Your message dated Thu, 28 Feb 2013 20:52:39 +0100
with message-id <20130228195239.gn5...@radis.cristau.org>
and subject line Re: Bug#701833: unblock: pigz/2.2.4-2
has caused the Debian Bug report #701833,
regarding unblock: pigz/2.2.4-2
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
701833: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701833
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian....@packages.debian.org
Usertags: unblock
Hi RT,
Package pigz/2.2.4-2 was uploaded to sid fixing CVE-2013-0296 (#700608).
The maintainer also added hardening flags. This may be on the border of
acceptable/unacceptable for an unblock. Please let me know either way.
If unacceptable I propose that I make an upload to wheezy-security as a
guinea pig(z) for the setup, as according to my information it should
now be operational.
unblock pigz/2.2.4-2
Thanks,
Thijs
--- End Message ---
--- Begin Message ---
On Thu, Feb 28, 2013 at 20:39:10 +0100, Eduard Bloch wrote:
> Hallo,
> * Julien Cristau [Thu, Feb 28 2013, 05:14:08PM]:
> > On Wed, Feb 27, 2013 at 21:05:45 +0100, Eduard Bloch wrote:
> >
> > > Hallo,
> > > * Thijs Kinkhorst [Wed, Feb 27 2013, 06:52:05PM]:
> > >
> > > > Package pigz/2.2.4-2 was uploaded to sid fixing CVE-2013-0296 (#700608).
> > > >
> > > > The maintainer also added hardening flags. This may be on the border of
> > > > acceptable/unacceptable for an unblock. Please let me know either way.
> > >
> > > Thanks for reporting. If the hardening flags are not acceptable I can
> > > just build another revision disabling them. Just tell me soon enough.
> > >
> > I'd prefer to have the security fix on its own.
>
> Ok, here we go. pigz 2.2.4-3 is uploaded, debian-diff and debdiff
> attached here (note: debdiff gets slightly confused on hardlinks).
>
Much appreciated, thanks. Unblocked.
Cheers,
Julien
signature.asc
Description: Digital signature
--- End Message ---
