Re: RFS: mantis (updated package w/ security fix)

2007-06-20 Thread Thijs Kinkhorst
Hi,

On Wednesday 20 June 2007 04:12, Kevin Coyner wrote:
 I believe I've prepared this appropriately. In debian/changelog I
 set urgency to 'high'. I know this will get it into unstable on an
 expedited basis, but am unsure how to get the fix into stable.

It looks good, I've uploaded your package. A small detail I would change for 
the next time: your patch under debian/patches also contains a hunk only 
changing whitespace at the end of the file. I would leave that hunk out.

 I read:

 http://www.us.debian.org/doc/developers-reference/ch-pkgs.en.html#s-bug-sec
urity-building

 and my impression is that the next step is to contact
 [EMAIL PROTECTED] Please let me know if this is correct.

It should normally be correct, but as it seems the security team has been 
proactive about this and have already made an upload to stable-security 
yesterday evening (DSA-1315-1). So that's taken care of.

You were right that you indeed would have to contact [EMAIL PROTECTED] 
to make uploads to stable-security. They mostly can also sponsor your upload 
for stable-security if that's needed.


thanks,
Thijs


pgpgFgxh904eY.pgp
Description: PGP signature


RFS: mantis (updated package w/ security fix)

2007-06-19 Thread Kevin Coyner


I am looking for a sponsor for the new version 1.73-4 of my package
libphp-phpmailer. My normal sponsor for this package seems
unavailable presently and this upload is rather important in that it
fixes a security hole.  See
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=429179 regarding
CVE-2007-3215.

It builds this binary package:
libphp-phpmailer - full featured email transfer class for PHP

I believe I've prepared this appropriately. In debian/changelog I
set urgency to 'high'. I know this will get it into unstable on an
expedited basis, but am unsure how to get the fix into stable.

I read:

http://www.us.debian.org/doc/developers-reference/ch-pkgs.en.html#s-bug-security-building

and my impression is that the next step is to contact
[EMAIL PROTECTED] Please let me know if this is correct.

I have successfully built the new package in both pbuilder stable
and pbuilder unstable. It is lintian/linda clean in both cases.

The package can be found at:

http://mentors.debian.net/debian/pool/main/l/libphp-phpmailer/libphp-phpmailer_1.73-4.dsc

Many thanks,
Kevin

-- 
Kevin Coyner  GnuPG key: 1024D/8CE11941


signature.asc
Description: Digital signature


Re: RFS: mantis (updated package w/ security fix)

2007-06-19 Thread Justin Pryzby
On Tue, Jun 19, 2007 at 10:12:47PM -0400, Kevin Coyner wrote:
 
 
 I am looking for a sponsor for the new version 1.73-4 of my package
 libphp-phpmailer. My normal sponsor for this package seems
 unavailable presently and this upload is rather important in that it
 fixes a security hole.  See
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=429179 regarding
 CVE-2007-3215.
 
 It builds this binary package:
 libphp-phpmailer - full featured email transfer class for PHP
 
 I believe I've prepared this appropriately. In debian/changelog I
 set urgency to 'high'. I know this will get it into unstable on an
 expedited basis, but am unsure how to get the fix into stable.
You meant: testing, not unstable.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: RFS: mantis (updated package w/ security fix)

2007-06-19 Thread Kevin Coyner


On Tue, Jun 19, 2007 at 10:21:14PM -0400, Justin Pryzby wrote..

  I believe I've prepared this appropriately. In debian/changelog
  I set urgency to 'high'. I know this will get it into unstable
  on an expedited basis, but am unsure how to get the fix into
  stable.
 You meant: testing, not unstable.

Yes, you are correct.

-- 
Kevin Coyner  GnuPG key: 1024D/8CE11941


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]