[pkg-golang-devel] [pkg-go] Security support for packages written in Go

[Potter, Tim (HPE Linux Support)]

On 9 Jul 2016, at 3:52 PM, Martín Ferrari <tincho at tincho.org> wrote:
> 
> Moritz,
> 
> On 08/07/16 20:21, Moritz Muehlenhoff wrote:

>> And with that setup (and in addition to what Florian mentioned) I see
>> no sane way that we can support Go applications in stretch. It's
>> already difficult enough to support a distro of the size of Debian with
>> volunteers only.
> 
> So what would be the way forward for this? Declaring golang apps to be
> not supported for security updates? I am ready to live with that,
> although I know I will do any work needed to prepare security fixes for
> the few apps I maintain.

A declaration of non-support for security updates for golang apps is not my
preferred solution either.  (-:

I'm willing to talk with our security team at HPE to work out something here
for the stretch release though.


Tim.

> 
> --
> Martín Ferrari (Tincho)
> 
> _______________________________________________
> Pkg-go-maintainers mailing list
> Pkg-go-maintainers at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.alioth.debian.org/pipermail/pkg-golang-devel/attachments/20160709/2b8a0030/attachment.sig>