e0d657dceccc91a5c5fb8e422 26172675 golang-1.20_1.20.1.orig.tar.gz
a14bbb130d997396fe0d04d57f998714e7f025f5 819 golang-1.20_1.20.1.orig.tar.gz.asc
c05c05f3365f8de7f358da93a3e922eecacaae86 36916 golang-1.20_1.20.1-1.debian.tar.xz
40a2e24418fd96b9c1d497cab42a7f7dd1cb57c6 6191 golang-1.20_1.20.1-1_amd64.buildinfo
Checksums-Sha256:
2aeaf7a8df7fe7e9e37721d23497a3301cdbc526cb27cbac8da1330255a03452 2234 golang-1.20_1.20.1-1.dsc
b5c1a3af52c385a6d1c76aed5361cf26459023980d0320de7658bae3915831a2 26172675 golang-1.20_1.20.1.orig.tar.gz
62787b7d7d39c18cb5cb1c940a372c3b742d509fe40fd8fd72c42390af45ef04 819 golang-1.20_1.20.1.orig.tar.gz.asc
b632a4df72975383a4a457649ddd4aba53a154f37dd164f1a168b01ce5632bd5 36916 golang-1.20_1.20.1-1.debian.tar.xz
82166f8dc8f2e8d885f0480a6cd412dee95121aec63ea177ce01bc4219119223 6191 golang-1.20_1.20.1-1_amd64.buildinfo
Files:
f6213add2d427fbde6f4fe5763a400b9 2234 golang optional golang-1.20_1.20.1-1.dsc
06544356f41811af9e73797d6962793c 26172675 golang optional golang-1.20_1.20.1.orig.tar.gz
08be5ef950cb44b732ac184a2948114b 819 golang optional golang-1.20_1.20.1.orig.tar.gz.asc
ab5e8dfcc8bcd5c7873d4971f3802658 36916 golang optional golang-1.20_1.20.1-1.debian.tar.xz
13986cd9bb5139aa4f17e4f54ef59d8b 6191 golang optional golang-1.20_1.20.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCY+w+IwAKCRB/RPol6lUU
yxF3AP0fw+9aKUvUhPDMEcMJe/utVi4PJrBOGJQ/9RP4KIo3+gD/bgcPIAZLffD4
AW+6Xq6zdBjo9RGftzSOZWRWCYt6bwA=
=JNls
-----END PGP SIGNATURE-----