[ubuntu/lunar-proposed] golang-1.13 1.13.8-1ubuntu3 (Accepted)

David Fernandez Gonzalez david.fernandezgonzalez at canonical.com
Thu Nov 10 12:21:20 UTC 2022


golang-1.13 (1.13.8-1ubuntu3) lunar; urgency=medium

  * SECURITY UPDATE: Infinite read loop via invalid inputs
    - debian/patches/CVE-2020-16845.patch: ensure that ReadUvarint
      reads a limited amount of data in src/encoding/binary/varint.go.
    - CVE-2020-16845
  * debian/control.in: Add gcc-10 and g++-10 as DWARF5 is not compatible
    and is used in versions greater than 10.
  * debian/rules: Enforce the use of gcc-10 and g++-10.

Date: Thu, 10 Nov 2022 09:34:31 +0100
Changed-By: David Fernandez Gonzalez <david.fernandezgonzalez at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/golang-1.13/1.13.8-1ubuntu3
-------------- next part --------------
Format: 1.8
Date: Thu, 10 Nov 2022 09:34:31 +0100
Source: golang-1.13
Built-For-Profiles: noudeb
Architecture: source
Version: 1.13.8-1ubuntu3
Distribution: lunar
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: David Fernandez Gonzalez <david.fernandezgonzalez at canonical.com>
Changes:
 golang-1.13 (1.13.8-1ubuntu3) lunar; urgency=medium
 .
   * SECURITY UPDATE: Infinite read loop via invalid inputs
     - debian/patches/CVE-2020-16845.patch: ensure that ReadUvarint
       reads a limited amount of data in src/encoding/binary/varint.go.
     - CVE-2020-16845
   * debian/control.in: Add gcc-10 and g++-10 as DWARF5 is not compatible
     and is used in versions greater than 10.
   * debian/rules: Enforce the use of gcc-10 and g++-10.
Checksums-Sha1:
 d2d942293f218b73271e8e3f7646cfd70ab38038 2712 golang-1.13_1.13.8-1ubuntu3.dsc
 83ff3e2282dc64eed238ab78f4c5cfc42a176ebe 39500 golang-1.13_1.13.8-1ubuntu3.debian.tar.xz
 e4715501823b487f193b4e01798a12e726107cbd 7127 golang-1.13_1.13.8-1ubuntu3_source.buildinfo
Checksums-Sha256:
 66054372da1814a51a1b085c55c017f2d7ecc52e07524f86e848aaa4837a2a3e 2712 golang-1.13_1.13.8-1ubuntu3.dsc
 30a5478091fc6be40247704c03d1103dfdb2d1697129e421724b88c47e2c44d5 39500 golang-1.13_1.13.8-1ubuntu3.debian.tar.xz
 49a1af71d87bd098745ffa29c7bcc6062b9e8eb40537e4d2eed629a206740e5a 7127 golang-1.13_1.13.8-1ubuntu3_source.buildinfo
Files:
 73e2629eb34e932f40ee60acbf2623db 2712 devel optional golang-1.13_1.13.8-1ubuntu3.dsc
 b7ce312cd15a7bed1e57148fe03d8c4b 39500 devel optional golang-1.13_1.13.8-1ubuntu3.debian.tar.xz
 97090217c401d8913caeb730fed6272a 7127 devel optional golang-1.13_1.13.8-1ubuntu3_source.buildinfo
Original-Maintainer: Go Compiler Team <team+go-compiler at tracker.debian.org>


More information about the lunar-changes mailing list