Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-19 Thread Frank Lichtenheld
On Mon, Sep 19, 2005 at 03:16:41AM -0700, Steve Langasek wrote: > On Wed, Sep 14, 2005 at 10:00:05AM -0400, Joey Hess wrote: > > Agreed, although I think you might as well let the maintainers of ida > > and motv have a crack at it too. > > So Frank has already NMUed this with a proposed fix for th

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-19 Thread Steve Langasek
On Wed, Sep 14, 2005 at 10:00:05AM -0400, Joey Hess wrote: > > Feel free to add urgent hints for any of these. > None of them are that serious holes, IRC. Hmm, if they're not serious enough to bump package urgency for, maybe it's also not useful to have that part of the list posted to d-release.

Re: [Secure-testing-team] Re: summary of what's blocking security fixes

2005-09-15 Thread Nathanael Nerode
CC:ing all maintainers. ^^^ Not AFAICT? Yeah, I didn't. I looked at ntp and realized that it had deeper problems, then forgot to -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-15 Thread Moritz Muehlenhoff
Andreas Barth wrote: > > > 4:3.3.2-6.2 seems to be in NEW? And is blocking kdegraphics below. > > > > Moritz Muehlenhoff wrote (privately): > > > But according to http://ftp-master.debian.org/new.html it is in > > > t-p-u? And it's not shown in the PTS either? > > > And why would it need to go t

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Andreas Barth
* Joey Hess ([EMAIL PROTECTED]) [050914 23:12]: > Adeodato Simó wrote: > > > kdelibs > > > kde transition > > > > 4:3.3.2-6.2 seems to be in NEW? And is blocking kdegraphics below. > > Moritz Muehlenhoff wrote (privately): > > But according to http://ftp-master.debian.org/new.html it is in >

Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Joey Hess
Adeodato Simó wrote: > > kdelibs > > kde transition > > 4:3.3.2-6.2 seems to be in NEW? And is blocking kdegraphics below. Moritz Muehlenhoff wrote (privately): > But according to http://ftp-master.debian.org/new.html it is in > t-p-u? And it's not shown in the PTS either? > And why would i

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Matthias Klose
Joey Hess writes: > > > python2.1 > > > alpha build succeeded 2 weeks ago but gone missing > > > mips, mipsel, powerpc builds ditto > > > blocked by gmp > > > python2.2 > > > FTBFS m68k (ICE) > > > FTBFS hppa > > > blocked by gmp > > > > No hope that we can get rid of these yet...? >

Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Matthias Klose
Joey Hess writes: > RM summary: m68k is killing us with ICE after ICE and contributing to > blocking hald of the fixes. The transitions arn't hurting as much after > the last heroic britney run, although kde/qt is of course a problem. updated gcc-4.0 packages, which should fix some of the ICEs are

Re: [Secure-testing-team] Re: summary of what's blocking security fixes

2005-09-14 Thread Javier Fernández-Sanguino Peña
On Wed, Sep 14, 2005 at 12:02:29AM -0400, Nathanael Nerode wrote: > > >lm-sensors > >23 days old > >indirectly blocked by perl > Hmm. No idea how long perl will take, so this probably deserves an upload > if the vulnerability is serious enough. The vulnerability is not serious en

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Joey Hess
Steve Langasek wrote: > > bzip > > 8/10 days old > > chmlib > > 3/10 days old > > courier > > too young > > gxine > > too young > > squid > > too young > > sqwebmail > > too young > > Feel free to add urgent hints for any of these. None of them are that serious holes, IRC.

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Steve Langasek
On Wed, Sep 14, 2005 at 11:05:08AM +0200, Moritz Muehlenhoff wrote: > > > ntp > > > 177 days old > > > 3 RC bugs, max 98 days old, none with responses from maintainers > > > recommend removal from testing (and/or debian) > > Are these different security bugs than the ones already fixed via >

Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Adeodato Simó
* Joey Hess [Tue, 13 Sep 2005 23:45:52 -0400]: > kdegraphics > kde transtion 4:3.3.2-2sarge1 was propagated to t-p-u, but not accepted because of #325254 (uninstallable on powerpc). Anyway, 4:3.3.2-3 is now in t-p-u and waiting for buildds (haven't seen any, though). > kdelibs >

Re: [Secure-testing-team] Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Moritz Muehlenhoff
Steve Langasek wrote: > > mozilla-thunderbird > > 41 days old > > FTBFS on alpha, arm, m68k > > ... with a patch in the BTS, if someone wants to NMU... The maintainer posted a followup to the firefox side of the latest Mozilla IDN buffer overflow, so I very much suspect he's currently pre

Re: summary of what's blocking security fixes from testing

2005-09-14 Thread Mark Brown
On Tue, Sep 13, 2005 at 11:45:52PM -0400, Joey Hess wrote: > Another pass over security holes that are fixed in unstable but not > testing. Not sure if these are still useful to send to -release. There's also zlib, which is held up in both testing-proposed-updates and unstable by missing builds.

Re: [Secure-testing-team] summary of what's blocking security fixes from testing

2005-09-14 Thread Moritz Muehlenhoff
Joey Hess wrote: > kdeedu > FTBFS on arm (ICE) > missing hppa and m68k builds > kdegraphics > kde transtion I had a look at these, but it's worth a fix, xpdf has been more critical, because someone could indirectly mess with the print spooler, but kpdf as a simple app doesn't

Re: [Secure-testing-team] Re: summary of what's blocking security fixes

2005-09-14 Thread Steve Langasek
On Wed, Sep 14, 2005 at 12:02:29AM -0400, Nathanael Nerode wrote: > To quote Steve Langasek: > # waits for efax-gtk,timfx to be build on m68k, > # gnomoradio,libgdamm1.3,libpanelappletmm2.6,lostirc,quickplot transitioned > Bugs have been filed against the packages needing transitioned uploads. > NM

Re: summary of what's blocking security fixes from testing

2005-09-13 Thread Steve Langasek
On Tue, Sep 13, 2005 at 11:45:52PM -0400, Joey Hess wrote: > Another pass over security holes that are fixed in unstable but not > testing. Not sure if these are still useful to send to -release. Yes, I think they are. > Testing team summary: well, of these asterisk, inkscape, some kde stuff, > l

Re: summary of what's blocking security fixes

2005-09-13 Thread Nathanael Nerode
Joey Hess wrote: >RM summary: m68k is killing us with ICE after ICE and contributing to >blocking hald of the fixes. The transitions arn't hurting as much after >the last heroic britney run, although kde/qt is of course a problem. Time to declare m68k broken. >Testing team summary: well, of these

summary of what's blocking security fixes from testing

2005-09-13 Thread Joey Hess
Another pass over security holes that are fixed in unstable but not testing. Not sure if these are still useful to send to -release. RM summary: m68k is killing us with ICE after ICE and contributing to blocking hald of the fixes. The transitions arn't hurting as much after the last heroic britney