-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 30 Oct 2026 19:30:24 -0400 Source: golang-gvisor-gvisor Architecture: source Version: 0.0~20261026.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1102747 1150508 1150510 Changes: golang-gvisor-gvisor (0.0~20261026.0-1) unstable; urgency=medium . * Team upload. * New upstream release (Closes: #1102747). - Fixes CVE-2026-96812: improper exposure of CUSE character device node passing through to the host in gofer (Closes: #1150508). - Fixes CVE-2026-95702: use-after-free vulnerability in VFS in sentry (Closes: #1150510). * debian/rules, debian/watch, debian/runsc.install: - Upgrade debian/watch to format version 5 with GitHub template. - Integrate DFSG repack in debian/update-upstream.sh. - Exclude runsc/checkpointgofer due to unpackaged GCS SDK. - Dynamically generate zeroed sighandler placeholder from host architecture. - Move sentry and metricserver sidecars to /usr/lib/runsc/gvisor-bin. * debian/sighandler_ARCH.tmpl: - Update sighandler placeholder with __export_disable_syscall_patching. * debian/sysmsg.makefile: - Pass NM to gen_offsets_go.sh and use OBJCOPY. * debian/control: - Replace golang-github-kr-pty-dev with golang-github-creack-pty-dev. - Replace golang-gocapability-dev with golang-github-moby-sys-dev. - Use Static-Built-Using for runsc. * debian/copyright: - Update for new upstream release and DFSG review. - Update copyright years to 2018-2026. - Remove redundant globbing pattern for pkg/shim/v1/*. - Expand Go Authors attribution to 2009-2014. * debian/patches: - Drop 0001-fake-coverage-pkg.patch: fixed upstream. - Refresh use-cenkalti-backoff-v4.patch and make DEP-3 compliant. - Add sidecar-search-fallback-path.patch to find /usr/lib sidecars. * debian/salsa-ci.yml: - Disable blhc due to false positives on freestanding stubs. * debian/tests/control: - Require isolation-machine for runsc test. Checksums-Sha1: 53adc8fa6a249ff5e915718369674b29b6ebc3d1 3249 golang-gvisor-gvisor_0.0~20261026.0-1.dsc f14bacbb2e985330809ce57362d398c95ccc801a 4364987 golang-gvisor-gvisor_0.0~20261026.0.orig.tar.gz 14d51314ec74497cd0e1d97d17d5641a5a37996d 10928 golang-gvisor-gvisor_0.0~20261026.0-1.debian.tar.xz Checksums-Sha256: 1d23d11d544c17fe0b5a5d799c965ca2d54a714a25bd03ef72249e1630a908c6 3249 golang-gvisor-gvisor_0.0~20261026.0-1.dsc 58f5519b238298fffa43a79eee1ca484d7f799ea8f1b84d607cfed523e77b9c7 4364987 golang-gvisor-gvisor_0.0~20261026.0.orig.tar.gz 0a4de4cd3cae60958faf6e7f2fc222a18494a71a2780dcf5c6e7d32594b3d9e4 10928 golang-gvisor-gvisor_0.0~20261026.0-1.debian.tar.xz Files: a4942b0ae41744781ef6a1828bfa0e65 3249 golang optional golang-gvisor-gvisor_0.0~20261026.0-1.dsc 4d1a6034af23996037df148260a48353 4364987 golang optional golang-gvisor-gvisor_0.0~20261026.0.orig.tar.gz 67fbfe9172e19bc910fc7daf3ed15de1 10928 golang optional golang-gvisor-gvisor_0.0~20261026.0-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmrlMQoUHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJstGug/8CfF+JpUvBpnDAFTNxwldBS5PVgN0 qMGwS9SELHc2M6gJlN1fxEQSun1clntCRd/WddkYY8nacZKrpyKRzFMj+ym/awpj nAB1X9pksPRMk/G7PPJvKReaAd0U8EYxm6tIZ0whgRFwQTz1AsQ3HYfP5MGAsv6S o3BumI83gtUo4SMiuFNCkJg/wMiJOve0fEJkYARiMgdZGBdqbRRYgtWql24y23mj pBuzeLI36yhzB9I91OiaR5vin6ErpWDEq9t3k+Zd9YKcLUmxskMW5ZnEwpdI3TAi OU6NwEa9fSSZUaefw3qq44oPMV2TqpzaMVAHM0E6CJGpzP470RkTyMldBW9zHttx z2BQIEtx6ato4RssG1hF0jQjQ4Q8DS3GSnRHlpQO/E5azL86/UIKkramEDZRvi96 9HU9DRtnxJQvSv2EE7qlGwnjyp4VaJvB/OJ+J20dU2nXCYDZGVeS/1FSmru53lhU tdAoOdaRpDhZLtlfvTKPMdNJywzu13Rdpd+VoSkOz+m5d4ycO3DDN1/QWcEm0InQ tu0/Sh/MHdMhzNuBbooKCzWzCGJGJMHIVr9t91PwgYbE/PrkC9lzJhJXeetPMAgx 8m+UccnBf4WJ9whSmym7dgyQgmwKiQZk70cta1pBkMRh/wF786tv0a0aoLGKknlz aFHPCcL5IjWzax8= =Kfn6 -----END PGP SIGNATURE-----
