kf5-messagelib / CVE-2017-17689

2018-07-04 Thread Brian May
Hello All, I notice that kf5-messagelib is listed in dla-needed.txt. I also notice that the only security issue listed for kf5-messagelib, CVE-2017-17689, is listed as no-DSA. Should the entry be removed from dla-needed.txt? Regards -- Brian May

upload dokuwiki

2018-07-04 Thread Abhijith PA
Hello. I've prepared LTS security update for dokuwiki. Please review and upload. Debdiff is attached. Patch is forward ported from wheezy. I've tested by installing in clean jessie machine, created sample wiki pages. https://mentors.debian.net/debian/pool/main/d/dokuwiki/dokuwiki_0.0.20140505.a+d

Re: mercurial new test packages

2018-07-04 Thread Antoine Beaupré
On 2018-07-03 14:16:17, Antoine Beaupré wrote: > On 2018-06-29 03:41:15, Chris Lamb wrote: > In the meantime, I postponed working on the package as I had to move on > to other things and there didn't seem to be a concensus on the packaged > suggested. I'll go back to it now to see if I can fix the

Re: upload dokuwiki

2018-07-04 Thread Antoine Beaupré
On 2018-07-04 03:41:31, Abhijith PA wrote: > Hello. > > I've prepared LTS security update for dokuwiki. Please review and > upload. Debdiff is attached. Patch is forward ported from wheezy. I've > tested by installing in clean jessie machine, created sample wiki pages. Hi! I'm surprised you ended

Re: upload dokuwiki

2018-07-04 Thread Abhijith PA
On Wednesday 04 July 2018 08:00 PM, Antoine Beaupré wrote: > I'm surprised you ended up with this result. I sent you an email over a > week ago (2018-06-27, id:87muvgi20l@curie.anarc.at) detailing the > work I already did to fix CVE-2017-18123. > > Is there any reason why you deviate from th

Re: mercurial new test packages

2018-07-04 Thread Chris Lamb
Hi Antoine, > > * A build that does not non-determistically fail in its testsuite (and > >thus FTBFS randomly.). > > > > * Reliably detecting regressions ("introduce new…"). > > > > * A bit-for-bit reproducible build - eg. your "test packages > >unreproducible" note in data/dla-ne

Re: mercurial new test packages

2018-07-04 Thread Antoine Beaupré
On 2018-07-04 11:06:19, Chris Lamb wrote: >> @wireprotocommand('listkeys', 'namespace') >> def listkeys(repo, proto, namespace): >> d = repo.listkeys(encoding.tolocal(namespace)).items() >> return pushkeymod.encodekeys(d) >> >> And in my tests this is returns as a list of tuples, >> determ

Re: upload dokuwiki

2018-07-04 Thread Antoine Beaupré
On 2018-07-04 10:52:15, Abhijith PA wrote: > On Wednesday 04 July 2018 08:00 PM, Antoine Beaupré wrote: >> I'm surprised you ended up with this result. I sent you an email over a >> week ago (2018-06-27, id:87muvgi20l@curie.anarc.at) detailing the >> work I already did to fix CVE-2017-18123. >>

Re: jetty CVE triage: jetty8 ignored?

2018-07-04 Thread Ola Lundqvist
Hi Sebastien You are right, CVE-2011- first found to affect jetty (jetty 6) could very well not be fixed in jetty 8 since jetty 8 was first released in 2009. http://www.eclipse.org/jetty/documentation/current/what-jetty-version.html So to be on the safe side I checked the two CVEs from 2011.

Re: Bug#902290: Too abrupt removal of configuration option in stable update

2018-07-04 Thread Sebastian Andrzej Siewior
control: tags -1 patch On 2018-07-04 14:06:54 [+0200], To Hans van Kranenburg wrote: > On 2018-06-24 17:12:19 [+0200], Hans van Kranenburg wrote: > > My mailserver logs now contain 'ERROR: Parse error at line 74: Unknown > > option StatsHostID', and when that's removed, it reports the next option

Re: upload dokuwiki

2018-07-04 Thread Abhijith PA
On Wednesday 04 July 2018 08:59 PM, Antoine Beaupré wrote: > On 2018-07-04 10:52:15, Abhijith PA wrote: >> On Wednesday 04 July 2018 08:00 PM, Antoine Beaupré wrote: >>> I'm surprised you ended up with this result. I sent you an email over a >>> week ago (2018-06-27, id:87muvgi20l@curie.anar