Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-11-05 Thread Tianon Gravi
On 5 November 2015 at 08:08, Salvatore Bonaccorso wrote: > Thanks for the notice. I have update the security-tracker side for > this. Btw, please do not use these TEMP identifiers, they are not > meant to be stable at any rate. E.g. if we fill a but in the BTS they > will already change. Doh, sor

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-11-05 Thread Salvatore Bonaccorso
Hi Tianon, On Thu, Nov 05, 2015 at 06:41:54AM -0800, Tianon Gravi wrote: > I think this is a case of the security tracker not being updated: > > | golang (2:1.4.3-1) unstable; urgency=medium > | > | * New upstream version > (https://golang.org/doc/devel/release.html#go1.4.minor) > |- include

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-11-05 Thread Tianon Gravi
On 5 November 2015 at 06:23, Adam D. Barratt wrote: > Do you have an estimate of how many packages that would be? I looked at > the output of "dak rm -Rn -s stable golang" and made various sad faces. That sad face is 100% warranted. :( I don't know the number off-hand, but I imagine it's pretty

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-11-05 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Tue, 2015-09-15 at 13:36 -0700, Tianon Gravi wrote: > On 15 September 2015 at 12:15, Julien Cristau wrote: > > Does this involve rebuilding reverse dependencies? > > Unfortunately, yes. We could skip arch:all since those are going to > be -dev packages that contai

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-09-15 Thread Tianon Gravi
On 15 September 2015 at 12:15, Julien Cristau wrote: > Does this involve rebuilding reverse dependencies? Unfortunately, yes. We could skip arch:all since those are going to be -dev packages that contain source, but any actual binaries would need to be rebuilt. To Salvatore's comment, I'd be ha

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-09-15 Thread Julien Cristau
On Mon, Sep 14, 2015 at 17:18:30 -0700, Tianon Gravi wrote: > Package: release.debian.org > User: release.debian@packages.debian.org > Usertags: pu > Tags: jessie > Severity: normal > > Hi! > > "src:golang" has recently had a group of non-critical CVEs (#795106); > I've finally got a fix in

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-09-14 Thread Salvatore Bonaccorso
Hi Tianon, On Mon, Sep 14, 2015 at 05:18:30PM -0700, Tianon Gravi wrote: > Package: release.debian.org > User: release.debian@packages.debian.org > Usertags: pu > Tags: jessie > Severity: normal > > Hi! > > "src:golang" has recently had a group of non-critical CVEs (#795106); > I've finally

Bug#799019: jessie-pu: package golang/2:1.3.3-1+deb8u1

2015-09-14 Thread Tianon Gravi
Package: release.debian.org User: release.debian@packages.debian.org Usertags: pu Tags: jessie Severity: normal Hi! "src:golang" has recently had a group of non-critical CVEs (#795106); I've finally got a fix in unstable now, but the security team requested[1] that I also propose an upload to