Control: reopen -1 [re-sending having un-archived the bug]
On Sat, 2016-05-28 at 11:37 +0100, Adam D. Barratt wrote: > Control: tags -1 + pending > > On Fri, 2016-05-27 at 20:50 +0100, Adam D. Barratt wrote: > > Control: tags -1 + confirmed > > > > On Fri, 2016-05-27 at 13:06 +0200, Michael Biebl wrote: > > > we'd like to make a stable upload for policykit-1 in the upcoming jessie > > > point release. > > > > > > The policykit-1 package didn't have a new upstream release in sid, but > > > we backported a lot of fixes from newer upstream versions, including > > > quite a few CVEs and important memory leak fixes [1]. > > > The policykit-1 package in sid is in a much better shape then what we > > > have in jessie. > > > > > > We therefor think it's best to simply upload the current package from > > > sid, which has been cooking for a very long time, as is to stable. > > > > > > I know the debdiff is large but I think the vast majority of the changes > > > are stable material and it's simply unfeasible to create and test yet > > > another stack of patches. I would therefor urge you to consider to > > > accept the attached debdiff. > > > > Assuming that the resulting package has been tested on jessie, under the > > circumstances I'm prepared to trust your judgement. Please go ahead. > > Uploaded and flagged for acceptance. Contrary to my over-hasty closing back in June (which no-one corrected in the meantime), this actually wasn't included in the 8.5 point release, due to last minute regressions raised in #825956. Michael, am I reading the bug log correctly that the issues turned out not to be due to the policykit-1 update? If so, should the package now been included in 8.6? Regards, Adam