[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#860422: marked as done (unblock: golang-github-spf13-jwalterweatherman/0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1)



Your message dated Sun, 16 Apr 2017 17:51:41 +0000
with message-id <E1czoKr-0001k1-Bs@respighi.debian.org>
and subject line unblock golang-github-spf13-jwalterweatherman
has caused the Debian Bug report #860422,
regarding unblock: golang-github-spf13-jwalterweatherman/0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
860422: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860422
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock

Please unblock package golang-github-spf13-jwalterweatherman.

The package has had an upload of a new upstream version in March, which of course did not migrate to testing. However, it introduced a new syntax which resulted in an FTBFS bug in hugo, the static website generator (#858008).

Some days ago, a CVE has been reported in golang-go.crypto (#859655) which will hopefully be fixed shortly. However, all packages using that library during their build need to be rebuilt -- which would now trigger the FTBFS for hugo.

Therefore, I've uploaded a new version of golang-github-spf13-jwalterweatherman, which completely reverts all upstream changes in the latest upload to unstable. The debdiff between the current version in unstable and the version in testing now only includes changes to the debian/ directory.

unblock golang-github-spf13-jwalterweatherman/0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1

Regards,
Tobias
diff -Nru golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/changelog golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/changelog
--- golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/changelog	2016-04-28 21:53:05.000000000 +0200
+++ golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/changelog	2017-04-16 15:28:38.000000000 +0200
@@ -1,3 +1,26 @@
+golang-github-spf13-jwalterweatherman (0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7-1) unstable; urgency=medium
+
+  * Team upload.
+  * New upstream version 0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7
+    This is exactly the same tarball as 0.0~git20160311.0.33c24e7. The reversal
+    is necessary because of #858008. The package hugo FTBFS because of the
+    previous upload of this package. However, hugo needs to be rebuilt, because
+    it uses a vulnerable version of golang-go.crypto (CVE-2017-3204,
+    see #859655). As we're currently in the freeze for stretch, the only
+    sensible way is to revert the last upload.
+
+ -- Dr. Tobias Quathamer <toddy@debian.org>  Sun, 16 Apr 2017 15:28:38 +0200
+
+golang-github-spf13-jwalterweatherman (0.0~git20170109.0.fa7ca7e-1) unstable; urgency=medium
+
+  [ Tim Potter ]
+  * Add me to uploaders
+
+  [ Anthony Fok ]
+  * New upstream version 0.0~git20170109.0.fa7ca7e
+
+ -- Anthony Fok <foka@debian.org>  Sun, 05 Mar 2017 22:30:27 -0700
+
 golang-github-spf13-jwalterweatherman (0.0~git20160311.0.33c24e7-1) unstable; urgency=medium
 
   * New upstream version:
diff -Nru golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/control golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/control
--- golang-github-spf13-jwalterweatherman-0.0~git20160311.0.33c24e7/debian/control	2016-04-28 21:00:50.000000000 +0200
+++ golang-github-spf13-jwalterweatherman-0.0~git20170109.0.fa7ca7e.really.git20160311.0.33c24e7/debian/control	2017-04-16 15:27:08.000000000 +0200
@@ -2,7 +2,7 @@
 Section: devel
 Priority: extra
 Maintainer: Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>
-Uploaders: Anthony Fok <foka@debian.org>
+Uploaders: Anthony Fok <foka@debian.org>, Tim Potter <tpot@hpe.com>
 Build-Depends: debhelper (>= 9),
                dh-golang,
                golang-go,

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Unblocked golang-github-spf13-jwalterweatherman.

--- End Message ---

Reply to: