Format: 1.8 Date: Tue, 26 Mar 2024 17:49:06 -0600 Source: golang-google-protobuf Binary: protoc-gen-go Built-For-Profiles: noudeb Architecture: arm64 Version: 1.33.0-1 Distribution: oracular-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Anthony Fok Description: protoc-gen-go - Go plugin for protobuf compiler (APIv2) Closes: 1065684 Changes: golang-google-protobuf (1.33.0-1) unstable; urgency=medium . * New upstream version 1.33.0 . encoding/protojson, internal/encoding/json: handle missing object values . In internal/encoding/json, report an error when encountering a } when we are expecting an object field value. For example, the input `{"":}` now correctly results in an error at the closing } token. . In encoding/protojson, check for an unexpected EOF token in skipJSONValue. This is redundant with the check in internal/encoding/json, but adds a bit more defense against any other similar bugs that might exist. . Fixes CVE-2024-24786 (Closes: #1065684) . * DH_GOLANG_INSTALL_EXTRA: Update path to editions_defaults.binpb which was moved from reflect/protodesc/ to internal/editiondefaults/ Checksums-Sha1: f53deef7a93032cf1d67d8704a45bd01e24bb459 5856 golang-google-protobuf_1.33.0-1_arm64.buildinfo afe62b1a957a136223a3e244e45fec4b904c6130 1401280 protoc-gen-go_1.33.0-1_arm64.deb Checksums-Sha256: ecea42081d0a4590683386594e5f1ef232b32aff4a7cc056f1acf7ecc0052290 5856 golang-google-protobuf_1.33.0-1_arm64.buildinfo 77b8ab1fe300aba7b01788b7df40f49a134d064d05df3c193daf1428a8b0a06c 1401280 protoc-gen-go_1.33.0-1_arm64.deb Files: 09069cfaa8b463868027c9775c94fcc1 5856 golang optional golang-google-protobuf_1.33.0-1_arm64.buildinfo e20204d17362b21bd55210a0f1dbd705 1401280 golang optional protoc-gen-go_1.33.0-1_arm64.deb