02.03.2015 19:53, Cyril Brulebois wrote:
> Moritz Muehlenhoff <j...@inutil.org> (2015-03-02):
[]
>> I'm slightly confused here. Is 1:1.22.0-9+deb8u1 different from
>> the upload you mentioned above? 
> 
> It's basically the same thing as I proposed initially, but with
> different changes in the git history because 1. the maintainer was
> calling me a liar; and 2. the uploader didn't want to touch git, so the
> end result is a single commit stating that the NMU was imported, with
> the bug closure.

I was calling you that because of a single word you used - intrusive -
for changes which are a) very localized to d/rules (touching a little
place of it) and b) not affecting anything you care, and especially
not affecting the resulting binaries in any way. And the changes which
were made way before freeze, the package hasn't been unblocked because
of old/buggy glibc installed on some buildds.  And ofcourse I stand
by my words.  Note that much bigger and more intrusive changes were
accepted after the freeze.

>> jessie has CVE-2014-4607 fixed, but not CVE-2014-9645 (which isn't
>> terribly severe and which could be tagged no-dsa if no further
>> busybox upload is planned for jessie).
> 
> I guess someone with enough time could stack this extra change on top of
> the jessie branch, and either let it stay there, or upload the package
> at the same time.
> 
> Sorry, I lost track of that extra fix and didn't think of it when Mehdi
> proposed NMUing it for the first CVE fix.

And now someone please tell me why to do all this.  From a package with
a willing maintainer who cared about the package, from a package which
was in good shape and with all the changes carefully selected for jessie,
to basically an unmaintained package with no one having time to maintain
and no one who cares, exactly the way it was over the years, and which
required a lot of work to get it in some more or less good shape.

Oh well.

/mjt


-- 
To UNSUBSCRIBE, email to debian-boot-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54f6cc0d.2090...@msgid.tls.msk.ru

Reply via email to