Bug#928026: release-notes: document the state of security support for golang packages in Buster

[Holger Levsen]

package: release-notes

Are there other concerns or warnings and
should they already be mentioned in the release notes?

There has been no visible movement on the issues with Go as mentioned in
https://lists.debian.org/debian-release/2018/07/msg00002.html (and
this dates back much further, initial discussions were from 2016 or
earlier).
This is already an issue in Stretch (e.g. #922170), but will be much
worse in Buster, so unless someone reliably commits to work on
this ASAP the available options are to drop everything Go apart
from the toolchain packages from buster or exclude of all that mess
from security updates so that people know what they can expect.

filing a bug (in coordination with Moritz) so this doesnt get forgotten.

Also, I believe this bug should be cloned and reassigned to
src:debian-security-support as well, so it's also documented there. Will
do so once the bug arrives back.

[Debian Bug Tracking System]

Your message dated Tue, 4 Jun 2019 19:58:58 +0200
with message-id <85d6af1d-04bf-ea59-ebcc-***@debian.org>
and subject line Re: Bug#928026: release-notes: document the state of security support for golang packages in Buster
has caused the Debian Bug report #928026,
regarding release-notes: document the state of security support for golang packages in Buster
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ***@bugs.debian.org
immediately.)