fixing CVE-2010-0395 for testing

Hi, same procesdure like last time. A few dasys (here: 2) before security disclosure something happens[1] which blocks sid-testing migration (and thus the security fix) for unknown time. I could have uploaded 1:3.2.1-11 to sid just it won't go into testing due to

Re: fixing CVE-2010-0395 for testing

Hi, * Rene Engelhard r...@debian.org [2010-06-06 14:49]: same procesdure like last time. A few dasys (here: 2) before security disclosure something happens[1] which blocks sid-testing migration (and thus the security fix) for unknown time. I could have uploaded 1:3.2.1-11 to sid just it

Re: fixing CVE-2010-0395 for testing

Hi, On Sun, Jun 06, 2010 at 03:22:36PM +0200, Nico Golde wrote: Would it be possible to upload a minimal version only carrying the security patch to testing-security? Possible, yes. I'd like to avoid that, though if possible. It would need a rebuild, whereas I can upload -11 as-is already

Re: fixing CVE-2010-0395 for testing

Hi, On Sun, Jun 06, 2010 at 03:32:26PM +0200, Rene Engelhard wrote: (and it fixes some other important stuff, too, as you see in the changelog. No XML signing support *only* on kfreebsd-i386 is, umm, bad. Same as dependency differences because of the bashisms...) Oh, and -10 contains the

Re: fixing CVE-2010-0395 for testing

[ -release readers: the original, including the diff, can be found at http://lists.debian.org/debian-security/2010/06/msg1.html ] On Sun, 2010-06-06 at 12:48 +, Rene Engelhard wrote: I could have uploaded 1:3.2.1-11 to sid just it won't go into testing due to

Re: fixing CVE-2010-0395 for testing

Hi, On Sun, Jun 06, 2010 at 09:17:58PM +0100, Adam D. Barratt wrote: * debian/rules: - fix variable to not add kfreebsd-i386 to OOO_MONO_ARCHS twice but to actually add it to OOO_MOZILLA_ARCHS Yes. (What you mentioned is debian/control regenerated with this) Grüße/Regards, René --

Re: fixing CVE-2010-0395 for testing

Hi, On Sun, Jun 06, 2010 at 03:32:26PM +0200, Rene Engelhard wrote: Would it be possible to upload a minimal version only carrying the security patch to testing-security? Possible, yes. I'd like to avoid that, though if possible. It would need a rebuild, whereas I can upload -11 as-is

Quesoglc embedded glew/fribidi copies fixed

Hi, Quesoglc is listed in embedded-code-copies as embedding fribidi and glew. Since version 0.7.2-2, quesoglc no longer builds and links against the embedded glew copy, and since 0.7.2-3, it removes the sources for both glew and fribidi during the clean rule to ensure they are not used. Please

DSA-2056-1 vs. tracker

Hello everybody, there seems to be something missing in the tracker data [1] for DSA-2056-1 [2] ... Please fix this inconsistency. [1] http://security-tracker.debian.org/tracker/DSA-2056-1 [2] http://lists.debian.org/debian-security-announce/2010/msg00099.html --