Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: binnmu
Bug #859655 [3] has been fixed in unstable. This addresses a CVE bug, but also
requires all reverse build dependencies be rebuilt. After this package has
migrated to testing, there will be 62-64 packages that need rebuilding as well.
I have run build tests in both unstable and testing for this update using an
amd64 sbuild environment. For reference, the results:
testing:
success: 62, failed: 2 (being addressed)
unstable
success: 107, failed: 7 (unchecked)
For the moment, I need the 107 packages in this list [1] to rebuilt in unstable.
... wanna build? :)
[1]
nmu mtail_0.0+git20161231.ae129e9-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint-ed25519_0.0~git20160723.0.1f52c6f-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-rsc-letsencrypt_0.0~git20160929.0.76104d2-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-docker-leadership_0.1.0-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu sia_1.0.4-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-samalba-dockerclient_0.0~git20160531.0.a303626-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-golang-x-net-dev_1:0.0+git20160110.4fd4a9f-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu gocryptfs_1.2-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-aelsabbahy-gonetstat_0.0~git20160428.0.edf89f7-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-blevesearch-bleve_0.5.0+git20170324.202.4702785f-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-endophage-gotuf_0.0~git20151020.0.2df1c8e-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu cadvisor_0.25.0+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu dnss_0.0~git20161126.0.162090e-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-gopkg-dancannon-gorethink.v2_2.0.4-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu mongo-tools_3.2.11-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-docker-go-connections_0.2.1+git20161115.12.4ccf312-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-fsouza-go-dockerclient_0.0+git20160622-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-macaron_1.2.1+git20170219.2.8be5635-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu rkt_1.21.0+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-coreos-go-systemd_14-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu chasquid_0.01+git20161124.6479138-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu minica_1.0-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-pkg-sftp_0.0~git20160930.0.4d0e916-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-spf13-afero_0.0~git20161226.0.90dd71e-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-azure-go-ntlmssp_0.0~git20160412.e0b63eb-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-opencontainers-image-spec_1.0.0~rc2+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-couchbase-moss_0.0~git20170330.0.d2258a2-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint-go-p2p_0.0~git20170113.0.3d98f67-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu kubernetes-addon-heapster_1.2.0+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-csrf_0.0~git20170207.0.428b7c6-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-coreos-ioprogress_0.0~git20151023.0.4637e49-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint-go-rpc_0.0~git20161021.0.e6e3853-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-dnephin-cobra_1.5+git20161103.0.a3c0924-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-ed25519-dev_0~20140907.d2b94fd-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-bradfitz-http2_0.0~git20150509-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-appc-cni_0.3.0+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-azure-azure-sdk-for-go_2.1.1~beta-3 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu coyim_0.3.7-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-pault-go-debian_0.5-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-elithrar-simple-scrypt_1.1+git20161119.3.2325946-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-appc-docker2aci_0.14.0+dfsg-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint-go-merkle_0.1~20170131~0git7a86b44-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-cloudflare-redoctober_0.0~git20161017.0.78e9720-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu hugo_0.18.1-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-hlandau-dexlogconfig_0.0~git20161112.0.244f29b-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-xordataexchange-crypt_0.0.2+git20150523.17.749e360-4 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu rclone_1.35-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-docker-libnetwork_0.8.0~dev.2+git20161130.568.fd27f22-4 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint-go-event-meter_0.0~git20160420.0.c9240a5-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-binding_0.0~git20161222.0.4892016-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-denisenkom-go-mssqldb_0.0~git20170117.0.9e40d9d-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu flannel_0.5.5~ds1-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu obfs4proxy_0.0.7-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-spf13-viper_0.0~git20161213.0.5ed0fc3-3 