sarge security status

2005-03-10 Thread Joey Hess
As usual, this is just the output of http://newraff.debian.org/~joeyh/testing-security.html limited to holes that are already fixed in testing, plus some investigation. * bidwatcher 1.3.17-1 needed, have 1.3.16-1 for DSA-687-1a 20 days old blocked only by curl now curl

Re: sarge security status

2005-02-26 Thread Steve Langasek
On Wed, Feb 23, 2005 at 05:20:32PM -0500, Joey Hess wrote: > As always, see http://merkel.debian.org/~joeyh/testing-security.html > armagetron (unfixed; bug #295294) for CAN-2005-0369, CAN-2005-0370, > CAN-2005-0371 > The fix requires packaging what sounds like a significant > new up

Re: sarge security status

2005-02-24 Thread Steve Langasek
On Thu, Feb 24, 2005 at 12:41:16PM +0200, Riku Voipio wrote: > On Thu, Feb 24, 2005 at 01:38:02AM +0100, Adeodato Simó wrote: > > Sadly, due to the mipsel binaries being built much later than for > > other arches, kdelibs now depends on the aspell transition too. > > FWIW, the flac6 transiti

Re: sarge security status

2005-02-24 Thread Joey Hess
Joey Hess wrote: > kernel-image-2.4.27-sparc 2.4.27-2 needed, have 2.4.27-1 for CAN-2004-1056, > CAN-2004-1235 > Needs ftp-master assistance for binary package removals. > I've not been able to get in touch with any yet. > May delay d-i rc3 timeline if not in sarge by 28 Feb. A

Re: sarge security status

2005-02-24 Thread Riku Voipio
On Thu, Feb 24, 2005 at 01:38:02AM +0100, Adeodato Simó wrote: > Sadly, due to the mipsel binaries being built much later than for > other arches, kdelibs now depends on the aspell transition too. > FWIW, the flac6 transition depends on gtk+2.0 for a similar reason > (timidity-interfaces-

Re: sarge security status

2005-02-23 Thread Adeodato Simó
* Joey Hess [Wed, 23 Feb 2005 17:20:32 -0500]: > kdelibs 4:3.3.2-2 needed, have 4:3.3.2-1 for CAN-2005-0365 > just got missing mipsel build, should go in now Sadly, due to the mipsel binaries being built much later than for other arches, kdelibs now depends on the aspell transition too

sarge security status

2005-02-23 Thread Joey Hess
As always, see http://merkel.debian.org/~joeyh/testing-security.html armagetron (unfixed; bug #295294) for CAN-2005-0369, CAN-2005-0370, CAN-2005-0371 The fix requires packaging what sounds like a significant new upstream fork. This could take time, I'd say drop it from t

Re: sarge security status

2005-02-18 Thread Steve Langasek
On Fri, Feb 11, 2005 at 06:21:13PM -0800, Steve Langasek wrote: > On Fri, Feb 11, 2005 at 01:08:39PM -0500, Joey Hess wrote: > > The list is getting a bit long so I thought I'd go through it here again: > > # bind 1:8.4.6-1 needed, have 1:8.4.4-1 for CAN-2005-0033 > > 15 days old > > FTBFS

Re: sarge security status

2005-02-11 Thread Matthias Klose
Joey Hess writes: > Steve Langasek wrote: > > Does mooix work on the mipsen? This failure looks like it might be > > related to the problem that prevents fakeroot from running there. > > It used to pass the test suite, but that was a year ago. I'll be turning > off the test suite on some arches a

Re: sarge security status

2005-02-11 Thread Joey Hess
Steve Langasek wrote: > Does mooix work on the mipsen? This failure looks like it might be > related to the problem that prevents fakeroot from running there. It used to pass the test suite, but that was a year ago. I'll be turning off the test suite on some arches as a quick fix if necessary. >

Re: sarge security status

2005-02-11 Thread Anibal Monsalve Salazar
On Fri, Feb 11, 2005 at 01:08:39PM -0500, Joey Hess wrote: >The list is getting a bit long so I thought I'd go through it here again: > ># bind 1:8.4.6-1 needed, have 1:8.4.4-1 for CAN-2005-0033 > 15 days old > FTBFS on arm, looks like autobuilder breakage to me ># emacs21 21.3+1-9 need

