Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-14 Thread Ben Hutchings
On Thu, 2019-02-14 at 01:09 +, Steve McIntyre wrote: > On Mon, Feb 11, 2019 at 01:38:05AM +, Steve McIntyre wrote: > > On Fri, Feb 08, 2019 at 11:23:54AM +0100, Emilio Pozuelo Monfort wrote: > > > I have done an automated install (ncurses frontend, installing GNOME) > > > using the > > > n

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-13 Thread Steve McIntyre
On Mon, Feb 11, 2019 at 01:58:24PM +0100, Emilio Pozuelo Monfort wrote: >On 11/02/2019 02:38, Steve McIntyre wrote: >> >> Next: live images? cloud images? > >I found cloud images for openstack in > >https://cloud.debian.org/images/cloud/OpenStack/archive/ ACK. >But can't find any jessie live ima

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-13 Thread Steve McIntyre
On Mon, Feb 11, 2019 at 01:38:05AM +, Steve McIntyre wrote: >On Fri, Feb 08, 2019 at 11:23:54AM +0100, Emilio Pozuelo Monfort wrote: >> >>I have done an automated install (ncurses frontend, installing GNOME) using >>the >>netinst/amd64 image, with an LVM encrypted volume. I have also tested th

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-11 Thread Emilio Pozuelo Monfort
On 11/02/2019 02:38, Steve McIntyre wrote: > On Fri, Feb 08, 2019 at 11:23:54AM +0100, Emilio Pozuelo Monfort wrote: >> >> I have done an automated install (ncurses frontend, installing GNOME) using >> the >> netinst/amd64 image, with an LVM encrypted volume. I have also tested the CD1 >> media, u

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-10 Thread Steve McIntyre
On Fri, Feb 08, 2019 at 11:23:54AM +0100, Emilio Pozuelo Monfort wrote: > >I have done an automated install (ncurses frontend, installing GNOME) using the >netinst/amd64 image, with an LVM encrypted volume. I have also tested the CD1 >media, using the graphical installer, doing an SSH server instal

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-08 Thread Emilio Pozuelo Monfort
On 07/02/2019 12:23, Emilio Pozuelo Monfort wrote: > Hi Steve, > > On 07/02/2019 12:12, Steve McIntyre wrote: >> On Mon, Jan 28, 2019 at 12:26:54AM +, Steve McIntyre wrote: >>> On Sun, Jan 27, 2019 at 06:33:29PM +, Steve McIntyre wrote: I'll give it a try now... >>> >>> And that

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-07 Thread Emilio Pozuelo Monfort
Hi Steve, On 07/02/2019 12:12, Steve McIntyre wrote: > On Mon, Jan 28, 2019 at 12:26:54AM +, Steve McIntyre wrote: >> On Sun, Jan 27, 2019 at 06:33:29PM +, Steve McIntyre wrote: >>> >>> I'll give it a try now... >> >> And that worked on the first attempt. Using this approach, I've done >>

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-07 Thread Steve McIntyre
On Mon, Jan 28, 2019 at 12:26:54AM +, Steve McIntyre wrote: >On Sun, Jan 27, 2019 at 06:33:29PM +, Steve McIntyre wrote: >> >>I'll give it a try now... > >And that worked on the first attempt. Using this approach, I've done >jessie builds of the various LTS arches using casulana, the normal

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-27 Thread Steve McIntyre
On Sun, Jan 27, 2019 at 06:33:29PM +, Steve McIntyre wrote: >On Thu, Jan 24, 2019 at 12:39:29PM +0100, Emilio Pozuelo Monfort wrote: >> >>Just to clarify: there is no separate -lts suite anymore, so it'd >>just need to pull from security (which still needs changes as you >>mentioned). >> >>Can

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-27 Thread Steve McIntyre
On Thu, Jan 24, 2019 at 12:39:29PM +0100, Emilio Pozuelo Monfort wrote: >Hi Steve, > >On 22/01/2019 14:50, Steve McIntyre wrote: >> On Tue, Jan 22, 2019 at 01:44:12PM +, Ben Hutchings wrote: >>> However, APT is used during initial installation and we don't have any >>> provision for updating in

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-24 Thread Emilio Pozuelo Monfort
Hi Steve, On 22/01/2019 14:50, Steve McIntyre wrote: > On Tue, Jan 22, 2019 at 01:44:12PM +, Ben Hutchings wrote: >> However, APT is used during initial installation and we don't have any >> provision for updating installer images during LTS. So we're either >> going to have to revisit that o

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-23 Thread Steve McIntyre
On Wed, Jan 23, 2019 at 12:19:28AM +, Ben Hutchings wrote: >On Tue, 2019-01-22 at 13:50 +, Steve McIntyre wrote: >> >> I can help with new jessie installation images, but it'll need a bit >> of prep work. debian-cd doesn't pull from security or lts by default. > >Would it be any easier to

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Ben Hutchings
On Tue, 2019-01-22 at 13:50 +, Steve McIntyre wrote: > On Tue, Jan 22, 2019 at 01:44:12PM +, Ben Hutchings wrote: > > On Tue, 2019-01-22 at 13:17 +0100, Yves-Alexis Perez wrote: > > > - > > > Debian Security Advisory DS

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Chris Lamb
Ben Hutchings wrote: > This presumably needs to be fixed for jessie LTS as well, and I see > Chris Lamb has claimed it. I took the "claim" here so that there was definitely someone in the LTS team who would ensure everything was followed-through, which seems like it has happened. I've since uncla

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Moritz Muehlenhoff
On Tue, Jan 22, 2019 at 01:44:12PM +, Ben Hutchings wrote: > On Tue, 2019-01-22 at 13:17 +0100, Yves-Alexis Perez wrote: > > - > > Debian Security Advisory DSA-4371-1 secur...@debian.org > > https://www.de

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Steve McIntyre
On Tue, Jan 22, 2019 at 01:44:12PM +, Ben Hutchings wrote: >On Tue, 2019-01-22 at 13:17 +0100, Yves-Alexis Perez wrote: >> - >> Debian Security Advisory DSA-4371-1 secur...@debian.org >> https://www.debian

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Ben Hutchings
On Tue, 2019-01-22 at 13:17 +0100, Yves-Alexis Perez wrote: > - > Debian Security Advisory DSA-4371-1 secur...@debian.org > https://www.debian.org/security/Yves-Alexis Perez > January 2