[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: security updates of Golang packages



Hallo Thorsten,

Thorsten Alteholz <debian@alteholz.de> (2022-04-24):
> some time ago, before the release of Buster, the Release Team and the
> Security Team critizied the missing tooling for security updates of
> Golang packages[1].
> 
> I would like to improve the situation here and try to develop some
> scripts to automatically rebuild/upload affected packages (they are
> basically based on the reverse dependencies detected by ratt). So I
> hope you don't mind if I upload seemingly random packages. The
> corresponding changelog entry should explain what CVE triggered the
> upload.

As a random Go packager, that looks like a terrific idea, thanks for
working on that!


Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

Attachment: signature.asc
Description: PGP signature


Reply to: