• Accepted golang-1.23 1.23.10-1 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Tue Jun 17 04:40:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 16 Jun 2025 13:10:51 +0200
    Source: golang-1.23
    Built-For-Profiles: noudeb
    Architecture: source
    Version: 1.23.10-1
    Distribution: unstable
    Urgency: medium
    Maintainer: Debian Go Compiler Team <[email protected]> Changed-By: Anshul Singh <[email protected]>
    Closes: 1104816 1107390
    Changes:
    golang-1.23 (1.23.10-1) unstable; urgency=medium
    .
    * Team upload
    * New upstream version 1.23.10
    + CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (Closes: #1107390)
    + CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
    + CVE-2025-22873: os: Root permits access to parent directory (Closes: #1104816)
    Checksums-Sha1:
    2e9582990ddcf6fa37786e71ada8057dd33c6777 2904 golang-1.23_1.23.10-1.dsc
    62d5ccb6f7db603bfd65de7382a0a9c99b81b837 28183775 golang-1.23_1.23.10.orig.tar.gz
    7e5e308eb2fcbd052af4d625131dd92f71f278d8 833 golang-1.23_1.23.10.orig.tar.gz.asc
    625b18ec08f234b38feac6bf2e04c45448054918 42076 golang-1.23_1.23.10-1.debian.tar.xz
    142e6a44d42a6945905316731a94beb20a5c61f4 7584 golang-1.23_1.23.10-1_source.buildinfo
    Checksums-Sha256:
    fe19e67cde602585b08e1f1f5e77bb53dcc2ec1a9950efafffd36d55bd305c68 2904 golang-1.23_1.23.10-1.dsc
    800a7ae1bff179a227b653a2f644517c800443b8b4abf3273af5e1cb7113de59 28183775 golang-1.23_1.23.10.orig.tar.gz
    ad61283800f9fdaa3d71bf608a074cac19cc5b5b44fe383d2a452216d3efbf78 833 golang-1.23_1.23.10.orig.tar.gz.asc
    d89501956a9a640767fb92082424c5b1fc674f2aa6982c84c1e192ddd1d8a302 42076 golang-1.23_1.23.10-1.debian.tar.xz
    4f8a5aed00955c4f11019a0a6d2b73c47accab7354020ae9ed13a449907cd09f 7584 golang-1.23_1.23.10-1_source.buildinfo
    Files:
    76431bc65a78a92f2a092e78a542d4ff 2904 golang optional golang-1.23_1.23.10-1.dsc
    4aa33824a01bd8f852086ce5907a414b 28183775 golang optional golang-1.23_1.23.10.orig.tar.gz
    c71a73cdfc4d9f5a89c14892881518e0 833 golang optional golang-1.23_1.23.10.orig.tar.gz.asc
    241dba32534f9ab177b5d515b726e096 42076 golang optional golang-1.23_1.23.10-1.debian.tar.xz
    5d028049d5178cf53b441f42feeb6610 7584 golang optional golang-1.23_1.23.10-1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEiiBE+E9xaoW3f/djEd9ClMyjmJMFAmhQyzMACgkQEd9ClMyj mJMUDhAAkdI7ImbIb5E12cxz079ea/Sik7VyoBMcGWnxH/2ZhGMScipPZjfWh69m nFuS/cweri98L8TKTexUIuTZby+Q8YoKzVuVTmhFAxuSAWn8tkvxTanLfVs+pV3e q4oy67hKlVYOsFGZwSWo15QZPuMyZNVyAepk57S2DjzMvCm55aYyLYUlMVz8jksy XPj9YUa7gBMTd6N13RQDCWqfw3YvuvcFOvfHsnovC9QAMbkPG9O6KlA4/V2xEStN vEdBy5JZaRhSJwYp7F0CZwtOJRhLED19XZpB7SmKQRjnHnX0WCs4lG5Ri/f3lqub F10SqjwKl77a4cssB7x7XCwsV0wc/kCfJxX4GiPIQPHviLKwN/hQHMHj3ckhjUwm vdYn/0d+E9frDJjlb3Oar/CtdORg/s3DZEQje6YvTD7tH04h4B+OshpSU5YMzvrk pJB0MRFSSPz8KKqt+c9J83PDs/P0dbXhqWnEUY+Nbk6t8fLSbAUUU0vaa4xx6VCs i6Rmas5xIvNi+yTYFpcMzXORSsdbGqzKG0BdO0/Lxq1SsAi2yO5f4RHTSuNsloU6 +sxQ8WjQZ3cQHplhKa7FZp6PrVoZ0nyVe3wiIrFGCrJUPwQxwtMbZDYE1uYVbo/g hRKjV8PKeT/P/V0xYYmyNHwK/ioEGPY6wakXGmGF/bzZP8t2FYU=
    =f0j0
    -----END PGP SIGNATURE-----


    --==============S82322586566359648=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaFDVCAAKCRCb9qggYcy5 IVA/AQDJvsmbPztEB1yztYDpGM7wuCSbj5apQO1+heRuWW5BFQD/RZ4dQUHQPqz6 Z4FFCdAm/snXJLsg6bUZRBlAhjxwZQE=MPlL
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)