Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-11-02 Thread Cyril Brulebois
Hi, Daniel Kahn Gillmor (2018-10-29): > On Sun 2018-10-28 21:58:55 +, Adam D. Barratt wrote: > > I don't have any objections if you want to upload already, but it > > won't get accepted into p-u from stable-new until it's had the d-i > > ack. > > OK, it's uploaded now, in stable-new,

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Daniel Kahn Gillmor
On Sun 2018-10-28 21:58:55 +, Adam D. Barratt wrote: > I don't have any objections if you want to upload already, but it won't > get accepted into p-u from stable-new until it's had the d-i ack. OK, it's uploaded now, in stable-new, waiting for the d-i ack. thanks for your work on the stable

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Daniel Kahn Gillmor
On Sun 2018-10-28 10:58:17 -0400, Daniel Kahn Gillmor wrote: > On Sat 2018-10-27 16:47:27 +0100, Adam D. Barratt wrote: >> Are you planning on handling the enigmail upload as well? I can't see >> an open p-u bug for it so, given the timings, would suggest that start >> getting progressed ASAP so

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Adam D. Barratt
On Sun, 2018-10-28 at 10:58 -0400, Daniel Kahn Gillmor wrote: > On Sat 2018-10-27 16:47:27 +0100, Adam D. Barratt wrote: [...] > > I know you mentioned that the changes shouldn't affect gpgv > > (particularly as used in d-i), but the udeb still means that the > > upload > > needs an explicit ack,

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Daniel Kahn Gillmor
On Sat 2018-10-27 16:47:27 +0100, Adam D. Barratt wrote: > As it turns out, that was quite a lot of noise indeed - about 1/3 of > the ~3300 line diff, from my visual scan-and-chop. Apologies for the > delay, but I've finally managed to carve out a block of time to handle > this. apologies for the

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-27 Thread Adam D. Barratt
Control: tags -1 + confirmed d-i On Fri, 2018-10-05 at 17:48 -0500, Daniel Kahn Gillmor wrote: > I'd like to update the version of GnuPG in debian stable with a > series of targeted bugfixes (most of which are backported from > upstream). [...] > The debdiff contains some minor updates to patch

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Daniel Kahn Gillmor
Hi Adam-- On Tue 2018-10-23 16:18:05 +0100, Adam D. Barratt wrote: > Sure, but that's not what I said. My distinction was between including > the gnupg update in the point release versus pushing it more urgently > via stable-updates. I never implied the updates shouldn't be released at > all.

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Daniel Kahn Gillmor
On Tue 2018-10-23 20:00:06 +0100, Adam D. Barratt wrote: > From discussions elsewhere, I understand that the "raw" upstream > enigmail - i.e. installed via upstream's addons service - is actually > already compatible with the new Thunderbird version, and the problem > only affects the Debian

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Adam D. Barratt
On Tue, 2018-10-23 at 10:35 -0400, Daniel Kahn Gillmor wrote: > The fact that the upstream-supported version of enigmail that works > with the upcoming stretch version of thunderbird depends on these > fixes is, as you say, another reason to suggest inclusion in debian > stretch. >From

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Adam D. Barratt
On 2018-10-23 15:35, Daniel Kahn Gillmor wrote: Thanks to Adam for your ongoing work on the stable releases! I just wanted to clarify a few points here. On Tue 2018-10-23 08:57:08 +0100, Adam D. Barratt wrote: An issue is that the gnupg update itself doesn't really qualify for stable-updates

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Daniel Kahn Gillmor
Thanks to Adam for your ongoing work on the stable releases! I just wanted to clarify a few points here. On Tue 2018-10-23 08:57:08 +0100, Adam D. Barratt wrote: > An issue is that the gnupg update itself doesn't really qualify for > stable-updates any more than it qualifies for

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Adam D. Barratt
On 2018-10-21 12:48, Salvatore Bonaccorso wrote: Hi, On Sun, Oct 21, 2018 at 11:21:36AM +, Georg Faerber wrote: Hi, On 18-10-21 12:05:31, Moritz Mühlenhoff wrote: > That's all bugfixes related to enabling Enigmail and nothing in their > is itself security-related, so I think that's

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread ilf
Wow, thanks a lot for your awesome work on both enigmail and gnupg, dkg! I agree that this should be rolled out to users soon. The classic path of using "stretch-proposed-updates" means that it would land in the next point release (9.6). However, an ETA of that is "not yet planned", according

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-21 Thread Salvatore Bonaccorso
Hi, On Sun, Oct 21, 2018 at 11:21:36AM +, Georg Faerber wrote: > Hi, > > On 18-10-21 12:05:31, Moritz Mühlenhoff wrote: > > That's all bugfixes related to enabling Enigmail and nothing in their > > is itself security-related, so I think that's something for the point > > update, not

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-21 Thread Georg Faerber
Hi, On 18-10-21 12:05:31, Moritz Mühlenhoff wrote: > That's all bugfixes related to enabling Enigmail and nothing in their > is itself security-related, so I think that's something for the point > update, not security.debian.org That's quite unfortunate to hear, and I don't share this opinion

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-21 Thread Moritz Mühlenhoff
On Sat, Oct 20, 2018 at 10:43:31AM +0100, Adam D. Barratt wrote: > On Fri, 2018-10-05 at 17:48 -0500, Daniel Kahn Gillmor wrote: > > I'd like to update the version of GnuPG in debian stable with a > > series of targeted bugfixes (most of which are backported from > > upstream). > [...] > > I note

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-20 Thread Adam D. Barratt
On Fri, 2018-10-05 at 17:48 -0500, Daniel Kahn Gillmor wrote: > I'd like to update the version of GnuPG in debian stable with a > series of targeted bugfixes (most of which are backported from > upstream). [...] > I note that this is *not* itself a security fix -- these fixes do not > address a

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-15 Thread Jonas Meurer
Hello, again, thanks a lot to dkg for your hard work to bring Enigmail 2.0 to Stretch! Once again it's amazing to follow your work and see how thorough you are :) On Sun, 14 Oct 2018 18:58:33 -0400 Daniel Kahn Gillmor wrote: > Hi release team, security team: > > over in #910398, i wrote: > >

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-15 Thread Daniel Kahn Gillmor
Hi release team, security team: over in #910398, i wrote: On Fri 2018-10-05 17:48:10 -0500, Daniel Kahn Gillmor wrote: > I'd like to update the version of GnuPG in debian stable with a series > of targeted bugfixes (most of which are backported from upstream). > > There are four complementary

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-11 Thread Daniel Kahn Gillmor
On Thu 2018-10-11 13:02:18 +, Georg Faerber wrote: > Although I'm not using Thunderbird and Enigmail myself, I've rolled out > this fix to a couple of friends on Monday. So far, they're pretty happy, > no problems found. thanks for this testing and feedback, Georg! --dkg

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-11 Thread Georg Faerber
Hi dkg, all, Thanks a lot for your hard work on this, highly appreciated. On 18-10-05 17:48:10, Daniel Kahn Gillmor wrote: > Testing > === > > I've tested these changes on an x86_64 system running debian stretch. > The GnuPG test suite all passes, and an updated/backported version of >

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-05 Thread Daniel Kahn Gillmor
Package: release.debian.org User: release.debian@packages.debian.org X-Debbugs-Cc: pkg-gnupg-ma...@lists.alioth.debian.org, secur...@debian.org Usertags: pu Tags: stretch Severity: normal Control: affects -1 src:gnupg2 enigmail Control: block 909000 -1 I'd like to update the version of GnuPG