-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 22 Sep 2026 02:39:48 +0200 Source: golang-github-hashicorp-go-getter Binary: golang-github-hashicorp-go-getter-dev Architecture: source all Version: 1.8.9-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Juan Manuel Méndez Rey <juan.mendezr@proton.me> Description: golang-github-hashicorp-go-getter-dev - download files and directories from a URL (library) Closes: 1148633 Changes: golang-github-hashicorp-go-getter (1.8.9-1) unstable; urgency=medium . * Reintroduce the package (Closes: #1148633). 1.4.1-1 was removed from unstable on 2026-01-20 (RoQA, rc-buggy, #1122179) over unfixed CVEs. * New upstream version 1.8.9. Fixes every CVE the security tracker lists for the package except CVE-2026-19585. * Backport the upstream fix for CVE-2026-19585 from 1.8.10. * Run the git, hg and archive permissions tests. * Switch to dh-go for module-aware builds; debhelper-compat 14. * Refresh d/copyright and d/watch; add d/salsa-ci.yml. Checksums-Sha1: e2872144c38aefa4eb4d5d15207fc3afee72e9b2 2799 golang-github-hashicorp-go-getter_1.8.9-1.dsc 9cc60c529e71bd1b8aba3d1552f9699ae26d448c 118228 golang-github-hashicorp-go-getter_1.8.9.orig.tar.gz 3ac0793ea7c345cb8dade77d6af19e4615dd9e70 4920 golang-github-hashicorp-go-getter_1.8.9-1.debian.tar.xz cb742fd4dc17661b51b4364914b34d7d95a655d8 89076 golang-github-hashicorp-go-getter-dev_1.8.9-1_all.deb dd9cc6cc1cecf205160a813414585efac0d87980 17697 golang-github-hashicorp-go-getter_1.8.9-1_amd64.buildinfo Checksums-Sha256: 17edfbb70b778a39301614ae367a8004537200fd56f14f9b7d3cbd4ad726ae7f 2799 golang-github-hashicorp-go-getter_1.8.9-1.dsc b53f5f28ed9e255bb90c8edd03556fdaf6f8deb96fa28ad463576afd6b49ad3e 118228 golang-github-hashicorp-go-getter_1.8.9.orig.tar.gz 811d9afb0428f6d33e7170e867dae39c47ae862cb10752bb60bff0ae0d122fc6 4920 golang-github-hashicorp-go-getter_1.8.9-1.debian.tar.xz 14cbfe17ade2634d5e800da960b61558f6563a8e811a63c4fa505a226641130d 89076 golang-github-hashicorp-go-getter-dev_1.8.9-1_all.deb 4802d2005a1f528500099c898978cc5630e99d31000438e0012ee42007aeaf94 17697 golang-github-hashicorp-go-getter_1.8.9-1_amd64.buildinfo Files: 5389a4307041582786cec73a2fa78f2d 2799 golang optional golang-github-hashicorp-go-getter_1.8.9-1.dsc c0f48373bb78cde70a25df8acfcfa23e 118228 golang optional golang-github-hashicorp-go-getter_1.8.9.orig.tar.gz 196c4ed4440d6d129819ec70551bb6ce 4920 golang optional golang-github-hashicorp-go-getter_1.8.9-1.debian.tar.xz 4c350acca129bd0378415a9363615818 89076 golang optional golang-github-hashicorp-go-getter-dev_1.8.9-1_all.deb f20f58db21ed5e77d01e319ab9dd9f58 17697 golang optional golang-github-hashicorp-go-getter_1.8.9-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmrj1lkACgkQ4n8s+EWM L6RP/Q//VGVfWpOzkha8MnITB0K6RLm4HlnuQrTtBGjPM5x+g3Gfo6Cs8BGtFy7Z VF2rl+IIMysTa7AoMKPxRnXn9VHhXVjPtHs+8CxFJG//ummpZxwYvrLoutzLlKSY AOjtsp+9XCQZbrHZ4kqKLU97LHnoOykZcBXNsFpqyjlvc5aJkop/s3cx2ThgoHgD fddEpkBTG/A0KKaE36NtYArA0mqdA0J1LMGdcZJeTUvD+JF+2eUFuj8kA867uujV 6Q6ZQM5xvdrlleyu3TUHn8MNkN/MtWRafMuLjGbeb9gJmUsjr9CMV/5UwWPg6h/n ysXF68E0rni2n9DkzQH/szKcKxlK4VMP6erVyCfOOVyWe3y7XSbZ3kuvzv8IO2b6 3J7m3vHoEsj88LyTar2BJ8XC7Vj2Q0jcUJqUCsqvVnxcLTEAHpKFwHBd362+Dyo5 l/4nXVciA2hkX2guwD89Zpbesk23ReRJ8JrXztgGU4T0LPj1OEBgaRih6YQ+KeF/ NwWv/AKNjug6mBbk699zC4154WaEV8s0rf5hW58FzgXyvSTZQh7hjQag9yPY0aUG sqXCiDadqoJLNCql251gVDMnWind4TlTm4saVkZj5qqau+KpWZ6PyHoUZSRgxB3q Yco5F+HZQmyHrbSBtyg1oVnUA+7xqcZ1HOB42JQLAizWVug2Q5Q= =9s+C -----END PGP SIGNATURE-----
