On Tue, 31 Dec 2013, Moritz Mühlenhoff wrote: > You're referring to shipping the mediawiki 1.19.x branch for stable security > updates? That sounds like a probable candidate from a quick glance. Please > send a mail to [email protected], not everyone reads debian-project
More or less. I want to fix a few non-security bugs first (see below for that), and once that has hit stable, will want to follow up with upstream 1.19.x LTS uploads but no further non-security changes, unless they are RC or otherwise important. On Tue, 31 Dec 2013, Cyril Brulebois wrote: > Thorsten Glaser <[email protected]> (2013-12-31): > > Where do I send the diffs for prior review to? And where do I upload to > > (stable-proposed-updates?)? > > http://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable So I guess this is what I need to do (discuss, then upload to stable). > Make sure your changes already hit unstable (possibly testing) if > relevant, and that the BTS has proper version info otherwise. Right. My plan for this was to start with a debdiff from stable to unstable, then strip down any unrelated or unnecessary changes. I’ve done this for mediawiki-extensions already, which gets me 216 lines or 10.4K of unidiff plus changelog entry. I’d like to fix #698438 (probably very important), #711887 (one-liner from upstream that can just ride on this, severity:important), broken VCS-* URLs, and the mediawiki-extensions half of #719208 with this; the upload will need to be versioned like 3.5~deb7u1 due to package relations (although this is larger than 3.5~bpo which may not be so nice; it needs to be larger than 3.5~ though). In mediawiki I’d like to fix all the security issues (mostly by using the latest upstream LTS branch), plus: - replace non-DFSG-free Creative Commons icons (RC) - fixes to vcs-* and watch file - fixes to README.Debian (#705107) and d/copyright - #716884 (somewhat security-related) - #719208 (RC, needs mediawiki-extensions upload to be coordinated) Unsure whether to also include the Apache 2.4 compatibility. Maybe people will want to run a backported Apache 2.4? I can put together a proposed debdiff of all that too, and then put them into the bug against release.debian.org and have both reviewed (and, if necessary, things stripped out), if that’s ok and everyone understands I’d start with the larger changeset first. bye, //mirabilos -- tarent solutions GmbH Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/ Tel: +49 228 54881-393 • Fax: +49 228 54881-314 HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941 Geschäftsführer: Boris Esser, Sebastian Mancke -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
