golang-google-protobuf 1.33.0-1 source package in Debian
Changelog
golang-google-protobuf (1.33.0-1) unstable; urgency=medium * New upstream version 1.33.0 encoding/protojson, internal/encoding/json: handle missing object values In internal/encoding/json, report an error when encountering a } when we are expecting an object field value. For example, the input `{"":}` now correctly results in an error at the closing } token. In encoding/protojson, check for an unexpected EOF token in skipJSONValue. This is redundant with the check in internal/encoding/json, but adds a bit more defense against any other similar bugs that might exist. Fixes CVE-2024-24786 (Closes: #1065684) * DH_GOLANG_INSTALL_EXTRA: Update path to editions_defaults.binpb which was moved from reflect/protodesc/ to internal/editiondefaults/ -- Anthony Fok <email address hidden> Tue, 26 Mar 2024 17:49:06 -0600
Upload details
- Uploaded by:
- Debian Go Packaging Team
- Uploaded to:
- Sid
- Original maintainer:
- Debian Go Packaging Team
- Architectures:
- any all
- Section:
- golang
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section | |
---|---|---|---|---|
Experimental | release | main | golang | |
Sid | release | main | golang |
Builds
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
golang-google-protobuf_1.33.0-1.dsc | 2.3 KiB | 1274db27a31a56d97a94efd04ed288922bbe8dcc46cf2e805ced2cd423bb8a01 |
golang-google-protobuf_1.33.0.orig.tar.xz | 793.3 KiB | 40d83211cdfc25e1c13c6de527b33516c21d6ef48188070ff22f29330abe4f84 |
golang-google-protobuf_1.33.0-1.debian.tar.xz | 4.0 KiB | 9469684733b7810b2a382ea2c0e801c4b0b4bd90bc41399e3a76d8760996ac03 |
Available diffs
- diff from 1.32.0-1 to 1.33.0-1 (215.2 KiB)
No changes file available.