-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 16:29:53 +0000 Source: gobgp Architecture: source Version: 4.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Mathias Gibbens <gibmat@debian.org> Closes: 1132653 Changes: gobgp (4.4.0-1) unstable; urgency=medium . * New upstream release: - Includes fixes for CVE-2026-5122, CVE-2026-5123, CVE-2026-5124 (Closes: #1132653) - Drop patch applied upstream - Add patch to fix display of gobgpd help message, which should hopefully make the build reproducible * d/control: - Update Standards-Version to 4.7.4 (no changes needed) - Update Build-Depends and Depends Checksums-Sha1: 49eca0dcce92b12f375097a529ff0e3ae06b605f 3220 gobgp_4.4.0-1.dsc 215016618458c2bd3b9e049ba32e4206ec8718c3 1006204 gobgp_4.4.0.orig.tar.xz 5fca0a0077dfef97827fcf4325b6f4356b13063e 6708 gobgp_4.4.0-1.debian.tar.xz 2c3b2ead023dc300590c6fc010bf961a0caeb403 15951 gobgp_4.4.0-1_amd64.buildinfo Checksums-Sha256: 8665ff55f4bc51685eeda4710ac027d8ca2671c13ed7243e75b60883d08af9df 3220 gobgp_4.4.0-1.dsc 9be3db82c201a18bdc4c2166049e534c80c5c953d2b9a7ec76889a5b73d9a594 1006204 gobgp_4.4.0.orig.tar.xz 52a2aa79b63eef0e10286e9eab65ac976dda4f0b0b9807cd8aba358760714cdd 6708 gobgp_4.4.0-1.debian.tar.xz 70befb9775af2a09676f443f6e31fa3f0e19b83a1cd883e8590d6030eabbb6ab 15951 gobgp_4.4.0-1_amd64.buildinfo Files: 87ad451e3719939b579906a57330178b 3220 net optional gobgp_4.4.0-1.dsc 9a6ce4cb46778e6f41ad6ac505f8201d 1006204 net optional gobgp_4.4.0.orig.tar.xz 140d74da3632c6e2f7da7acdd34aa5aa 6708 net optional gobgp_4.4.0-1.debian.tar.xz 2b4a14b1c3abbceef2db7210cdf45b3f 15951 net optional gobgp_4.4.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmnSkrwSHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5JkEP/25Dy/uM1yYJ9W65fiE5UPLIrvMC4acs YTuXf211xcfHnt+BOk0t0D3ze6a8RrhyO1nwt56hpQNk8bjnykoNXk+PgAJCgmCL 2Dkn3h6fwG6eAOeEAoddctNnAZ1XXKb2NNloUllNlTNaKiQ7E5uNvo6lSc9rMjCO jO6+Z7RxpCBg0H+NNlMhjM8hh+z/xfO6mqlS3lqFUSGXLE+rp6aNFpecDKoAzWEc phv/W4qLICwOy+YG9w8TCQJptjtq0bIpbYOpyz9EmIwjnLiWsABifoQJNtE8BY5I AnttBf3UO07f8vFB8hWOvPcSsb/aVsKiiIWfbIBhDzIDpxBcCUISRqQC97cWmcNV GvFvpVao7+K5J2/Yfv13k7NX5PgGwzY+/EUquDMczQkAF+MldUsDgONHvW1LkbTI 0L1BdUTBd5tvcJXg/tvwGmjKMwMTwlFqoMFr+IuS07Ac6lP70Bn9evU4Xau08KIE qfOE4g3yhFIUO0bvsgzUNXw3sG85Nd800r26u8607sM/PJdKPACX4YpvLfyfxbKP KzEJ5uQCNUwVQ/odGHra13lKkOKYdEO0sD26kjE6DaodbaBYwwXM34rYrbX0fE4s GGAXocWLjHqz+Y8GnH1dLBXOOgGcG6n612iuDWwPUliQt81CHdEHVTQOuvVjC7+B 8pDbYPgBS2SK =dxRQ -----END PGP SIGNATURE-----