Re: sarge security status

2005-02-11 Thread Steve Langasek
On Fri, Feb 11, 2005 at 01:08:39PM -0500, Joey Hess wrote: > The list is getting a bit long so I thought I'd go through it here again: > # bind 1:8.4.6-1 needed, have 1:8.4.4-1 for CAN-2005-0033 > 15 days old > FTBFS on arm, looks like autobuilder breakage to me Has already been reque

sarge security status

2005-02-11 Thread Joey Hess
The list is getting a bit long so I thought I'd go through it here again: # bind 1:8.4.6-1 needed, have 1:8.4.4-1 for CAN-2005-0033 15 days old FTBFS on arm, looks like autobuilder breakage to me # emacs21 21.3+1-9 needed, have 21.3+1-8 for CAN-2005-0100 4 days old

sarge security status

2005-01-29 Thread Joey Hess
The page is temporarily also available on newraff, since HP is down. I don't trust this version as much, since madison likes to segfault on newraff: http://newraff.debian.org/~joeyh/testing-security.html # a2ps 1:4.13b-4.3 needed, have 1:4.13b-4.2 for CAN-2004-1377 OOD sparc, 7 days old #

Re: sarge security status

2005-01-19 Thread Steve Langasek
On Thu, Jan 20, 2005 at 11:40:16AM +0900, Kenshi Muto wrote: > At Wed, 19 Jan 2005 21:22:19 -0500, > Joey Hess wrote: > > * namazu2 2.0.14-1 needed, have 2.0.13-4 for DSA-627-1 > > OOD on arm, *13* days old now. > I'll build namazu2 for arm and ask maintainer to check, sign, and upload. I

Re: sarge security status

2005-01-19 Thread Kenshi Muto
At Wed, 19 Jan 2005 21:22:19 -0500, Joey Hess wrote: > * namazu2 2.0.14-1 needed, have 2.0.13-4 for DSA-627-1 > OOD on arm, *13* days old now. I'll build namazu2 for arm and ask maintainer to check, sign, and upload. Thanks, -- Kenshi Muto [EMAIL PROTECTED]

sarge security status

2005-01-19 Thread Joey Hess
Looking at holes that are fixed in unstable but are still open in testing, from http://merkel.debian.org/~joeyh/testing-security.html : * playmidi 2.4debian-3 needed, have 2.4debian-2 for DSA-641-1 OOD on mipsel, 4 days old now * koffice 1:1.3.5-1 needed, have 1:1.3.4-1 for CAN-200

Re: sarge security status

2005-01-19 Thread Steve Langasek
On Thu, Jan 20, 2005 at 11:40:16AM +0900, Kenshi Muto wrote: > At Wed, 19 Jan 2005 21:22:19 -0500, > Joey Hess wrote: > > * namazu2 2.0.14-1 needed, have 2.0.13-4 for DSA-627-1 > > OOD on arm, *13* days old now. > I'll build namazu2 for arm and ask maintainer to check, sign, and upload. I

Re: sarge security status

2005-01-19 Thread Kenshi Muto
At Wed, 19 Jan 2005 21:22:19 -0500, Joey Hess wrote: > * namazu2 2.0.14-1 needed, have 2.0.13-4 for DSA-627-1 > OOD on arm, *13* days old now. I'll build namazu2 for arm and ask maintainer to check, sign, and upload. Thanks, -- Kenshi Muto [EMAIL PROTECTED] -- To UNSUBSCRIBE, email

sarge security status

2005-01-19 Thread Joey Hess
Looking at holes that are fixed in unstable but are still open in testing, from http://merkel.debian.org/~joeyh/testing-security.html : * playmidi 2.4debian-3 needed, have 2.4debian-2 for DSA-641-1 OOD on mipsel, 4 days old now * koffice 1:1.3.5-1 needed, have 1:1.3.4-1 for CAN-200