Bug#928227: Bug#928026: security support for golang packages in Buster

[Shengjing Zhu <zhsj@debian.org>]

On Sat, May 18, 2019 at 5:41 PM Shengjing Zhu <zhsj@debian.org> wrote:
>
> On Sat, May 18, 2019 at 5:30 PM Paul Gevers <elbrus@debian.org> wrote:
> >
> > Hi Shengjing,
> >
> > On 08-05-2019 18:33, Shengjing Zhu wrote:
> > > On Wed, May 8, 2019 at 2:45 PM Paul Gevers <elbrus@debian.org> wrote:
> > > There's no tool yet, but some SQL scripts like
> > > http://paste.debian.net/1082099/
> > >
> > > As show in the result, for
> > > golang-golang-x-net-dev/1:0.0+git20181201.351d144+dfsg-3, probably 66
> > > packages need binNMU.
> >
> > @Shengjing, do you care to add the code and list to this bug? You're
> > paste expired, so I can't reproduce what you did.
> >
>
> tweak a little bit,
>
> http://paste.debian.net/1082006/

And FTR,

$ cat test.sql
SELECT
  s.source AS source,
  s2.version AS built_using_version,
  ar.arch_string AS arch

FROM extra_src_references esr
JOIN binaries b ON esr.bin_id = b.id
JOIN source s ON b.source = s.id
JOIN architecture ar ON ar.id = b.architecture
JOIN bin_associations ba ON esr.bin_id = ba.bin
JOIN source s2 ON esr.src_id = s2.id
JOIN suite su ON ba.suite = su.id

WHERE s2.version < '1:0.0+git20181201.351d144+dfsg-3'
  AND s2.source = 'golang-golang-x-net-dev'
  AND su.suite_name = 'testing'

GROUP BY s.source, s2.version, ar.arch_string


-- 
Shengjing Zhu