Bug#322133: still not fixed (and UTFC)

2005-09-26 Thread Christian Hammers
Hello Joey

(first, what means UTFC in the subject?)

On 2005-09-25 Joey Hess wrote:
  Done. The packages have just been uploaded, I overlooked this bug report
  though. Will close it when the packages are accepted. Martin Schulze is
  working on the DSA.
 
 No, close your bugs in the changelog. This avoids massively wasting my
 time and erm, lets us know the bug was fixed.

mysql-dfsg-4.1 was affected and needs a DSA. Would it be correct if I
close the bug in unstable also the bug is still present in stable?
(I could have used found tags though).

The CAN-2005-2558 is mentioned in the debian/changelog of the unstable
uploads for reference.


 Which it wasn't btw, the latest version of mysql-dfsg in the archive was
 released this May.

The unstable version has had build problems for the last months on some
archs (and I was on holyday when the bug was found). Currently I try to
get someone from the s390 team to install me the build-deps in a dchroot
but [EMAIL PROTECTED] seems to go to /dev/null :-(

Anyway I'm working on s390 for unstable/testing and waiting for Martin
Schulze to get the DSA out.

bye,

-christian-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#322133: still not fixed (and UTFC)

2005-09-26 Thread Joey Hess
Christian Hammers wrote:
 (first, what means UTFC in the subject?)

Use The  Changelog.

 mysql-dfsg-4.1 was affected and needs a DSA. Would it be correct if I
 close the bug in unstable also the bug is still present in stable?
 (I could have used found tags though).

Just use Closes: in the chanbgelog. Belive it or not, the BTS will do
the right thing. See recent posts to debian-devel-announce.

  Which it wasn't btw, the latest version of mysql-dfsg in the archive was
  released this May.
 
 The unstable version has had build problems for the last months on some
 archs (and I was on holyday when the bug was found). Currently I try to
 get someone from the s390 team to install me the build-deps in a dchroot
 but [EMAIL PROTECTED] seems to go to /dev/null :-(
 
 Anyway I'm working on s390 for unstable/testing and waiting for Martin
 Schulze to get the DSA out.

I do not understand why you are waiting to upload a fix just because
s390 doesn't build. mysql-dfsg 4.0.24-10 is still vulnerable in unstable
for all architectures.

-- 
see shy jo


signature.asc
Description: Digital signature


Bug#322133: still not fixed (and UTFC)

2005-09-26 Thread Christian Hammers
Hello Joey

On 2005-09-26 Joey Hess wrote:
 Just use Closes: in the chanbgelog. Belive it or not, the BTS will do
 the right thing. See recent posts to debian-devel-announce.
Cool...

 I do not understand why you are waiting to upload a fix just because
 s390 doesn't build. mysql-dfsg 4.0.24-10 is still vulnerable in unstable
 for all architectures.

(actually I got it wrong, it was powerpc not s390, but doesn't matter here)

mysql-server (4.0.x) has been superceeded by mysql-server-4.1 which provides
an empty transitional package called mysql-server since version 4.1.14
which struggles to get into testing though. Since then the mysql-dfsg source
is only used to produce libmysqlclient12 which should be replaced by
libmysqlclient14 soon (release-team asked me to hold that transition back
so I wait until the latest 4.1 is in testing and then ask again).

As the security bugs do only affect the server I did not upload a new
4.0.x version to unstable.

As stable do contain 4.0.x I did not add a not found 4.0.24 to the BTS.
I know that this is not easily visible so if there is any tag combination
that would help you, please let me know.

(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322133 contains a matrix
of all used mysql versions since woody)

bye,

-christian-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#322133: still not fixed (and UTFC)

2005-09-26 Thread Steve Langasek
On Mon, Sep 26, 2005 at 09:40:02AM +0200, Christian Hammers wrote:
 On 2005-09-25 Joey Hess wrote:
   Done. The packages have just been uploaded, I overlooked this bug report
   though. Will close it when the packages are accepted. Martin Schulze is
   working on the DSA.

  No, close your bugs in the changelog. This avoids massively wasting my
  time and erm, lets us know the bug was fixed.

 mysql-dfsg-4.1 was affected and needs a DSA. Would it be correct if I
 close the bug in unstable also the bug is still present in stable?
 (I could have used found tags though).

 The CAN-2005-2558 is mentioned in the debian/changelog of the unstable
 uploads for reference.

  Which it wasn't btw, the latest version of mysql-dfsg in the archive was
  released this May.

 The unstable version has had build problems for the last months on some
 archs (and I was on holyday when the bug was found). Currently I try to
 get someone from the s390 team to install me the build-deps in a dchroot
 but [EMAIL PROTECTED] seems to go to /dev/null :-(

[EMAIL PROTECTED] points to the party responsible for maintaining the
autobuilder for that architecture, it does *not* point to someone who
manages user chroots on the porter machine.  For that, please contact
debian-admin.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/


signature.asc
Description: Digital signature


Bug#322133: still not fixed (and UTFC)

2005-09-26 Thread Christian Hammers
Hello Steve

On 2005-09-26 Steve Langasek wrote:
 [EMAIL PROTECTED] points to the party responsible for maintaining the
 autobuilder for that architecture, it does *not* point to someone who
 manages user chroots on the porter machine.  For that, please contact
 debian-admin.

Ok, contacted them. Would be so much easier if the apt-get build-dep
command would be available to everybody...

thanks,

-christian-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#322133: still not fixed (and UTFC)

2005-09-25 Thread Joey Hess
 Done. The packages have just been uploaded, I overlooked this bug report
 though. Will close it when the packages are accepted. Martin Schulze is
 working on the DSA.

No, close your bugs in the changelog. This avoids massively wasting my
time and erm, lets us know the bug was fixed.

Which it wasn't btw, the latest version of mysql-dfsg in the archive was
released this May.

-- 
see shy jo


signature.asc
Description: Digital signature