-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 08 Dec 2020 02:06:10 -0700 Source: golang-go.crypto Binary: golang-golang-x-crypto-dev Architecture: source all Version: 1:0.0~git20201016.9e8e0b3-1~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Anthony Fok <foka@debian.org> Description: golang-golang-x-crypto-dev - Supplementary Go cryptography libraries Closes: 952462 Changes: golang-go.crypto (1:0.0~git20201016.9e8e0b3-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. . golang-go.crypto (1:0.0~git20201016.9e8e0b3-1) unstable; urgency=medium . * Upload to unstable. . golang-go.crypto (1:0.0~git20201016.9e8e0b3-1~exp1) experimental; urgency=medium . * Team upload. * New upstream version 0.0~git20201016.9e8e0b3 . golang-go.crypto (1:0.0~git20200604.70a84ac-2) unstable; urgency=medium . * Team upload. * d/patches: Add patch to skip test fails on reproducible builds. * d/upstream/metadata: Update URL for issues. . golang-go.crypto (1:0.0~git20200604.70a84ac-1) unstable; urgency=medium . * Team upload. * New upstream version 0.0~git20200604.70a84ac . golang-go.crypto (1:0.0~git20200429.4b2356b-1) unstable; urgency=medium . * Team upload. * New upstream version 0.0~git20200429.4b2356b * debian/control: Set Rules-Requires-Root to no * Add debian/upstream/metadata . golang-go.crypto (1:0.0~git20200221.2aa609c-1) unstable; urgency=high . * New upstream version 0.0~git20200221.2aa609c - ssh: return an error for malformed ed25519 public keys rather than panic (v0.0.0-20200220183623-bac4c82f6975). Fixes CVE-2020-9283 (Closes: #952462) * Previously uploaded upstream version 0.0~git20190701.4def268 contains: - salsa20/salsa: fix keystream loop in amd64 assembly when overflowing 32-bit counter (commit b7391e9, 2019-03-20). Fixes CVE-2019-11840 - openpgp/clearsign: reject potentially misleading headers and messages (commit c05e17b, 2019-04-24). Fixes CVE-2019-11841 * debian/gbp.conf: Set debian-branch to debian/sid for DEP-14 conformance * Bump Standards-Version to 4.5.0 (no change) * debian/copyright: Add Upstream-Contact * Remove d/patches/0001-ssh-test-delete-TestInvalidTerminalMode.patch which has been applied upstream as commit 9756ffd * Build-Depends on dh-golang (>= 1.48~) to prevent "no non-test Go files" error in internal/wycheproof during build * Add d/patches/0001-skip-wycheproof_test.patch to skip test that access the Internet with "go mod download -json" * Override dh_auto_install with --no-binaries to prevent /usr/bin/acmeprobe from being built . golang-go.crypto (1:0.0~git20190701.4def268-2) unstable; urgency=medium . * Team upload. * d/patches/0001-ssh-test-delete-TestInvalidTerminalMode.patch: remove test that fails with new openssh. * Add openssh-server to Build-Depends to run more tests at build time. * Add myself to Uploaders . golang-go.crypto (1:0.0~git20190701.4def268-1) unstable; urgency=medium . * New upstream version 0.0~git20190701.4def268 * Remove Lintian override debian-watch-file-is-missing because we now have a debian/watch file. * Apply "cme fix dpkg" fixes - Specify compatibility level with "Build-Depends: debhelper-compat (= 12)" - Bump Standards-Version to 4.4.0 (no change) * Update versioned dependencies according to go.mod Checksums-Sha1: 0f919bf07e11c4a5892dd275dcc5c96f3a23bcd2 2522 golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1.dsc a17dbef7c40e6d6e5b30e40ba099a4a467eb5a69 6500 golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1.debian.tar.xz 3aa5b3b0420b63e45b9d23495484ee4624710da3 6883 golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1_amd64.buildinfo 198778dfa0a1fe69cbda16c597af2fc4c7fa50fa 1544112 golang-golang-x-crypto-dev_0.0~git20201016.9e8e0b3-1~bpo10+1_all.deb Checksums-Sha256: 3e459684f3e19c7a1962c29b741019b5d8e58ad0588dcf0c8e11e4a6a1ec767d 2522 golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1.dsc 1ce51bcfb6cd85c84ae875b1679ff658ce0df043d06cce74378db8f8045245ea 6500 golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1.debian.tar.xz 5b355d8001c34501ce05dde6ce3681e8590360b1289b84e1e713a5f4b11d04a0 6883 golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1_amd64.buildinfo 1965a2dfa6855a4a984cef5cb36c2459e31effa3231a7e14eb1a70ff2ffa6512 1544112 golang-golang-x-crypto-dev_0.0~git20201016.9e8e0b3-1~bpo10+1_all.deb Files: bfcf63091e150c6feafb9df09761b81a 2522 devel optional golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1.dsc 505f977556967f29b696f37a58c6c70b 6500 devel optional golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1.debian.tar.xz 7f2fd7ec06faaebc4fb632b51874b762 6883 devel optional golang-go.crypto_0.0~git20201016.9e8e0b3-1~bpo10+1_amd64.buildinfo 8fa69752f7b97d760256c3da097a768a 1544112 devel optional golang-golang-x-crypto-dev_0.0~git20201016.9e8e0b3-1~bpo10+1_all.deb -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAl/PQt4QHGZva2FAZGVi aWFuLm9yZwAKCRDqJQC0EsWaz//gD/0ct2ZBUW+F0/mGhW3KgcPs/gsxfwUMFGtO mUkEp/MdwKmxPKsP7aWrBUaVY2E2kIT59OZbj9Wsq9LNUM8O/ZQWoGsQfnvbdkLW eTaC8eOj0VeFxkfuuvlLfbFAdi+BQRygmXuJb0nOGGzns/QkfUivEpXqoFjkCbnM fQZX5DCeKa43JguINl5WYlKd8eoWAEz7aKIwDmD2RnlhYZEryCbd/uPljwNRTYr/ R+MmhN4EEmmHz5ey+sivsYLZhwrS3NEHmvrmdW7IIN4BTYcAzfREGxAbHoO9ZyO9 6JmmHkhUBK/UfzPhx1+dQMcnFUwARqR4cQZhySMtAxIuXvJAOFInOC2KuWFSrKnE Njd/5eCokQD3xgqzKQeTdiPwwsaxr7nzohiFS54u2OKcK+FYF/WE2KXY+/v3edXv P0L/sDxRJLAhXxaT91uT8kGRxkxnJN8QLLF86uWitSqdOUtaADBMQKOvIZY6r5si eiC7k9LznhRV8j/iuc+dFq9jw95tqALxwi46WQLuD+lRXLj5z5VAuImwLV1Lm9m9 mCZaR+L+F8eI+ieL6/ZLcxBUF9JiCJcrecjfWkwnnSqi7xEVCkNW7uiuXiPZnIb0 YWYgYejVFVyEbTYJC5P+6v82BnpzxIJgfJ2zsYYMBWqFy83LhdhOkdy6I2oCbk8Z rYv/NTmZ0Q== =NWWG -----END PGP SIGNATURE-----