[Bug 1977860] Re: Backport 1.18.3 to 20.04 and 22.04 LTS

[Lucas Kanashiro]

I see we still have an issue with the version between focal and jammy:

 golang-1.18 | 1.18.1-1ubuntu1       | jammy                   | source, all
 golang-1.18 | 1.18.3-1ubuntu1~20.04 | focal-proposed/universe | source, all

Can we remove golang-1.18 from focal-proposed, backport the version in
Jammy and release any security fix needed via the security pocket? I am
asking this because I am also in need of golang-1.18 in Focal to be able
to backport docker.io.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.18 in Ubuntu.
https://bugs.launchpad.net/bugs/1977860

Title:
  Backport 1.18.3 to 20.04 and 22.04 LTS

Status in golang-1.18 package in Ubuntu:
  Fix Released
Status in golang-1.18 source package in Focal:
  Fix Committed
Status in golang-1.18 source package in Jammy:
  Incomplete

Bug description:
  [Rationale for update in 22.04]
  As requested by sil2100, we don’t want upgrade from 20.04 LTS downgrading the Golang 1.18 version. Hence updating this package too to 1.18.3 which includes multile security fixes compared to 1.18.1:

  - go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime, the go
  command, and the crypto/x509, go/types, net/http/httptest, reflect,
  and sync/atomic packages. See the Go 1.18.2 milestone on our issue
  tracker for details.

  -  go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as well
  as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages. See the Go 1.18.3 milestone on our issue
  tracker for details.

  
  [Rationale for new package in 20.04]

  As part of our entreprise desktop offering, we need to backport a recent version of ADSys to 20.04 LTS.
  This version depends on a recent Go version for embedding and more (golang 1.18), thus we need to backport Go 1.18 as a new separate binary package, as it’s already the case for current adsys and the backport of 1.16.

  [Test Plan]

   1. Ensure Golang 1.16 is published in -proposed
   2. Start a build with a package, requiring Golang 1.18 (dependency + PATH set to Golang 1.18 go binary).
   3. Ensure the package builds successfully.
   4. Run go version <your binary> which should display: "go1.18.x" (x being the version uploaded).

  [Where problems could occur]
   * Package depending on this Go version would not be able to compile.
   * As this is a separate, versionned, new package, no impact on existing ones.
   * FYI, we already built ADSys against this Go version in our ppa: https://launchpad.net/~didrocks/+archive/ubuntu/ppa

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.18/+bug/1977860/+subscriptions