Re: CVE-2006-2314: debian dovecot package vulnerable. (fwd)

2006-06-15 Thread martin f krafft
also sprach martin f krafft <[EMAIL PROTECTED]> [2006.06.15.1832 +0200]: > Have you talked to the stable release team? Maybe they'd be willing > to let it into the next update? I am sorry, I accidentally replied to this as if it had come in via a different mailing list. -- Please do not send cop

Re: T&S 2 - Die^H^H^HRelease Harder

2006-06-15 Thread Steve Langasek
On Thu, Jun 15, 2006 at 08:20:34PM +0200, Luk Claes wrote: > Only #311188 (debian-edu-config) remained. After some discussion with > the Debian Edu Team I started filing wishlist bugs to the packages where > debian-edu-config would gain by having a way to change the conffiles of > these package aut

Re: T&S 2 - Die^H^H^HRelease Harder

2006-06-15 Thread Steve Langasek
Hi Marc, On Wed, Jun 14, 2006 at 05:54:43PM +0200, Marc 'HE' Brockschmidt wrote: > Andreas Barth <[EMAIL PROTECTED]> writes: > > So first, please continue to work on the RC bugs you already have, and > > select at least two RC bugs from our RC bug list and add them to your > > work list. > The l

Re: bits from bts.turmzimmer.net

2006-06-15 Thread Adeodato Simó
* Steve Langasek [Thu, 15 Jun 2006 15:04:56 -0700]: Hey, > > - make "etch" and "sid" exclusive, as in, list bugs present _only_ in > > that distribution. > I disagree with this. I use the etch view as the (more or less, bugs not > withstanding) authoritative view of bugs that are blockers

Re: bits from bts.turmzimmer.net

2006-06-15 Thread Steve Langasek
On Thu, Jun 15, 2006 at 02:02:10PM +0200, Adeodato Simó wrote: > * Andreas Barth [Thu, 15 Jun 2006 10:50:12 +0200]: > > there has been a change that affects the number of visible bugs: > > We treat version tracking correctly now, and ignore the done-status on > > bugs that have version tracking us

Re: CVE-2006-2314: debian dovecot package vulnerable. (fwd)

2006-06-15 Thread Martin Schulze
martin f krafft wrote: > I tend to agree with Joey on the issue, though I do think it's not > very nice that the postgresql security upgrade breaks other > packages. But going via stable-proposed-updates seems like the right > path. > > Have you talked to the stable release team? Maybe they'd be w

Re: T&S 2 - Die^H^H^HRelease Harder

2006-06-15 Thread Adeodato Simó
* Andreas Barth [Tue, 30 May 2006 12:19:27 +0200]: > Adeodato Simó > http://buildd.debian.org/fetch.php?pkg=tagcoll&arch=hppa&ver=1.6.2-2&stamp=1148891155&file=log I reproduced this on paer, started to look at it, and since it was messy, I put it on hold and went to do some other stuff. A week la

mozilla security bugs, NMU?

2006-06-15 Thread Laszlo Boszormenyi
Hi, This bug is open for almost two months. As Mozilla version 1.7.13 fixes several security bugs, please package it. If you don't have time, can I NMU it? Thanks, Laszlo/GCS signature.asc Description: This is a digitally signed message part

Re: T&S 2 - Die^H^H^HRelease Harder

2006-06-15 Thread Luk Claes
Andreas Barth wrote: > Hi, ... > So first, please continue to work on the RC bugs you already have, and > select at least two RC bugs from our RC bug list and add them to your > work list. Only #311188 (debian-edu-config) remained. After some discussion with the Debian Edu Team I started filing wi

Re: requeueing failed packages with gcc 4.1

2006-06-15 Thread Stephen R Marenka
On Tue, Jun 13, 2006 at 05:09:24PM -0400, Jay Berkenbilt wrote: > One of my packages (libxml-xerces-perl) has failed on m68k and arm, In this case I'd say mailing the buildd maintainers would be the way to go. In any case, I'm requeueing for m68k since it was a buildd timeout and nothing wrong w

Re: CVE-2006-2314: debian dovecot package vulnerable. (fwd)

2006-06-15 Thread martin f krafft
I tend to agree with Joey on the issue, though I do think it's not very nice that the postgresql security upgrade breaks other packages. But going via stable-proposed-updates seems like the right path. Have you talked to the stable release team? Maybe they'd be willing to let it into the next upda

Re: CVE-2006-2314: debian dovecot package vulnerable. (fwd)

2006-06-15 Thread Jaldhar H. Vyas
Aargh forgot to send this yesterday. Please cc me on any replies, I'm not subscribed to the list. -- Forwarded message -- A question for the stable release managers. In bug #369359, Martin Pitt also sent a patch to fix this problem for the sarge version of Dovecot. When I mentio

Re: bits from bts.turmzimmer.net

2006-06-15 Thread Andreas Barth
* Adeodato Simó ([EMAIL PROTECTED]) [060615 14:01]: > - make the default dist be "both" instead of "any", so that what > people get by default is the list of bugs that must be dealt with > before we can release. hm, IIRC we had that case before we entered sarge's base-freeze. I personall

Re: bits from bts.turmzimmer.net

2006-06-15 Thread Andreas Barth
* Thijs Kinkhorst ([EMAIL PROTECTED]) [060615 12:33]: > Good, thanks for the effort. I have just two queries here: first, since > Debian seems to rely on this tool for the release process, wouldn't it > make sense to move it to a debian.org host (release.debian.org comes to > mind)? Might be a goo

Re: bits from bts.turmzimmer.net

2006-06-15 Thread Adeodato Simó
* Andreas Barth [Thu, 15 Jun 2006 10:50:12 +0200]: > there has been a change that affects the number of visible bugs: > We treat version tracking correctly now, and ignore the done-status on > bugs that have version tracking used in a close message. Cool, thanks. > For this reason, if you do bug

Re: bits from bts.turmzimmer.net

2006-06-15 Thread Thijs Kinkhorst
Hello Andi, > there has been a change that affects the number of visible bugs: > We treat version tracking correctly now, and ignore the done-status on > bugs that have version tracking used in a close message. Good, thanks for the effort. I have just two queries here: first, since Debian seems t

Re: T&S 2 - Die^H^H^HRelease Harder

2006-06-15 Thread Steve Langasek
Hi Bill, On Wed, Jun 14, 2006 at 05:00:17PM +0200, Bill Allombert wrote: > On Tue, May 30, 2006 at 12:19:27PM +0200, Andreas Barth wrote: > > So first, please continue to work on the RC bugs you already have, and > > select at least two RC bugs from our RC bug list and add them to your > > work li

Re: Patch for update-grub for Sarge R3

2006-06-15 Thread Andreas Barth
* Otavio Salvador ([EMAIL PROTECTED]) [060614 19:11]: > Manoj Srivastava <[EMAIL PROTECTED]> writes: > > > One way to mitigate the problem is to propagate a fixed > > update-grub script into a Sarge point release; here is a minimal > > patch that should make a sarge update-grub script be