[pkg-go] Bug#859655: golang-go.crypto: CVE-2017-3204
Control: user -1 debian-rele...@lists.debian.org Control: usertags -1 bsp-2017-04-ca-montreal Control: tags -1 +patch I looked into this during the Montreal BSP, and it's unclear what we should do here, considering there has been multiple new uploads since the stretch freeze. The patch is pretty long: https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991 ... and there's no way to just backport it into stretch at this point (IIRC). So I'm wondering if the next step here would not just be to ask for an exception to unblock this for stretch, or just tell the release team to just ignore this and drop the package from stretch. Let me know, A. -- Celui qui ne connaît pas l'histoire est condamné à la revivre. - Karl Marx ___ Pkg-go-maintainers mailing list Pkg-go-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers
[pkg-go] Processed (with 2 errors): Re: Bug#859655: golang-go.crypto: CVE-2017-3204
Processing control commands: > user -1 debian-rele...@lists.debian.org Unknown command or malformed arguments to command. > usertags -1 bsp-2017-04-ca-montreal Unknown command or malformed arguments to command. > tags -1 +patch Bug #859655 [src:golang-go.crypto] golang-go.crypto: CVE-2017-3204 Ignoring request to alter tags of bug #859655 to the same tags previously set -- 859655: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859655 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ___ Pkg-go-maintainers mailing list Pkg-go-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers
[pkg-go] Processing of golang-collectd_0.0~git20150630-2_all.changes
/golang-collectd_0.0~git20150630-2_all.changes couldn't be processed for 48 hours and is now deleted All files it mentions are also removed: golang-collectd-dev_0.0~git20150630-2_all.deb, golang-collectd_0.0~git20150630-2_all.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) ___ Pkg-go-maintainers mailing list Pkg-go-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers
[pkg-go] Processing of golang-github-bmizerany-pat_0.0~git20140625-2_all.changes
/golang-github-bmizerany-pat_0.0~git20140625-2_all.changes couldn't be processed for 48 hours and is now deleted All files it mentions are also removed: golang-github-bmizerany-pat-dev_0.0~git20140625-2_all.deb, golang-github-bmizerany-pat_0.0~git20140625-2_all.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) ___ Pkg-go-maintainers mailing list Pkg-go-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers
