-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Oct 2026 22:13:40 +0200 Source: golang-golang-x-net Architecture: source Version: 1:0.60.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <[email protected]> Changed-By: Dr. Tobias Quathamer <[email protected]> Changes: golang-golang-x-net (1:0.60.0-1) unstable; urgency=medium . * Team upload. * New upstream version 0.60.0 - Refresh patches - CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams - CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race Checksums-Sha1: b7c65e434230f4d43c2fa3e4ff0dc3c9dce7f0a0 2467 golang-golang-x-net_0.60.0-1.dsc a377d27c9423adabe5bd9cbd2779708952e07374 1410690 golang-golang-x-net_0.60.0.orig.tar.gz 7b9015d00583fe67a20716f2ec5c4a19d1be99b0 17556 golang-golang-x-net_0.60.0-1.debian.tar.xz 7b09ffb6f57de63d8836808c173bf68d3b27e788 5806 golang-golang-x-net_0.60.0-1_amd64.buildinfo Checksums-Sha256: 7c0313925b57fe2d258289b14576521ed08d4e89fe7325d421bc9ec2b3ddb9d2 2467 golang-golang-x-net_0.60.0-1.dsc 27b053bc863306bd736faafced8e81aef4f2f5a6f78b8e8df566b8b400037fe2 1410690 golang-golang-x-net_0.60.0.orig.tar.gz 23e8e538f69492a541497117a1007318c4c6f066fba04be3f826ff77be3c9f03 17556 golang-golang-x-net_0.60.0-1.debian.tar.xz bec9c9d1d8178a882cea2f5eed0af3cccc25b2b73472d3ee2eca80bf3b3c20fc 5806 golang-golang-x-net_0.60.0-1_amd64.buildinfo Files: 6c2ea56b89680d0463998c63d14fbc42 2467 golang optional golang-golang-x-net_0.60.0-1.dsc 0d190592cc7ebd720e5db55b2320cca0 1410690 golang optional golang-golang-x-net_0.60.0.orig.tar.gz 86f17fdff8c21cf4b2b70abb41200a11 17556 golang optional golang-golang-x-net_0.60.0-1.debian.tar.xz c958c092604a36c7e17d355245d14870 5806 golang optional golang-golang-x-net_0.60.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0cuPObxd7STF0seMEwLx8Dbr6xkFAmrIAJYACgkQEwLx8Dbr 6xlcAw//Z17GoYluF09cTu7/WpfE6eBC4OwqdVo3anPoScEtsjlmr0dxL24yezzl BqegxhF00giZapGqDTLMYncIa7AuJPhoI2HTPtX7lfw1cbye4tVECvV1KxMjBBcj dkcKgKuPTZ9alIfIx56CXSm02L7z0cKQGKfHDgX/Fr8rTVyw/F9roYZbkSiWy3oo KcNcLSJngSJ1uUYImDCljx8G6YX8LMYXa8mvD8sqt7AjaB8yEN+WqWCnwK259ssU rNGaDD+YIB+5gYGcvMdplHyPrf2eiAZ/CwwhwfRrPrP9f2i0Po7qDE54/uNec/cB 2jwy4pSqkJvgOGm72muedo/YnUh42hpPgVjQCceFqCtSWgLwr6soVe8+Tc02Lc5A gjewvavRrRX4xLNm9ZXzwm+O7V5dlC/vPhbbNUi1eECvuUl61d6NYYZoaU+ZrjGY 6Y6VgA0Ic39KFf/kQj0XdpuvXp7l5khBLyjWB4IY84+0YtQy/wExJQWMlrFq2VDR xGHJNCf5+PPSdGUFcZEkuvkPrLyU9PUNUHBB8mITU3pKmrGnHBpqGtuxqPtodEj2 N9SsZ5e3OCoGzCQKQ02K76qVEsg/wWuXJHFGeDOndkiQ/ZuDTd+0mMMw+3+Kz4q+ jCV3Fxdc9I2PWA6eWJvXiPBn/oSMtdCIl3PiIJ4jInD0ENtzRrg= =9RQC -----END PGP SIGNATURE-----
pgpvl0Mbvo496.pgp
Description: PGP signature
