Looking at the dependency chain to support the MIR, we're currently pulling two versions of check into main (golang-gocheck and golang- check.v1). This is caused by the use of golang-goyaml which depends on the older golang-gocheck package.
golang-yaml.v2 aligns with the newer check version - I've asked the Juju team to see if we can patch that in for this release and switch the dependency in development for 1.25. ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-7189 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1267393 Title: [MIR] juju-core, juju-mongodb, gccgo, golang To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
