Your message dated Sun, 16 Apr 2017 17:51:41 +0000
with message-id <[email protected]>
and subject line unblock golang-github-spf13-jwalterweatherman
has caused the Debian Bug report #860422,
regarding unblock:
golang-github-spf13-jwalterweatherman/0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
860422: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860422
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: [email protected]
Usertags: unblock
Please unblock package golang-github-spf13-jwalterweatherman.
The package has had an upload of a new upstream version in March, which
of course did not migrate to testing. However, it introduced a new
syntax which resulted in an FTBFS bug in hugo, the static website
generator (#858008).
Some days ago, a CVE has been reported in golang-go.crypto (#859655)
which will hopefully be fixed shortly. However, all packages using that
library during their build need to be rebuilt -- which would now trigger
the FTBFS for hugo.
Therefore, I've uploaded a new version of
golang-github-spf13-jwalterweatherman, which completely reverts all
upstream changes in the latest upload to unstable. The debdiff between
the current version in unstable and the version in testing now only
includes changes to the debian/ directory.
unblock
golang-github-spf13-jwalterweatherman/0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1
Regards,
Tobias
diff -Nru golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/changelog golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/changelog
--- golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/changelog 2016-04-28 21:53:05.000000000 +0200
+++ golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/changelog 2017-04-16 15:28:38.000000000 +0200
@@ -1,3 +1,26 @@
+golang-github-spf13-jwalterweatherman (0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1) unstable; urgency=medium
+
+ * Team upload.
+ * New upstream version 0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7
+ This is exactly the same tarball as 0.0~git20160311.0.33c24e7. The reversal
+ is necessary because of #858008. The package hugo FTBFS because of the
+ previous upload of this package. However, hugo needs to be rebuilt, because
+ it uses a vulnerable version of golang-go.crypto (CVE-2017-3204,
+ see #859655). As we're currently in the freeze for stretch, the only
+ sensible way is to revert the last upload.
+
+ -- Dr. Tobias Quathamer <[email protected]> Sun, 16 Apr 2017 15:28:38 +0200
+
+golang-github-spf13-jwalterweatherman (0.0~git20170109.0.fa7ca7e-1) unstable; urgency=medium
+
+ [ Tim Potter ]
+ * Add me to uploaders
+
+ [ Anthony Fok ]
+ * New upstream version 0.0~git20170109.0.fa7ca7e
+
+ -- Anthony Fok <[email protected]> Sun, 05 Mar 2017 22:30:27 -0700
+
golang-github-spf13-jwalterweatherman (0.0~git20160311.0.33c24e7-1) unstable; urgency=medium
* New upstream version:
diff -Nru golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/control golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/control
--- golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/control 2016-04-28 21:00:50.000000000 +0200
+++ golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/control 2017-04-16 15:27:08.000000000 +0200
@@ -2,7 +2,7 @@
Section: devel
Priority: extra
Maintainer: Debian Go Packaging Team <[email protected]>
-Uploaders: Anthony Fok <[email protected]>
+Uploaders: Anthony Fok <[email protected]>, Tim Potter <[email protected]>
Build-Depends: debhelper (>= 9),
dh-golang,
golang-go,
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Unblocked golang-github-spf13-jwalterweatherman.
--- End Message ---
