-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 00:07:57 +0200 Source: golang-1.27 Architecture: source Version: 1.27.3-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <[email protected]> Changed-By: Dr. Tobias Quathamer <[email protected]> Changes: golang-1.27 (1.27.3-1) unstable; urgency=medium . * New upstream version 1.27.3 - CVE-2026-111943: crypto/x509: distrust a handful of intermediates On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. Checksums-Sha1: 7facba2431e47dab054d32533ce0f7570dc4f28f 2915 golang-1.27_1.27.3-1.dsc 5448bf78d652ec7940e8f1b7d1c550db7b94c6fe 25035824 golang-1.27_1.27.3.orig.tar.xz 7b13cb5229a2ae1b7e7b8405826ad86e064e7f84 48832 golang-1.27_1.27.3-1.debian.tar.xz 039e436482db678446a5422372ec52ee8e050f17 45951012 golang-1.27_1.27.3-1.git.tar.xz 77d86da295d619dfb3b25617a70643f581312bd0 17752 golang-1.27_1.27.3-1_source.buildinfo Checksums-Sha256: 5bd60465084cac7b106ea8512cfecb2b9dfac9c009800170e7c3b3ef072fabe1 2915 golang-1.27_1.27.3-1.dsc 2fd4e536d37308b04faef4b7191e2dded27d94f3e4ef903ab34cf96c3cc78ce8 25035824 golang-1.27_1.27.3.orig.tar.xz ae46c789ac3f52ddae722253a10df1b2ec01087ad87c21888f7fca276b06408c 48832 golang-1.27_1.27.3-1.debian.tar.xz 72254e458f04ec63c0b91308bc96d128d428a29a3a4f9909ed6d603de9c71f25 45951012 golang-1.27_1.27.3-1.git.tar.xz 60594d4944a869baf0183e434aa5e49f227c8cb4fabed43ab0a3d854f2c84d19 17752 golang-1.27_1.27.3-1_source.buildinfo Files: 50e5c3028c6ee9d0e9eba5d9d1121987 2915 golang optional golang-1.27_1.27.3-1.dsc 25c6a52aa1dbf110eff55f0d5b04605c 25035824 golang optional golang-1.27_1.27.3.orig.tar.xz 55bd1a7e7512ea8337449198305b8a9f 48832 golang optional golang-1.27_1.27.3-1.debian.tar.xz efb6f59d024af0171f6f293e0e00b83e 45951012 None None golang-1.27_1.27.3-1.git.tar.xz 42d6f8fa507871fbfedf9443a73bcdd1 17752 golang optional golang-1.27_1.27.3-1_source.buildinfo Git-Tag-Info: tag=0f79a2dd6063be393416a676f56a309ccad33f83 fp=d1cb8f39bc5ded24c5d2c78c1302f1f036ebeb19 Git-Tag-Tagger: Dr. Tobias Quathamer <[email protected]>
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrb3CYACgkQYG0ITkaD wHl26g//XP9rtIb+o4d1AyBMnCb9z/K9ovMVzTe8x9THLO6uhZq5q9iuleNUPHO8 IVFKynxk8Xgrf6vgnk4LD6ETPiRezFOcjTDEaqdyug5GOZ6ZAyMmCfoMwZsi3p2O 1NUOLISGssnpIQ2eU1clD2lMThZMzqbF1YHW6tSLev1T3SNt6jOsZg9WsiGT5Wkk P68senVWtl1T3fk5nwmJ62jttbsih+uHhti7HwLwhUsONVReBfbR+cyQNKCzb/Ai R5f8zXf2lUSbf6HZB9FJwhbBU4tPmgFdTwJGf9LZZCXr6BXLl3QUY4J1C8WoQV/t RLFBszgglOuWL9N5M0TzLvoVD1bHt8Pm3zpXG4fpZb8I627L6Ze5ImJqjxq077cj vSXn7/ikYMwNRp1YphnM2anDSpZpOCt97a+gBVjFHTgCfBMvRNiTFOX0+zvJflzv nUfzlbCB7gG19nU4EduhN85eDYXBasJndGkee1jiyEh9TI06IROTkQ54+kWNovCi gSqQoH8PRiTmRFJ1X6ZZR/8Wd+xX0d5x1EoYM6BEFOp3T7yUAMGnAVlCGQhBx/6q XmPFZXIwAyXnEmQbg528+c/+tKVnCVJ5UgxtoHfikhSsLH2+ZLf3n0QuIIUAj7Zx 7eJCBvjd+Eff2draICAP7pXeFWTJLpsztJJvE50EoBf8QkIX5FI= =yv0P -----END PGP SIGNATURE-----
pgp_CxktjTrt0.pgp
Description: PGP signature
