Your message dated Wed, 13 Jun 2018 22:19:52 +0100
with message-id <[email protected]>
and subject line Re: Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1
has caused the Debian Bug report #799019,
regarding jessie-pu: package golang/2:1.3.3-1+deb8u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
799019: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799019
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
User: [email protected]
Usertags: pu
Tags: jessie
Severity: normal
Hi!
"src:golang" has recently had a group of non-critical CVEs (#795106);
I've finally got a fix in unstable now, but the security team
requested[1] that I also propose an upload to s-p-u also to update
jessie.
I've attached the proposed debdiff -- the only functional change is
the addition of the .patch file containing the three backported
upstream commits to fix the CVEs.
[1]: https://bugs.debian.org/795106#45
Thanks for your consideration!
♥,
- Tianon
4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4
golang_2:1.3.3-1.debdiff
Description: Binary data
--- End Message ---
--- Begin Message ---
On Thu, 2015-11-05 at 06:41 -0800, Tianon Gravi wrote:
> On 5 November 2015 at 06:23, Adam D. Barratt <[email protected]
> k> wrote:
> > Do you have an estimate of how many packages that would be? I
> > looked at
> > the output of "dak rm -Rn -s stable golang" and made various sad
> > faces.
>
> That sad face is 100% warranted. :( I don't know the number off-
> hand, but I imagine it's pretty large by now.
>
Unfortunately we all shied away from progressing this any further, and
we're now about to close updates to jessie via point releases as it
moves to LTS.
I'm therefore closing this bug now. Sorry for not dealing with it one
way or another earlier.
Regards,
Adam
--- End Message ---
