[SECURITY] [DLA-329-2] postgresql-8.4 update corrected

2015-11-04 Thread Christoph Berg
Package: postgresql-8.4 Version: 8.4.22lts5-0+deb6u2 The 8.4.22lts5-0+deb6u1 update failed to build on the i386 architecture because the regression tests were not correctly adapted for changes in lts5. This has now been corrected, updated binaries for i386 and amd64 (which were una

Re: Accepted postgresql-8.4 8.4.22lts5-0+deb6u1 (source all amd64) into squeeze-lts

2015-11-04 Thread Christoph Berg
Re: Pascal Hambourg 2015-10-27 <562f2f18.3060...@plouf.fr.eu.org> > Hello, > > According to > > the build for i386 failed. Hi Pascal, I had noticed as well, but only now found the time to fix the problem. The build

squeeze update of libsndfile?

2015-11-04 Thread Raphael Hertzog
Hello Erik, the Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of libsndfile: https://security-tracker.debian.org/tracker/CVE-2014-9756 https://security-tracker.debian.org/tracker/CVE-2015-7805 https://security-tracker.debian.org/tracker/CVE-2

Re: squeeze update of nss?

2015-11-04 Thread Raphael Hertzog
Hi, On Wed, 04 Nov 2015, Mike Hommey wrote: > (While on the subject, there's another round of Iceweasel security > updates coming, along with NSPR and NSS fixes, this time) Yes, I was about to contact you again about those but you are already aware of them: For nss: https://security-tracker.debi

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Raphael Hertzog
Hello, On Wed, 16 Sep 2015, Raphael Hertzog wrote: > On Tue, 25 Aug 2015, Holger Levsen wrote: > > > In addition it would make sense to exclude the OpenStack packages > > > in wheezy, they are fully unsupported upstream und very unlikely > > > to be used since OpenStack is evolving so fast. You sh

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Raphael Hertzog
[ Many people are on copy, please trim the list as appropriate when you reply ] On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote: > as a followup to yesterday's BoF I compared the list of unsupported > packages in Squeeze LTS against the current status quo: > Support for these ended in Wheezy alread

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Raphael Hertzog
[ Many people are on copy, please trim the list as appropriate when you reply ] On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote: > These need to be discussed, since they will be a significant > time drain (e.g. are they in the sponsors's interests?). They > are supportable, but it will take a lot of

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Dominic Hargreaves
On Wed, Nov 04, 2015 at 05:42:43PM +0100, Raphael Hertzog wrote: > > movabletype-opensource > > -> Upstream went closed source, Dominic kept in on life support, > > should be checked with him > > Dominic, do you think movabletype-opensource can be supported in wheezy > until May 2018? No, I would

Re: Accepted postgresql-8.4 8.4.22lts5-0+deb6u1 (source all amd64) into squeeze-lts

2015-11-04 Thread Pascal Hambourg
Christoph Berg a écrit : > Re: Pascal Hambourg 2015-10-27 <562f2f18.3060...@plouf.fr.eu.org> >> >> the build for i386 failed. > > I had noticed as well, but only now found the time to fix the problem. > The builds are now ok and should be available on the mirrors later > today. Indeed. Thanks.

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Mike Hommey
On Wed, Nov 04, 2015 at 05:44:36PM +0100, Raphael Hertzog wrote: > [ Many people are on copy, please trim the list as appropriate when you reply > ] > > On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote: > > These need to be discussed, since they will be a significant > > time drain (e.g. are they in

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Thomas Goirand
On 11/04/2015 04:40 PM, Raphael Hertzog wrote: > Hello, > > On Wed, 16 Sep 2015, Raphael Hertzog wrote: >> On Tue, 25 Aug 2015, Holger Levsen wrote: In addition it would make sense to exclude the OpenStack packages in wheezy, they are fully unsupported upstream und very unlikely to

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Tzafrir Cohen
On Wed, Nov 04, 2015 at 05:42:43PM +0100, Raphael Hertzog wrote: > [ Many people are on copy, please trim the list as appropriate when you reply > ] > > On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote: > > as a followup to yesterday's BoF I compared the list of unsupported > > packages in Squeeze L

Using the same nss in all suites

2015-11-04 Thread Guido Günther
Hi, Backporting fixes for nss can become a challenge over time due to: * Bugs related to MFAs (often containing test cases) being restricted so one can only look at hg and try to find all the relevant commits. * The library has rather frequent security updates * The code diverges over the yea

Re: Using the same nss in all suites

2015-11-04 Thread Mike Hommey
On Thu, Nov 05, 2015 at 08:25:47AM +0100, Guido Günther wrote: > Hi, > > Backporting fixes for nss can become a challenge over time due to: > > * Bugs related to MFAs (often containing test cases) being restricted so > one can only look at hg and try to find all the relevant commits. > > * The

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Guido Günther
Hi, On Wed, Nov 04, 2015 at 05:44:36PM +0100, Raphael Hertzog wrote: > [ Many people are on copy, please trim the list as appropriate when you reply > ] > > On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote: > > These need to be discussed, since they will be a significant > > time drain (e.g. are th

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Guido Günther
Hi, On Wed, Nov 04, 2015 at 05:44:36PM +0100, Raphael Hertzog wrote: > [ Many people are on copy, please trim the list as appropriate when you reply > ] > > On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote: > > These need to be discussed, since they will be a significant > > time drain (e.g. are the

Re: Unsupported packages for Wheezy LTS

2015-11-04 Thread Moritz Muehlenhoff
On Thu, Nov 05, 2015 at 06:47:03AM +0900, Mike Hommey wrote: > First and foremost, while GCC 4.7 is the current > minimum version supported, it's likely to become GCC 4.8 in the near > future, because of some wanted C++11/C++14 features. That problem also bit us with chromium in wheezy. Introduci