-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 04 Feb 2026 23:38:35 +0100 Source: golang-github-sigstore-sigstore Architecture: source Version: 1.10.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <[email protected]> Changed-By: Simon Josefsson <[email protected]> Closes: 1126553 Changes: golang-github-sigstore-sigstore (1.10.4-1) unstable; urgency=medium . * New upstream - Fix CVE-2026-24137 (Closes: #1126553) * Drop Priority: optional * Standards-Version: 4.7.3 * Bump debian/* copyright years Checksums-Sha1: c7f3cff656eaf5e30ea343a34c569a6da1db83a6 3419 golang-github-sigstore-sigstore_1.10.4-1.dsc 026807c3fd7dfc6496d3e3819c25548a07bd826a 192912 golang-github-sigstore-sigstore_1.10.4.orig.tar.xz 422c9a4b221e46f9d23dab35cede316087700444 5836 golang-github-sigstore-sigstore_1.10.4-1.debian.tar.xz 92888909811e29f1756cbac6c76e720106701769 474852 golang-github-sigstore-sigstore_1.10.4-1.git.tar.xz da4e356a8824e707f1958d222534702f49269971 17394 golang-github-sigstore-sigstore_1.10.4-1_source.buildinfo Checksums-Sha256: 87eb81b5780c2218b7fcc9536d1c9f3825169da821e5ce6ba85f99cfdb7c199b 3419 golang-github-sigstore-sigstore_1.10.4-1.dsc 2661e2498fa8d42e4276f2b29f43f69683414ee8418f9cdd01cc446f0ac449fb 192912 golang-github-sigstore-sigstore_1.10.4.orig.tar.xz f4c8524b178aff269f464c30c15722a6b4770e3f0e424469d48579c239210b0b 5836 golang-github-sigstore-sigstore_1.10.4-1.debian.tar.xz bec4ac4b48a325a410498d871d7c8842fdfd4b7fad19012007447bbd3daf83df 474852 golang-github-sigstore-sigstore_1.10.4-1.git.tar.xz 04c4901d7a557b6722a4e9891838f2893d1c82c75830d8563710d69581b3f8de 17394 golang-github-sigstore-sigstore_1.10.4-1_source.buildinfo Files: 9b0743919e592e38d718a8af56b59a65 3419 golang optional golang-github-sigstore-sigstore_1.10.4-1.dsc 086b997371f0cc7408f1ccff41631b1a 192912 golang optional golang-github-sigstore-sigstore_1.10.4.orig.tar.xz 44a2630f5f24e6db41c6631cbebbfd34 5836 golang optional golang-github-sigstore-sigstore_1.10.4-1.debian.tar.xz 9c04bd85580293e343d11834d4f974c6 474852 golang None golang-github-sigstore-sigstore_1.10.4-1.git.tar.xz d32e88d5d583842f68ab55a4ef9c1caa 17394 golang optional golang-github-sigstore-sigstore_1.10.4-1_source.buildinfo Git-Tag-Info: tag=7a95a366121b5f423f77b3446ebfd639b6faa1b2 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2 Git-Tag-Tagger: Simon Josefsson <[email protected]>
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmmEN3oACgkQYG0ITkaD wHl0/BAAx51VPurkyZSG0tTf9GGS8m9BIl8dZrbIPPQxjVU4g6kN4EDXZCKAhatH QmskcEzaqzD8dtRf4sj/auADjr1SZhTiU0PAHojC7CXxATxzk2yLkNqzY//MfKq9 N8xEnJAJPS9aIgXibD00YixEgCye9pq1U9HOqdPTyVjs9rLHyZIbn+UOEBwxocV3 8QcXagCvuoAirntuHLYz+NE9ffI8RMvoMWdD8r+O9Cy3HKt4xuuJh1bDHCK8D8A8 gw1q79qTAEaXa1eAX83s2nGCMqy685h1JFmnq3Q0XJVol0USwQKPdHJYIdD8pvC4 kFf4tnneIvuefRdwmeH6tn2pHWX914lXMs/kE2Jlo5dC8XYZqMLEu6LvyD/P+QyW FO/SltIfX4dW2nHpIvAyPNhZ0H3QpW8aqbdg2ve30V2iuzoQfdA8ANDxP7XNogaG QmGGKv5nM7v0QL3S7gjmjidywFAocgFFtqqMfj1CcCHY+JTElEC/v1TVQtGXfO35 EdfxIMY3KTqfvZ7fgyCMU1KIhTDBQHifYA3YXEqEUd9cmDOkIhzllBIXazQBwQKl Gy+uLKul/u3DDl5EfTM+K8srewpry317N4dwIbz4pWbt9Nhy+z+CeKmo5PCjJeoq gz0JsE4sB+xgGbahqhBB3GW0sRH5pc3JRXAeubxaYlJcqfDJydU= =Cy1Z -----END PGP SIGNATURE-----
pgppTgfQgvzYk.pgp
Description: PGP signature

