amorfo77/restic
1
0 Fork 0
mirror of https://github.com/restic/restic.git synced 2026-10-07 03:07:11 +00:00
Code Issues Projects Releases Wiki Activity

selfupdate: replace deprecated golang.org/x/crypto/openpgp with ProtonMail/go-crypto (#21997)

Browse Source
This commit is contained in:
Sergey Kolomiichuk authored and GitHub committed 2026-09-20 18:33:24 +00:00
1 parent 444c1cb221
commit ab17711e31
5 files changed
+16 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

changelog/unreleased/issue-21973
+8
View File
@@ -0,0 +1,8 @@
Enhancement: Replace deprecated GPG verification library used for self-update
Restic used the unmaintained and insecure golang.org/x/crypto/openpgp
package to verify GPG signatures during self-update. It now uses the
actively maintained ProtonMail/go-crypto fork instead, which addresses
known security weaknesses in the original package.
https://github.com/restic/restic/issues/21973