Control: severity -1 serious Control: tags -1 +patch This issue was fixed in Ubuntu with https://launchpad.net/ubuntu/+source/golang-github-jacobsa-crypto/0.0~git20190317.9f44e2d+dfsg1-4.1ubuntu1 Thank you, Jeremy Bícha