[ubuntu/jammy-proposed] golang-1.24 1.24.4-1ubuntu1~22.04.1 (Accepted)

[Anshul Singh]

golang-1.24 (1.24.4-1ubuntu1~22.04.1) jammy; urgency=medium

  * Backport to Jammy (LP: #2103780)

golang-1.24 (1.24.4-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.24.1
    + CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (Closes: #1107364)
    + CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
    + CVE 2025-22874: crypto/x509: usage of ExtKeyUsageAny disables policy validation (Closes: #1107364)
    + CVE-2025-22873: os: Root permits access to parent directory (Closes: #1104816)
  * d/patches: Removed patch 0003 as it's already applied upstream now

Date: Thu, 26 Jun 2025 13:16:04 +0530
Changed-By: Anshul Singh <anshul.singh at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Vladimir Petko <vladimir.petko at canonical.com>
https://launchpad.net/ubuntu/+source/golang-1.24/1.24.4-1ubuntu1~22.04.1
-------------- next part --------------
Format: 1.8
Date: Thu, 26 Jun 2025 13:16:04 +0530
Source: golang-1.24
Built-For-Profiles: noudeb
Architecture: source
Version: 1.24.4-1ubuntu1~22.04.1
Distribution: jammy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Anshul Singh <anshul.singh at canonical.com>
Closes: 1104816 1107364
Launchpad-Bugs-Fixed: 2103780
Changes:
 golang-1.24 (1.24.4-1ubuntu1~22.04.1) jammy; urgency=medium
 .
   * Backport to Jammy (LP: #2103780)
 .
 golang-1.24 (1.24.4-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.24.1
     + CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (Closes: #1107364)
     + CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
     + CVE 2025-22874: crypto/x509: usage of ExtKeyUsageAny disables policy validation (Closes: #1107364)
     + CVE-2025-22873: os: Root permits access to parent directory (Closes: #1104816)
   * d/patches: Removed patch 0003 as it's already applied upstream now
Checksums-Sha1:
 aefdb08878c8176682a3ee37d311762e0d495c9b 2757 golang-1.24_1.24.4-1ubuntu1~22.04.1.dsc
 ddba895727e84f633e3369c55e0c823ce39886f8 42284 golang-1.24_1.24.4-1ubuntu1~22.04.1.debian.tar.xz
 f24622b2f6d30b56452d6ec7223957dc6f4880b9 7845 golang-1.24_1.24.4-1ubuntu1~22.04.1_source.buildinfo
Checksums-Sha256:
 ed466f2e30ec25f5d99847dce0963e8759f5d5d21b87e08f3040cc31f9393a2c 2757 golang-1.24_1.24.4-1ubuntu1~22.04.1.dsc
 6fb89f992e8d2f173ad00c56831f7e14ee64abef5f2ece02057447efd723a8cf 42284 golang-1.24_1.24.4-1ubuntu1~22.04.1.debian.tar.xz
 da5daca07cd9435f64abb57c104448e0cb7011829217e19fee4320380c9c2f22 7845 golang-1.24_1.24.4-1ubuntu1~22.04.1_source.buildinfo
Files:
 0b5cdab79bc92a69339d5f55caec9e52 2757 golang optional golang-1.24_1.24.4-1ubuntu1~22.04.1.dsc
 1344254ff60e6888e8aad2023f1d0b17 42284 golang optional golang-1.24_1.24.4-1ubuntu1~22.04.1.debian.tar.xz
 60c85fcd4afff829eccffd8349a2b721 7845 golang optional golang-1.24_1.24.4-1ubuntu1~22.04.1_source.buildinfo
Original-Maintainer: Debian Go Compiler Team <team+go-compiler at tracker.debian.org>