-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 00:01:40 +0200 Source: golang-1.26 Architecture: source Version: 1.26.10-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Compiler Team <[email protected]> Changed-By: Dr. Tobias Quathamer <[email protected]> Changes: golang-1.26 (1.26.10-1) unstable; urgency=medium . * New upstream version 1.26.10 - CVE-2026-111943: crypto/x509: distrust a handful of intermediates On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. Checksums-Sha1: f9fce0bf9283cd30533e9586dfd410658fb446d9 2965 golang-1.26_1.26.10-1.dsc 225ebd60c003ff235b46a4acd9dd519d05723eda 23223912 golang-1.26_1.26.10.orig.tar.xz 51328d8cb23783964ac164b1e058b27df92a85a2 48928 golang-1.26_1.26.10-1.debian.tar.xz d8cd21cb9828ddd9864c131c36a40744cc957ad8 44062796 golang-1.26_1.26.10-1.git.tar.xz 9d9884faf2d4916b3b2e7474ab30dc0ad204c4fc 17756 golang-1.26_1.26.10-1_source.buildinfo Checksums-Sha256: a3047846232e8815260866425626a456d46b11e2cac45d0c1078470f62c3970a 2965 golang-1.26_1.26.10-1.dsc 5de9c378f18840788408458d1031baa3eacbd61543dfc2a22da340a2789ae726 23223912 golang-1.26_1.26.10.orig.tar.xz 9a0d9ad1e8ff05ce9e567027a3917bea28a9f3e420881779f64b08f34cc3398c 48928 golang-1.26_1.26.10-1.debian.tar.xz 2a223f1d52f30b1f14b669de69c3a9c962b0f8b70a426404471a1cd22899f339 44062796 golang-1.26_1.26.10-1.git.tar.xz ab26bf1a81d4f9bef7f3a0c6981675b079fe76ea3101c628b5923c78006620a6 17756 golang-1.26_1.26.10-1_source.buildinfo Files: 403d281ba6298c5b48247787936fc5ca 2965 golang optional golang-1.26_1.26.10-1.dsc df74512a52380fdb5f7d58e695dfeeea 23223912 golang optional golang-1.26_1.26.10.orig.tar.xz 4ed5b0972b8b39f8e9dd7b3c6051902c 48928 golang optional golang-1.26_1.26.10-1.debian.tar.xz c97649b109feee45852551441ae9fba3 44062796 None None golang-1.26_1.26.10-1.git.tar.xz 3bbb28a95b4c3ed030380c20cf995502 17756 golang optional golang-1.26_1.26.10-1_source.buildinfo Git-Tag-Info: tag=d69ba0244df871706b1a88b1cc8f68a22a9542f0 fp=d1cb8f39bc5ded24c5d2c78c1302f1f036ebeb19 Git-Tag-Tagger: Dr. Tobias Quathamer <[email protected]>
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrb2yAACgkQYG0ITkaD wHmMjA/8CIwz/iEEK8WYhdDVJtOf4pZ2xhHj+5rqqn46B0QywtLIhIgH/qXhIZoK HJYaBK8vSujGJGnC82wWgakSvOYdFLL110CfIYfwcCbRg3StHO2SZoJ4eufpPOJz cYoS4F9bsuuAsMmNxPDENo1r5fUZVrGTjJDM+q1v2Ew/u1Srtv5cICO69O/GQgQh ZSAI4N4FI7dCS1E39Fhzp026edoiVjSPysgcMCjqzRiJ4AuAsV1189rHxpQJMG1m tGOT2IsMJeT7jQtw6Idii3k0CuYBYeuoIKu9QfeFLCvOptaKkEXD22iYNHZiES5O aUPba481RWXiza9hxVMKDJvXkPYGOgCQ7HEWQ4kSMyyRkEsoZN6FhuMdmuYILc86 7cESviE6cZg0By8Nxwny4u/1le7SXqyBw9/0Cc33uBbC7qy8SOoGL6D8+DSAK27M pqve/FXGWVURka2tjzFwlrgbJyc7O1g2yD+GUNriE9xZLqsfrmZukyZzbBMoW172 0RWTlYzg/OsDeicg16TehkgjrGB1O5SnDg5If0UUuZnbYnNmZkk3QM/tJhphNvh/ jscuGrdspIwrFbi9o9laBgLTH7PZYY+0xP2/tz6CoC8g4lmdDrG2S2AOdMH7PV2v Lk98+B4GPN6rX3Tqoy35iQ5JlXCdzNf/b1fN0Nl670wSkLbZzYI= =CJOh -----END PGP SIGNATURE-----
pgpe2_akJwJC4.pgp
Description: PGP signature
