Package: golang-github-scylladb-go-set Version: 1.0.2-1 Severity: important Tags: patch upstream
Intersection() in each of the 18 set packages starts its minimum at math.MaxInt64 and compares against it. That constant does not fit in an int where int is 32 bits, so the library does not compile on i386, armel or armhf, and nothing that imports it builds there either. Measured with ratt against both direct reverse dependencies, in clean i386 chroots with 1.0.2-1 installed. Both stop at Fail-Stage: build on strset.go:248, "math.MaxInt64 (untyped int constant 9223372036854775807) overflows int": golang-github-anchore-bubbly 0.2.2-1 golang-github-anchore-go-logger 0.1.0-2 Both of those are Architecture: all, so they are built on amd64 and the breakage is latent in the archive today. It becomes real for any package that builds a binary on a 32-bit architecture, which is how we ran into it. Upstream fixed it in https://github.com/scylladb/go-set/commit/cc7b2070d91ebf40d233207b633e28f5bd8f03a5 and has not tagged a release since, so the fix has to come in as a patch. That patch is https://salsa.debian.org/go-team/packages/golang-github-scylladb-go-set/-/merge_requests/1 With it both reverse dependencies build on i386, and both still build on amd64.
