Dear docker.io maintainer, I'm not sure why the Built-Using field in docker.io doesn't contain golang-github-vbatts-tar-split. Maybe dh-golang can't deal with the docker.io repo. Not sure it's whose bug...
Since the version in unstable/testing is not uploaded with source-only, so the buildd doesn't have buildinfo for amd64. But I guess it was built with golang-github-vbatts-tar-split 0.10.2-1(which was uploaded at 2017-11-30). Thus the docker.io version in testing/unstable is not affected by this security issue. -- Regards, Shengjing Zhu
