On Tue, Apr 7, 2026 at 8:46 PM Andrew Lee <[email protected]> wrote: > > Hello team, > > I am fixing CVE-2026-33186 in golang-google-grpc by updating it to the > fixed upstream new version. > > However, the package builds but I noticed some old code under > `debian/missing-sources/`. > > To avoid any protencial issues, I would like to ensure these are up to > date as well. > But I foud no document for how to update files under > `debian/missing-sources/`, anyone who may give me any example or > hints? >
I haven't touched it for some time so it may be inaccurate. There is a `curl` script in debian/ dir. You can first build the package in an online environment, and the regenerate.sh script in execute_after_dh_auto_configure will invoke that `curl` script to download missing source files. -- Shengjing Zhu
