#1142947 Please include Static-Built-Using information in the security tracker

Package:
security-tracker
Source:
security-tracker
Submitter:
Debian-Go Mailing List
Date:
2026-07-28 15:23:02 UTC
Severity:
normal
Tags:
#1142947#5
Date:
2026-07-28 14:15:13 UTC
From:
To:
Hi,

I happened to notice https://rustsec.debian.net/ recently, and that relies
on "Static-Built-Using" to track which disclosed vulnerability impacts
what package.

Given that Go world is also statically linked, such a tracker may also make
sense for Golang.

Thorsten gave the suggestion on mailing list (mail below) to have security
tracker support it. I agree that it'd be great to have it at a central place.
#1142947#10
Date:
2026-07-28 15:20:29 UTC
From:
To:
Hi

I think this can be important for more languages that are statically
linked in Debian.

I'll cc the Zig, Haskell and OCalm teams also.

//Alex

Den tis 28 juli 2026 kl 16:17 skrev Nilesh Patra <nilesh@debian.org>:
#1142947#15
Date:
2026-07-28 15:20:29 UTC
From:
To:
Hi

I think this can be important for more languages that are statically
linked in Debian.

I'll cc the Zig, Haskell and OCalm teams also.

//Alex

Den tis 28 juli 2026 kl 16:17 skrev Nilesh Patra <nilesh@debian.org>: