Security updates for software written in Go

From	Laurențiu Păncescu <lpancescu@gmail.com>
Newsgroups	linux.debian.security
Subject	Security updates for software written in Go
Date	2020-11-13 13:20 +0100
Message-ID	<BaGdz-4T3-9@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello,

the Debian Buster release notes state that no security updates are 
possible for software written in Go due to its static linking - Debian 
lacks the infrastructure to mass-rebuild all affected Go packages. Did 
this change in the mean time? If not, is there ongoing work to change this?

The same release notes state that just Firefox and Chromium can be 
supported with security updates, but Chromium is several major versions 
behind in Buster, it appears as vulnerable to lots of CVEs and the last 
DSA for chromium was at the beginning of July.

Best regards,
Laurentiu

[1] 
https://www.debian.org/releases/stable/amd64/release-notes/ch-information.en.html#limited-security-support
[2] https://security-tracker.debian.org/tracker/source-package/chromium

Back to linux.debian.security | Previous | Next | Find similar | Unroll thread

Thread

Security updates for software written in Go Laurențiu Păncescu <lpancescu@gmail.com> - 2020-11-13 13:20 +0100

csiph-web