Accepted golang-websocket 1.4.0-1+deb10u1 (source) into oldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted golang-websocket 1.4.0-1+deb10u1 (source) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sat, 13 May 2023 21:20:21 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: golang-websocket_1.4.0-1+deb10u1_source.changes
- Debian-source: golang-websocket
- Debian-suite: oldstable
- Debian-version: 1.4.0-1+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=md1JfvJiE4aqH/A2AIc/n5pFz7ENZPrQZj6q8KihVc8=; b=PbCjne4dgUMoVPq6r8Nj9a9rEl LzZV3O7GEzweWDS7UQVziI5IuzQ0ZGx296NWxtf381wkSgSwoZJWEamjKyvuoiHOTn5yjPk9vVCK9 LdO3dglUV+p6GnWHlTWE8lP64wcHbF7duJc5f0PBt7XORrN14Y1v31MKzpsNrXTNEbedlC+nnCIN9 ZQI5kPDhp6bVB4KXvrA8nhB1gYQZ8pBGo9kgB3ed7AyVD3aq16hxGDUevalOu8pNQpNuRTY4b5xJu 8UcfwGqgmxZNwFHcHt/23myg0/Fgj1n2P7KAqxfQ7CMps8zZsRXEEjGnXrHju6gN4FostHPkCLcHn OUpeo0RQ==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1pxwf7-000awa-LS@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 13 May 2023 23:01:34 CEST
Source: golang-websocket
Architecture: source
Version: 1.4.0-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
bab847670647a7c8b7f7bbf781e4caf38bd4f45d 2429 golang-websocket_1.4.0-1+deb10u1.dsc
04d23fc4fb03d77faaf2fb252e18ffad15653ec0 50228 golang-websocket_1.4.0.orig.tar.gz
245408c1e8fd445169ec5e10c1decfe194108351 7232 golang-websocket_1.4.0-1+deb10u1.debian.tar.xz
e9622f69f86806537741ef6f6ecde4b8acce1f52 6351 golang-websocket_1.4.0-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
dca6e6ee0f75a5679fcc7d341f8227d3e1bb572e5aea5ae6973b40083c983941 2429 golang-websocket_1.4.0-1+deb10u1.dsc
2b5743c72bd0930c5a80e49c0138b5b7d27fa7c085efd0c86805cccfa7220c9d 50228 golang-websocket_1.4.0.orig.tar.gz
3ce09f41f3a00b8abe8bd6530174be924a520027286fe06806565bbb82b1870a 7232 golang-websocket_1.4.0-1+deb10u1.debian.tar.xz
392a33155c0d69e21e539f485890635a56cf79c8a0a387f6ce77163ea4421014 6351 golang-websocket_1.4.0-1+deb10u1_amd64.buildinfo
Changes:
golang-websocket (1.4.0-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2020-27813: An integer overflow vulnerability exists with the length
of websocket frames received via a websocket connection. An attacker would
use this flaw to cause a denial of service attack on an HTTP Server allowing
websocket connections.
Files:
4d70de645581da69ea1c6b00156cf67a 2429 devel optional golang-websocket_1.4.0-1+deb10u1.dsc
2cb0c26b0b541029d9c195424a6515de 50228 devel optional golang-websocket_1.4.0.orig.tar.gz
1fff44b6282a73f71052d827b2ad0f2c 7232 devel optional golang-websocket_1.4.0-1+deb10u1.debian.tar.xz
9c59cf5471ef4a64905adbb25ec7fb00 6351 devel optional golang-websocket_1.4.0-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=3Bnw
-----END PGP SIGNATURE-----