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-bowery-prompt_0.0~git20160808.0.d43c270-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-cache_0.0~git20151013.0.5617353-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint_0.8.0+git20170113.0.764091d-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-bindata_0.0~git20161222.0.85786f5-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu ratt_0.0~git20160202.0.a14e2ff-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu swarmkit_1.12.0+git20170111.763.296fcfcf-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-docker-engine-api_0.4.0-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu gobgp_1.15-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu gosu_1.10-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-captcha_0.0~git20170330.0.cbfb9d9-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-azure-go-autorest_7.2.0+REALLY.7.0.4-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-cloudflare-cfssl_1.2.0+git20160825.89.7fb22c8-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu go-wire_1.0~rc+git20161223.40.2f3b7aa-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-spf13-fsync_0.0~git20161130.0.cb2da33-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu merkleeyes_0.0~git20170130.0.549dd01-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-coreos-pkg_3-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-toolbox_0.0~git20170220.0.6766b8f-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu snapd_2.21-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-rackspace-gophercloud_1.0.0+git20161013.1012.e00690e8-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu acmetool_0.0.59-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-spf13-cobra_0.0~git20170314.0.7be4bed-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-session_0.0~git20151014.0.66031fc-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-gopherjs-gopherjs_0.0~git20170216.0.d5c6ba6-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu syncthing_0.14.18+dfsg1-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu restic_0.3.3-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu gitlab-ci-multi-runner_1.11.1+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu etcd_3.1.4+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu containerd_0.2.3~git20161117.78.03e5862~ds1-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu runc_1.0.0~rc2+git20161109.131.5137186-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu skydns_2.5.3a+git20160623.41.00ade30-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-i18n_0.0~git20160612.0.ef57533-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu prometheus-node-exporter_0.13.0+ds-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu pluginhook_0~20150216.0~a320158-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu consul_0.6.4~dfsg-3 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu govendor_1.0.8+ds1-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-gopkg-macaroon.v1_0.0~git20150121.0.ab3940c-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu docker-libkv_0.2.0-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu docker-registry_2.6.0~rc.1+git20161216.38.28602af3-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu prometheus_1.5.2+ds-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu tendermint-go-crypto_0.0~git20160724.0.4b11d62-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-pault-go-config_0.1-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-howeyc-gopass_0.0~git20160303.0.66487b2-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu influxdb_1.1.1+dfsg1-4 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-xenolf-lego_0.3.1-4 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-kisom-goutils_0.0~git20161101.0.858c9cb-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-go-macaron-gzip_0.0~git20151014.0.4938e9b-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu abci_0.0~git20170124.0.f94ae5e-2 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu prometheus-alertmanager_0.5.1+ds-7 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-aanand-compose-file_0.0~git20161122.0.a3e5876-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu acbuild_0.4.0+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-coreos-go-oidc_0.0~git20160926.0.16c5ecc-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu kubernetes_1.5.5+dfsg-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
nmu golang-github-weaveworks-mesh_0+git20161024.3dd75b1-1 . ANY all . unstable . -m 'Rebuild against fixed golang-go.crypto; #859655'
[2] failed (not included above):
notary_0.1~ds1-1 (see buildlogs/notary_0.1~ds1-1)
nomad_0.4.0+dfsg-1 (see buildlogs/nomad_0.4.0+dfsg-1)
packer_0.10.2+dfsg-4 (see buildlogs/packer_0.10.2+dfsg-4)
systemd-docker_0.2.1+dfsg-2 (see buildlogs/systemd-docker_0.2.1+dfsg-2)
docker-swarm_1.2.5+dfsg-2 (see buildlogs/docker-swarm_1.2.5+dfsg-2)
grafana_2.6.0+dfsg-3 (see buildlogs/grafana_2.6.0+dfsg-3)
docker.io_1.13.0~ds1-3 (see buildlogs/docker.io_1.13.0~ds1-3)
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859655
^ tl;dr -- insecure default is now secure default
Sorry to all for the massive rebuild list... and Thanks!
--
Michael Lustfield
Attachment:
pgpZkWenuyio7.pgp
Description: OpenPGP digital signature