-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 18 Feb 2026 22:07:39 +0100 Source: cosign Architecture: source Version: 2.6.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <[email protected]> Changed-By: Simon Josefsson <[email protected]> Closes: 1126764 Changes: cosign (2.6.2-1) unstable; urgency=medium . * Run wrap-and-sort -satbk * Add lrc.config . cosign (2.6.2-1~exp0) experimental; urgency=medium . * New upstream version - Fixes CVE-2026-22703 (Closes: #1126764) * Use watch v5 tracking git and pinning at v2 * Use gbp upstream-vcs-tag * Refresh patches * Add new build deps * Bump sigstore-go to >=1.1.4 * Drop Priority: optional * Drop Rules-Requires-Root: no * Standards-Version: 4.7.3 * Modernize Salsa CI * Drop lintian field-too-long for Static-Built-Using * Bump copyright years * Breaks gitsign<=0.13.0-3 Checksums-Sha1: c63e9ea3d1b3e2e9bad11141885d7840bd89de17 4076 cosign_2.6.2-1.dsc ffda79d1fb176858b8b89bd947595ef3e4f92bc1 5960 cosign_2.6.2-1.debian.tar.xz 17d08c75197b30e534bc4a499c30a47201de0c7f 1772076 cosign_2.6.2-1.git.tar.xz 0449d882d50947435c1fa3b0df487ffb4281c1cc 17290 cosign_2.6.2-1_source.buildinfo Checksums-Sha256: 6164ff55f73d0c0ed761504c452abe020b1c61eacf655464fe47afd429782769 4076 cosign_2.6.2-1.dsc f5514e2c17c63e6504408c5bbbd0414a24e60655a531863c5fb45d857798cadd 5960 cosign_2.6.2-1.debian.tar.xz 09d96a6e32735f942e03c12fd7c354ecbc12ac719525cd2be87d3594761af460 1772076 cosign_2.6.2-1.git.tar.xz 30f7db5e1c6a5ed1598e055331ebf0bc076b34948082f4b4d0cb12e3fe84c337 17290 cosign_2.6.2-1_source.buildinfo Files: f01bba957e5cec626094b7e8e0535ea1 4076 golang optional cosign_2.6.2-1.dsc f057a6ddb55dc47d412bd4523ad08983 5960 golang optional cosign_2.6.2-1.debian.tar.xz 755c62d8b6e7fa71ff70207609224a5a 1772076 golang None cosign_2.6.2-1.git.tar.xz 907c7525d72ef88f46abd3f92c2d4e98 17290 golang optional cosign_2.6.2-1_source.buildinfo Git-Tag-Info: tag=44066f537fcb01533c2e5b464767e2d9afa5b33f fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2 Git-Tag-Tagger: Simon Josefsson <[email protected]>
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmmWKnwACgkQYG0ITkaD wHlypRAA7uRETkyTpofyVtLmK5A5Gsm/t63WSGrkukrN9sqj3Oegkn8KlOD2q4JR 4Sgq6zGuBnX5tOdIO7XR0E8IWP9R87NAA4tg547Vtw4L9HpUd+imQkLam2l9uMif XcfT6cJ+NXoIewbypg5fqkvgvVvPW1a1AGE1d9crZ6DJ3/S4pSzRZFP67GJxQHtc Z7LI69mxtwQUYfCGmXQZEyB6QWb6Qg5tbWJJMfWVBVzeCmM+pFcW7gZfg3mNqhwR wSgELv+4XGa6yL8ptU53patSleH+j9TsmWqvuU5vFVKSMwTU2pNrdkDmtZN1ES3i 4x0MDfzeBn2IYA9TVGiY7R2djrCZwbPQKPmNregJOzlu+dPkd0hPcFcDCkO03D7M dLAZCWnoQpif/MQjnf95V5MEYwqV8ndi2MnTScVzPGetoP4ky8IZlVrCI4GzyOiI 2VwXL3epc3sPsgKVqdHOwZfdy1mbFnJJYSFXTo+qONuCKhMbTkVt777+Vi/Jt3sx wkyJ6eQh/yglWmhaV2Gw0aExmEUe6A5OYtF6IAOiOR2V3aEPTHFPoXpZgUeEG6oP owcAj1A8wc9dBpfOzHB6v74RqiMBXAhn4t3aSp5bGrEODyW3UveRjsrB7VFFKKmN 5t6LQL176pVhjCAjtnKmiY8vz++XSUnLdMxrOFbmPwKIp6pBMJM= =SxpN -----END PGP SIGNATURE-----
pgpQwBgzb8Vz0.pgp
Description: PGP signature
