[ubuntu/noble-proposed] golang-1.24 1.24.4-1ubuntu1~24.04.1 (Accepted)

[Anshul Singh]

golang-1.24 (1.24.4-1ubuntu1~24.04.1) noble; urgency=medium

  * Backport to Noble (LP: #2103780)

golang-1.24 (1.24.4-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.24.1
    + CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (Closes: #1107364)
    + CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
    + CVE 2025-22874: crypto/x509: usage of ExtKeyUsageAny disables policy validation (Closes: #1107364)
    + CVE-2025-22873: os: Root permits access to parent directory (Closes: #1104816)
  * d/patches: Removed patch 0003 as it's already applied upstream now

Date: Thu, 26 Jun 2025 13:16:04 +0530
Changed-By: Anshul Singh <anshul.singh at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Vladimir Petko <vladimir.petko at canonical.com>
https://launchpad.net/ubuntu/+source/golang-1.24/1.24.4-1ubuntu1~24.04.1
-------------- next part --------------
Format: 1.8
Date: Thu, 26 Jun 2025 13:16:04 +0530
Source: golang-1.24
Built-For-Profiles: noudeb
Architecture: source
Version: 1.24.4-1ubuntu1~24.04.1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Anshul Singh <anshul.singh at canonical.com>
Closes: 1104816 1107364
Launchpad-Bugs-Fixed: 2103780
Changes:
 golang-1.24 (1.24.4-1ubuntu1~24.04.1) noble; urgency=medium
 .
   * Backport to Noble (LP: #2103780)
 .
 golang-1.24 (1.24.4-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.24.1
     + CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin redirect (Closes: #1107364)
     + CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and Windows
     + CVE 2025-22874: crypto/x509: usage of ExtKeyUsageAny disables policy validation (Closes: #1107364)
     + CVE-2025-22873: os: Root permits access to parent directory (Closes: #1104816)
   * d/patches: Removed patch 0003 as it's already applied upstream now
Checksums-Sha1:
 44712f31390c7cd6ed8e744a6661f50f30f8d150 2757 golang-1.24_1.24.4-1ubuntu1~24.04.1.dsc
 98a0f45ace2d0ea731bd6418bb546a36c3632d1a 42276 golang-1.24_1.24.4-1ubuntu1~24.04.1.debian.tar.xz
 90f6cf24e5ab4d13af053621efa9e454239fdb9e 7845 golang-1.24_1.24.4-1ubuntu1~24.04.1_source.buildinfo
Checksums-Sha256:
 5a38437364451d491e37e654e4071d5d487bb937fe8c1156a58aeed8a207d5fd 2757 golang-1.24_1.24.4-1ubuntu1~24.04.1.dsc
 5e04c449f1af58821ae5a7297ab6245130e8ea2eafe468bb6fe33988ffdb0877 42276 golang-1.24_1.24.4-1ubuntu1~24.04.1.debian.tar.xz
 9404f5da4ef104a1b231b387e7578c87fff5567f5a00556eeadabe207d8d23c2 7845 golang-1.24_1.24.4-1ubuntu1~24.04.1_source.buildinfo
Files:
 24f16e76d6503cac12bb396d5ef85528 2757 golang optional golang-1.24_1.24.4-1ubuntu1~24.04.1.dsc
 ae923905f080c7f18b7d861e2bbc184b 42276 golang optional golang-1.24_1.24.4-1ubuntu1~24.04.1.debian.tar.xz
 12f519fa24f1ae0a985faa0d52427ee2 7845 golang optional golang-1.24_1.24.4-1ubuntu1~24.04.1_source.buildinfo
Original-Maintainer: Debian Go Compiler Team <team+go-compiler at tracker.debian.org>