Hi all, Any news about this? Will maintainers take care of irssi CVEs in wheezy?
As Antoine said, irssi is one of the packages in our radar. I will wait an answer until the end of the week, otherwise I'll prepare an upload based on patches in jessie and stretch. Cheers. 2017-06-27 15:33 GMT-03:00 Antoine Beaupré <anar...@orangeseeds.org>: > On 2017-06-09 10:22:37, Rhonda D'Vine wrote: > > Dear Ola, > > > > this is on my board. The issue isn't that pressing, and I want to fix > > it for stretch and jessie too, and only do the update for wheezy after > > those got approved (which I expect). If it won't be approved for > > stretch and jessie there is quite little sense to invest to fix it just > > for wheezy. :) > > > > At least it won't get tackled by the security team, so I don't see much > > of a pressure that the LTS team should put it high on its priority, > > there are probably more pressuring things to fix. > > Hi Rhonda! > > Just to let you know, it's not high priority, but it's still on our > dashboard. :) LTS issues are prioritized by how many people have the > affected packages installed, and irssi is one of the packages that have > "votes". Considering it's a remote DOS, I still believe it's worth > fixing. > > We are happy, of course, to wait for you to make the update if you still > plan on doing so, now that updates trickled down in stretch/jessie. Do > let us know, however, if you want the LTS team to take care of it for > wheezy. > > Thanks! > > A. > > -- > La destruction de la société totalitaire marchande n'est pas une affaire > d'opinion. Elle est une nécessité absolue dans un monde que l'on sait > condamné. Puisque le pouvoir est partout, c'est partout et tout le temps > qu'il faut le combattre. - Jean-François Brient, de la servitude moderne > > -- Lucas Kanashiro
