-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 06 Dec 2022 16:10:54 -0600
Source: golang-1.19
Built-For-Profiles: noudeb
Architecture: source
Version: 1.19.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Compiler Team <team+go-compi...@tracker.debian.org>
Changed-By: William 'jawn-smith' Wilson <jawn-sm...@ubuntu.com>
Changes:
golang-1.19 (1.19.4-1) unstable; urgency=medium
.
* New upstream version 1.19.4
+ CVE-2022-41720: os, net/http: avoid escapes from os.DirFS and http.Dir
on Windows
+ CVE-2022-41717: net/http: limit canonical header cache by bytes, not
entries
Checksums-Sha1:
d8eb06e965a75308eee66f887ec69c7db17924f5 2836 golang-1.19_1.19.4-1.dsc
4815263e15059025765144188dd050d52b764302 26542047
golang-1.19_1.19.4.orig.tar.gz
b0ac9676928d0e0458ac170838ac6ff0b961a5e1 819 golang-1.19_1.19.4.orig.tar.gz.asc
4b3b11774d569944a5b43c117c864ac32eaedf99 41544
golang-1.19_1.19.4-1.debian.tar.xz
6dfc89d38bd2fb2cbcccdd86dce3a29f071c2a89 7460
golang-1.19_1.19.4-1_source.buildinfo
Checksums-Sha256:
cae9725465fbcc158f167b10d7b2f113db69ed43bcc76b6d83a33b90859daea8 2836
golang-1.19_1.19.4-1.dsc
eda74db4ac494800a3e66ee784e495bfbb9b8e535df924a8b01b1a8028b7f368 26542047
golang-1.19_1.19.4.orig.tar.gz
8ab1c72f4d0f79ea87961f0beae591d8f0ace5db09d3f03721246791bff21d53 819
golang-1.19_1.19.4.orig.tar.gz.asc
fdcadb2f5762c4d05f7dcf8675dad76a19bc1d4e89a98f4d740d437be8e6e747 41544
golang-1.19_1.19.4-1.debian.tar.xz
be952e7eba6911e3452f87cb93b1d966435024f81358d3f0031151b704871544 7460
golang-1.19_1.19.4-1_source.buildinfo
Files:
f454a599cd752e80920fcad07909ecf7 2836 golang optional golang-1.19_1.19.4-1.dsc
1577a8d801746d1c3fc165f0d3a27230 26542047 golang optional
golang-1.19_1.19.4.orig.tar.gz
889371872e165c38b462b5ce961c3234 819 golang optional
golang-1.19_1.19.4.orig.tar.gz.asc
3a178325234d8b4d7dab3f8cdbc118b5 41544 golang optional
golang-1.19_1.19.4-1.debian.tar.xz
dbc10f5c648d1e24e933e82e232f3624 7460 golang optional
golang-1.19_1.19.4-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEfm2fYq1zA4h6PB3QSRbXqx16OAQFAmOR/dwACgkQSRbXqx16
OAQZVQ/+JGaydoj07MjIzp7WvdZjN/0dzgTmcxD2J3Yrokrblm3wV7Am/987Ny4m
kizGBPoVJGW2Q+ukRO2xUbRT52Y8QqDzUchGLI7JiGUHWV02JoMLNz4n6xhnn0iM
AutPuYCx1gOptEniDM+ViPkC82DfdqVOkgEY1s5awNjDAmhNUe9CR2mNjPZMddKS
F55QNDuJD+mEpuGXn+9gOymhlH4weQaI2UA08w9lp2ClZzLfauQX1Yp9Ovwv88gc
kHKKqpBg6NygKTRg+0b3AtiBMQ10DVhajoe0qn1yFOo/4T5ddPMzq3GBdxCJUMxV
T7ciN0Fn4foiqaOtEYXHu4cwrI9xeueEEvgmHFdGR+QUS0y8rsnbgfTMR+pWW5Vn
OgQx16apf4t0sg79pIwpw+mUxgDVqtueA9B8KPxwzdY5v+NqHBXwIl4U+2Ixc8FE
OtuUv5uWpY+KREGQ19JqyPdNn9S35fKNA7S654xadPu4GBg+rqGDFBfEbfC7Xd77
Xs06E9w7/KKS7AiKrFCwJwiN2iibK8eXlTQJMzzNTMnyAEbF3rvu6ZzZhc75wdQG
6U//StNGtILaZdxC4upZu7oWuZwE9klPta/99k63dKjsaGwSa5N08WIs/tp6nr5W
yJ43IO2H3wBLn9dCo6NBiIWBTbpK7zQdge+kzlYq4uY2VFULhKY=
=liwT
-----END PGP SIGNATURE-----
