-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 31 Oct 2025 14:05:20 +0100
Source: golang-github-notaryproject-notation-core-go
Architecture: source
Version: 1.3.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Changes:
golang-github-notaryproject-notation-core-go (1.3.0-1) unstable; urgency=medium
.
* Team upload.
* Use watch v5.
* New upstream version 1.3.0
* Drop upstreamed tsa-cert-chain fix.
* Drop unneeded auto-gitignore patch.
* Bump debian/* copyright years.
* Drop Rules-Requires-Root: no.
* Standards-Version: 4.7.2.
* Refresh patch.
.
golang-github-notaryproject-notation-core-go (1.1.0-7) experimental; urgency=medium
.
* fix: add tsa cert chain revocation check after timestamping (#246)
Needed for CVE-2024-56138
Checksums-Sha1:
7687361bcd7ed774db930db72f7971e7c8f13d71 2938 golang-github-notaryproject-notation-core-go_1.3.0-1.dsc
b07f798e5fc4e88098b539340ea1614e18f554e5 98832 golang-github-notaryproject-notation-core-go_1.3.0.orig.tar.xz
7f0061bc6f870177df578083d498ba6b4ca21ea5 3428 golang-github-notaryproject-notation-core-go_1.3.0-1.debian.tar.xz
5a2c08b11cd3dff99c8cf23395c9fd3483062a38 307376 golang-github-notaryproject-notation-core-go_1.3.0-1.git.tar.xz
9823b4a9b9e3ea26c184d7424470808294302278 18366 golang-github-notaryproject-notation-core-go_1.3.0-1_source.buildinfo
Checksums-Sha256:
dcb1cbc672c7efd23a7fd58bd060de8d3dcfeeeb07c74ae07e15f48623412009 2938 golang-github-notaryproject-notation-core-go_1.3.0-1.dsc
bc83f126bc3542f58279201710d38e89acf6fa5cfdb9231ee0693b014a9b9d19 98832 golang-github-notaryproject-notation-core-go_1.3.0.orig.tar.xz
a55964ce08249cbb86340823fdf6c0d787a5551386cf9cdd038cefd6ca2b05cf 3428 golang-github-notaryproject-notation-core-go_1.3.0-1.debian.tar.xz
e9d4d04105a4d71865250b99794a2f167ae346b7cc46faa462ce227888339fd1 307376 golang-github-notaryproject-notation-core-go_1.3.0-1.git.tar.xz
d6f13cebf7b4e075ad9b4bb37682ec920cf37c3933024e0362c7ce3b4bc944dd 18366 golang-github-notaryproject-notation-core-go_1.3.0-1_source.buildinfo
Files:
b9d5f2129218bd2523ced2482555847b 2938 golang optional golang-github-notaryproject-notation-core-go_1.3.0-1.dsc
52feb5af3bacaaa0e10aa9e6827d8b56 98832 golang optional golang-github-notaryproject-notation-core-go_1.3.0.orig.tar.xz
e3131108bc1d177fdf19afa126a36052 3428 golang optional golang-github-notaryproject-notation-core-go_1.3.0-1.debian.tar.xz
06dcbd1ec68eb9bd6f4773326706b624 307376 golang optional golang-github-notaryproject-notation-core-go_1.3.0-1.git.tar.xz
5e0758ac46e193e813f169341b658429 18366 golang optional golang-github-notaryproject-notation-core-go_1.3.0-1_source.buildinfo
Git-Tag-Info: tag=db52295d52e960d076d4cf0804bc3e8d61a55296 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>
-----BEGIN PGP SIGNATURE-----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=7VhS
-----END PGP SIGNATURE-----
Attachment:
pgpHEav9XGcv1.pgp
Description: PGP signature