Bug#928227: Bug#928026: security support for golang packages in Buster

2019-05-18 Thread Shengjing Zhu
On Sat, May 18, 2019 at 5:30 PM Paul Gevers wrote: > > Hi Shengjing, > > On 08-05-2019 18:33, Shengjing Zhu wrote: > > On Wed, May 8, 2019 at 2:45 PM Paul Gevers wrote: > > There's no tool yet, but some SQL scripts like > > http://paste.debian.net/1082099/ > > > > As show in the result, for > > g

Bug#928227: Bug#928026: security support for golang packages in Buster

2019-05-18 Thread Shengjing Zhu
On Sat, May 18, 2019 at 5:41 PM Shengjing Zhu wrote: > > On Sat, May 18, 2019 at 5:30 PM Paul Gevers wrote: > > > > Hi Shengjing, > > > > On 08-05-2019 18:33, Shengjing Zhu wrote: > > > On Wed, May 8, 2019 at 2:45 PM Paul Gevers wrote: > > > There's no tool yet, but some SQL scripts like > > > h

Bug#928227: Bug#928026: security support for golang packages in Buster

2019-05-18 Thread Paul Gevers
Hi Shengjing, On 08-05-2019 18:33, Shengjing Zhu wrote: > On Wed, May 8, 2019 at 2:45 PM Paul Gevers wrote: > There's no tool yet, but some SQL scripts like > http://paste.debian.net/1082099/ > > As show in the result, for > golang-golang-x-net-dev/1:0.0+git20181201.351d144+dfsg-3, probably 66 >

Bug#928026: security support for golang packages in Buster

2019-05-10 Thread Salvatore Bonaccorso
Hi, On Fri, May 10, 2019 at 10:44:13AM +0800, Shengjing Zhu wrote: > Hi the security team, > > On Thu, May 9, 2019 at 1:53 AM Moritz Muehlenhoff wrote: > [...] > > > > There's the additional issue that ftp-master and security-master don't > > share tarballs; binNMUs are only possible for package

Bug#928026: security support for golang packages in Buster

2019-05-09 Thread Shengjing Zhu
Hi the security team, On Thu, May 9, 2019 at 1:53 AM Moritz Muehlenhoff wrote: [...] > > There's the additional issue that ftp-master and security-master don't > share tarballs; binNMUs are only possible for packages which are on > security-master, so we'd need to do manual source uploads for eve

Bug#928026: security support for golang packages in Buster

2019-05-08 Thread Paul Wise
On Wed, May 8, 2019 at 2:45 PM Paul Gevers wrote: > With respect to binNMU'ing, static linking is not a problem, only > arch:all is. Most haskell (4 vs 1048) and ocaml (21 vs 233) aren't > arch:all. haskell and ocaml have a framework in place to at least know > the status in unstable/testing. See

Bug#928026: security support for golang packages in Buster

2019-05-08 Thread Moritz Muehlenhoff
On Wed, May 08, 2019 at 08:45:30AM +0200, Paul Gevers wrote: > > 2. binNMU without full source upload for security-master. > > > >It's still not possible, and I don't know there's any effort to > >change the dak. > > > >But I want to know how security team handles other static linked

Bug#928026: security support for golang packages in Buster

2019-05-08 Thread Shengjing Zhu
On Wed, May 8, 2019 at 2:45 PM Paul Gevers wrote: > > Hi, > > On 27-04-2019 09:31, Shengjing Zhu wrote: > > Please CC debian...@lists.debian.org and me. > > Done. > > [...] > > > IIUC, there're two concerns for Go packages. > > [...] > > > 2. binNMU without full source upload for security-master.

Bug#928026: security support for golang packages in Buster

2019-05-07 Thread Paul Gevers
Hi, On 27-04-2019 09:31, Shengjing Zhu wrote: > Please CC debian...@lists.debian.org and me. Done. [...] > IIUC, there're two concerns for Go packages. [...] > 2. binNMU without full source upload for security-master. > >It's still not possible, and I don't know there's any effort to >

Bug#928026: security support for golang packages in Buster

2019-04-27 Thread Shengjing Zhu
Please CC debian...@lists.debian.org and me. Hi the security team and release team, On Sat, Apr 20, 2019 at 11:07:34PM +0200, Moritz Mühlenhoff wrote: > There has been no visible movement on the issues with Go as mentioned in > https://lists.debian.org/debian-release/2018/07/msg2.html (and >