Your message dated Sat, 17 Dec 2022 07:34:02 +0000
with message-id <e1p6rhq-0066kc...@fasolo.debian.org>
and subject line Bug#1023290: fixed in golang-raven-go 0.2.0+ds2-1
has caused the Debian Bug report #1023290,
regarding golang-raven-go: Include outdated copy of CA bundles
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1023290: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023290
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: golang-raven-go
Version: 0.2.0+ds1-2
Severity: serious
Tags: security
X-Debbugs-Cc: z...@debian.org, prav...@debian.org

Hi Pirate Praveen,

In 2018, you said we should not package golang-github-certifi-gocertifi[1],
as we should use the system CA bundles.

But why you include that in the vendor dir[2] in golang-raven-go?

[1] https://lists.debian.org/debian-go/2018/12/msg00065.html
[2] 
https://salsa.debian.org/go-team/packages/golang-raven-go/-/tree/debian/0.2.0+ds1-1/vendor/github.com/certifi/gocertifi

--- End Message ---
--- Begin Message ---
Source: golang-raven-go
Source-Version: 0.2.0+ds2-1
Done: Shengjing Zhu <z...@debian.org>

We believe that the bug you reported is fixed in the latest version of
golang-raven-go, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1023...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Shengjing Zhu <z...@debian.org> (supplier of updated golang-raven-go package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 17 Dec 2022 15:15:50 +0800
Source: golang-raven-go
Architecture: source
Version: 0.2.0+ds2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg...@tracker.debian.org>
Changed-By: Shengjing Zhu <z...@debian.org>
Closes: 1023290
Changes:
 golang-raven-go (0.2.0+ds2-1) unstable; urgency=medium
 .
   * Team upload
 .
   [ Debian Janitor ]
   * Apply multi-arch hints.
 .
   [ Shengjing Zhu ]
   * Update uscan watch file version to 4
   * New upstream version 0.2.0+ds2
   * Update maintainer address to team+pkg...@tracker.debian.org
   * Update Standards-Version to 4.6.2 (no changes)
   * Add autopkgtest-pkg-go
   * Add Rules-Requires-Root
   * Add golang-github-pkg-errors-dev to Depends
   * Add patch to use system ca certificates (Closes: #1023290)
Checksums-Sha1:
 ee0d1d824a1a739ba2466c55436571bd8d1a05db 1616 golang-raven-go_0.2.0+ds2-1.dsc
 43aa38633910306fa7a9217228a420ed7cc9156e 19237 
golang-raven-go_0.2.0+ds2.orig.tar.gz
 c0c553a9ad357c294cd674546346cc8693ced236 3552 
golang-raven-go_0.2.0+ds2-1.debian.tar.xz
 4831f963219622d9b78cb9c5fab20da57c6a72f6 6027 
golang-raven-go_0.2.0+ds2-1_amd64.buildinfo
Checksums-Sha256:
 d2b5b2d175dfd4b693dba37151f81ad1f3a97c3417de9a48cfe41c37f318a9ad 1616 
golang-raven-go_0.2.0+ds2-1.dsc
 51c75358dca745a76922e1b41a788416a8212839adfbbfc927ea0c0c35122d32 19237 
golang-raven-go_0.2.0+ds2.orig.tar.gz
 4a7b53eee66674e4ae7b6db90d5acce32ddf1ae4db4f4299ad84dc75816b0cd6 3552 
golang-raven-go_0.2.0+ds2-1.debian.tar.xz
 54fb068a5ec2a78cd955aaccc2a553823722dff7e3ab4e66406ed8b6387e9806 6027 
golang-raven-go_0.2.0+ds2-1_amd64.buildinfo
Files:
 40c87d362d1e5a9043f5763324af7989 1616 golang optional 
golang-raven-go_0.2.0+ds2-1.dsc
 a04a70b47ee9069567f00f20dc5644d2 19237 golang optional 
golang-raven-go_0.2.0+ds2.orig.tar.gz
 1fbfe18f2886d9c09616ac67b2ce924d 3552 golang optional 
golang-raven-go_0.2.0+ds2-1.debian.tar.xz
 2b3b2173d19983c8fd620ef3e8f9183c 6027 golang optional 
golang-raven-go_0.2.0+ds2-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iIYEARYIAC4WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCY51tRxAcemhzakBkZWJp
YW4ub3JnAAoJEH9E+iXqVRTL8hwBAJfOzrSyjxxKpviR3LbZ186s0LSrExsyqohM
8AOWw+DMAP4uyjOwqf1TUMy0N/mI4PARfaGzg+D5leL9cdSNHFciAw==
=r/50
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to