Re: Revert some Go packages in unstable to align with testing/buster

2019-07-04 Thread Moritz Muehlenhoff
On Thu, Jul 04, 2019 at 12:30:24PM +0200, Paul Gevers wrote: > Hi security-team, > > On 08-06-2019 23:45, Thorsten Alteholz wrote: > > Hi everybody, > > > > On Wed, 5 Jun 2019, Paul Gevers wrote: > >> One other problem is that tools are lacking to schedule binNMUs on the > >> right packages in an

Re: Revert some Go packages in unstable to align with testing/buster

2019-07-04 Thread Paul Gevers
Hi security-team, On 08-06-2019 23:45, Thorsten Alteholz wrote: > Hi everybody, > > On Wed, 5 Jun 2019, Paul Gevers wrote: >> One other problem is that tools are lacking to schedule binNMUs on the >> right packages in an efficient manner and in the right order. > > I just added [1]. It contains

Re: Revert some Go packages in unstable to align with testing/buster

2019-06-08 Thread Thorsten Alteholz
Hi everybody, On Wed, 5 Jun 2019, Paul Gevers wrote: One other problem is that tools are lacking to schedule binNMUs on the right packages in an efficient manner and in the right order. I just added [1]. It contains one simple shell script to calculate the build order of golang packages, for

Re: Revert some Go packages in unstable to align with testing/buster

2019-06-05 Thread Paul Gevers
Hi Martín, On 05-06-2019 14:34, Martín Ferrari wrote: > Now, still to this day it is also not clear to me what we can do to > address this problem, could you elaorate? One problem is that the security archive doesn't have the sources available from stable to do binNMUs. One other problem is that

Re: Revert some Go packages in unstable to align with testing/buster

2019-06-05 Thread Martín Ferrari
Paul, On 01/06/2019 13:14, Paul Gevers wrote: > Just for your information, the golang security situation is the major > reason why we don't have a release date for buster yet. I hope the > Debian golang community is taking the situation very seriously. Wow. This was not clear to me at all! I hav

Re: Revert some Go packages in unstable to align with testing/buster

2019-06-01 Thread Thorsten Alteholz
Hi everybody, On Sat, 1 Jun 2019, Paul Gevers wrote: On that topic, I'd like to take this opportunity to say that soon after the release of buster we will most likely remove Go and it's reverse dependencies from testing and prevent them from entering again until the infrastructure issues are sol

Re: Revert some Go packages in unstable to align with testing/buster

2019-06-01 Thread Shengjing Zhu
On Sat, Jun 1, 2019 at 8:15 PM Paul Gevers wrote: > > Hi Shengjing, golang maintainers, > > On 27-05-2019 05:25, Shengjing Zhu wrote: > > On Mon, May 27, 2019 at 2:04 AM Shengjing Zhu wrote: > > [...] > >> The following are all the affected packages, generated by [2]: > >> > > > > This list is no

Re: Revert some Go packages in unstable to align with testing/buster

2019-06-01 Thread Paul Gevers
Hi Shengjing, golang maintainers, On 27-05-2019 05:25, Shengjing Zhu wrote: > On Mon, May 27, 2019 at 2:04 AM Shengjing Zhu wrote: > [...] >> The following are all the affected packages, generated by [2]: >> > > This list is now at > https://wiki.debian.org/Teams/DebianGoTeam/AlignUnstableWithBu