golang-1.13.git
5 years agogolang-1.13 (1.13.7-1) unstable; urgency=medium
Dr. Tobias Quathamer [Fri, 31 Jan 2020 20:47:40 +0000 (20:47 +0000)]
golang-1.13 (1.13.7-1) unstable; urgency=medium

  * New upstream version 1.13.7
    - cryptobyte: fix panic due to malformed ASN.1 inputs on 32-bit archs.
      When int is 32 bits wide (on 32-bit architectures like 386 and arm),
      an overflow could occur, causing a panic, due to malformed ASN.1
      being passed to any of the ASN1 methods of String.
      This fixes CVE-2020-7919 and was found thanks to the
      Project Wycheproof test vectors.
  * Update upstream's signing key

[dgit import unpatched golang-1.13 1.13.7-1]

5 years agoImport golang-1.13_1.13.7.orig.tar.gz
Dr. Tobias Quathamer [Fri, 31 Jan 2020 20:47:40 +0000 (20:47 +0000)]
Import golang-1.13_1.13.7.orig.tar.gz

[dgit import orig golang-1.13_1.13.7.orig.tar.gz]

5 years agoImport golang-1.13_1.13.7-1.debian.tar.xz
Dr. Tobias Quathamer [Fri, 31 Jan 2020 20:47:40 +0000 (20:47 +0000)]
Import golang-1.13_1.13.7-1.debian.tar.xz

[dgit import tarball golang-1.13 1.13.7-1 golang-1.13_1.13.7-1.debian.tar.xz]