[Bug 1964270] Re: Feature Freeze Exception: Update golang-defaults to 1.18

[William Wilson]

Go 1.18 has released and test rebuilds have been completed.

Go 1.18 has made the decision to deny SHA1 certificates by default. Per
the release notes: "crypto/x509 will now reject certificates signed with
the SHA-1 hash function. This doesn't apply to self-signed root
certificates. Practical attacks against SHA-1 have been demonstrated
since 2017 and publicly trusted Certificate Authorities have not issued
SHA-1 certificates since 2015."

The packages below will be marked as having the "SHA1 issue" if this is
the only reason for an FTBFS.

The following packages are FTBFS with Go 1.18 but not Go 1.17:

containerd (patch created on bug 1965157)
docker-registry
golang-github-aws-aws-sdk-go (SHA1 issue: https://github.com/aws/aws-sdk-go/issues/4316)
golang-github-cockroachdb-apd (requires a newer version of golang-golang-x-tools)
golang-github-fullsailor-pkcs7 (SHA1 issue: https://github.com/fullsailor/pkcs7/issues/51)
golang-github-google-wire
golang-github-klauspost-compress (requires a newer version of golang-golang-x-tools)
golang-github-kurin-blazer (upstream PR created: https://github.com/kurin/blazer/pull/83)
golang-github-micromdm-scep (SHA1 issue: https://github.com/micromdm/scep/issues/187)
golang-github-prometheus-common (SHA1 issue: https://github.com/prometheus/common/issues/361)
golang-github-prometheus-exporter-toolkit (SHA1 issue: https://github.com/prometheus/exporter-toolkit/issues/83)
golang-github-rican7-retry
golang-github-rogpeppe-go-internal
golang-github-smartystreets-assertions
golang-github-streadway-amqp
golang-github-traefik-yaegi
golang-github-ugorji-go-codec
golang-github-xanzy-go-gitlab
golang-github-xordataexchange-crypt
golang-go-zfs
golang-golang-x-tools
golang-gonum-v1-gonum
golang-honnef-go-tools
golang-pault-go-ykpiv
golang-v2ray-core
ipp-usb
prometheus
shadowsocks-v2ray-plugin
shfmt
sia
slt
telegraf
textql
thrift


** Bug watch added: github.com/aws/aws-sdk-go/issues #4316
   https://github.com/aws/aws-sdk-go/issues/4316

** Bug watch added: github.com/fullsailor/pkcs7/issues #51
   https://github.com/fullsailor/pkcs7/issues/51

** Bug watch added: github.com/micromdm/scep/issues #187
   https://github.com/micromdm/scep/issues/187

** Bug watch added: github.com/prometheus/common/issues #361
   https://github.com/prometheus/common/issues/361

** Bug watch added: github.com/prometheus/exporter-toolkit/issues #83
   https://github.com/prometheus/exporter-toolkit/issues/83

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-defaults in Ubuntu.
https://bugs.launchpad.net/bugs/1964270

Title:
  Feature Freeze Exception: Update golang-defaults to 1.18

Status in golang-defaults package in Ubuntu:
  New

Bug description:
  This change is necessary because we always update to the latest Go
  version before each release.

  Go's source does not provide a changelog, but the changes in 1.18 can
  be seen at https://golang.org/doc/go1.18

  Go 1.18 is not yet released, though it was originally due to be
  released in February. I have already set up no change rebuild PPAs to
  rebuild against Go 1.18, and initial attempts with the beta have gone
  very smoothly. I will update this bug with more information about
  those rebuilds when I have been able to complete them against a
  released version of Go 1.18.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-defaults/+bug/1964270/+subscriptions