mirror of
https://github.com/restic/restic.git
synced 2026-09-21 19:48:30 +00:00
9 lines
387 B
Plaintext
9 lines
387 B
Plaintext
Enhancement: Replace deprecated GPG verification library used for self-update
|
|
|
|
Restic used the unmaintained and insecure golang.org/x/crypto/openpgp
|
|
package to verify GPG signatures during self-update. It now uses the
|
|
actively maintained ProtonMail/go-crypto fork instead, which addresses
|
|
known security weaknesses in the original package.
|
|
|
|
https://github.com/restic/restic/issues/21973
|