Re: Bug#993129: redis-tools 3:3.2.6-3+deb9u6 has broken dependencies

2021-08-27 Thread Chris Lamb
Utkarsh Gupta wrote: > Could you take a look at this bug report (#993129), please? Already fixed, just in the upload/archive pipeline... (was successfully ACCEPTED 30+ mins ago, for example.) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org 🍥 chris-lamb.co.

Re: Bug#993129: redis-tools 3:3.2.6-3+deb9u6 has broken dependencies

2021-08-27 Thread Utkarsh Gupta
Hi Chris, On Fri, Aug 27, 2021 at 9:33 PM Nskaggs wrote: > > Package: redis-tools > Version: 3:3.2.6-3+deb9u5 > Severity: grave > Justification: renders package unusable > > Dear Maintainer, > >* What led up to the situation? > Attempting norma apt upgrade attempts to update redis-tools, but

Bug#993129: redis-tools 3:3.2.6-3+deb9u6 has broken dependencies

2021-08-27 Thread Nskaggs
Package: redis-tools Version: 3:3.2.6-3+deb9u5 Severity: grave Justification: renders package unusable Dear Maintainer, * What led up to the situation? Attempting norma apt upgrade attempts to update redis-tools, but requires newer libc and libjemalloc2 which isn't present in strech * What

Re: Propose to ignore libxstream-java CVEs

2021-08-27 Thread Markus Koschany
Hi, Am Freitag, dem 27.08.2021 um 14:03 +0200 schrieb Sylvain Beucler: > Hi, > > I wrote an analysis in June > https://lists.debian.org/debian-lts/2021/06/msg00024.html > https://lists.debian.org/debian-lts/2021/06/msg00040.html > > I believe we should postpone these CVEs with the goal of tracki

Re: Propose to ignore libxstream-java CVEs

2021-08-27 Thread Sylvain Beucler
Hi, I wrote an analysis in June https://lists.debian.org/debian-lts/2021/06/msg00024.html https://lists.debian.org/debian-lts/2021/06/msg00040.html I believe we should postpone these CVEs with the goal of tracking how /upstream/ reverse dependencies are adapting to the removal of the blacklist

Propose to ignore libxstream-java CVEs

2021-08-27 Thread Ola Lundqvist
Hi fellow LTS contributors I have helped Thorsten (this weeks front-deskl) to triage the java packages. The problem in the libxstream-java is that there are a lot of ways arbitrary code can be executed. The upstream fix is to make the recommended way to use the library the default. The recommenda