Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-20 Thread Daniel Kahn Gillmor
On Tue 2018-11-20 15:47:00 +, Ben Hutchings wrote: > On Tue, 2018-11-20 at 10:28 -0500, Antoine Beaupré wrote: >> On 2018-11-20 15:19:45, Ben Hutchings wrote: >> > On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: > [...] >> > > I think this is overengineered. I still haven't heard exac

Re: unclaiming packages claimed for 3 weeks or more (Re: november report)

2018-11-20 Thread Santiago R.R.
Hi, El 20/11/18 a las 16:17, Holger Levsen escribió: > Hi, > > On Mon, Nov 19, 2018 at 06:50:16PM -0500, Antoine Beaupré wrote: > > Automatic unclaimer > > --- > > > > After an internal discussion about work procedures, a friend pointed me > > at the [don't lick the cookie][6] ar

Re: unclaiming packages claimed for 3 weeks or more (Re: november report)

2018-11-20 Thread Holger Levsen
Hi Hugo, On Tue, Nov 20, 2018 at 05:46:21PM +0100, Hugo Lefeuvre wrote: > > -libav (Hugo Lefeuvre) > > +libav > > AFAICS this is a legit unclaim. Hugo, would you mind to unclaim this? > I don't mind. This is probably the best thing to do. ok, done, thanks. And: feel free to reclaim this package a

Re: unclaiming packages claimed for 3 weeks or more (Re: november report)

2018-11-20 Thread Hugo Lefeuvre
Hi Holger, > So I ran it asking it to unclaim packages which didnt see activity in > dla-needed.txt for more than 3 weeks. These are the results from running > ./bin/review-update-needed --lts --unclaim 1814400 > > -libav (Hugo Lefeuvre) > +libav > last NOTE: 20180529: Just contacted some of the

unclaiming packages claimed for 3 weeks or more (Re: november report)

2018-11-20 Thread Holger Levsen
Hi, On Mon, Nov 19, 2018 at 06:50:16PM -0500, Antoine Beaupré wrote: > Automatic unclaimer > --- > > After an internal discussion about work procedures, a friend pointed me > at the [don't lick the cookie][6] article which I found really > interesting. The basic idea is that our p

Re: testing openssl for Jessie LTS

2018-11-20 Thread Markus Koschany
Hi Thorsten, Am 19.11.18 um 20:04 schrieb Thorsten Alteholz: > Hi everybody, > > I uploaded version 1.0.1t-1+deb8u10 of openssl to: > > https://people.debian.org/~alteholz/packages/jessie-lts/openssl/ > > Please give it a try and tell me about any problems you met. [...] I will test it tomorr

feedback on review-update-needed --lts --unclaim (Re: november report)

2018-11-20 Thread Holger Levsen
hi, this reply is mostly about using the tool itself, see below. I will now write another mail about the results from using it... On Mon, Nov 19, 2018 at 06:50:16PM -0500, Antoine Beaupré wrote: > Automatic unclaimer > --- > > After an internal discussion about work procedures, a

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-20 Thread Ben Hutchings
On Tue, 2018-11-20 at 10:28 -0500, Antoine Beaupré wrote: > On 2018-11-20 15:19:45, Ben Hutchings wrote: > > On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: [...] > > > I think this is overengineered. I still haven't heard exactly what the > > > problem would be with upgrading those libra

Re: automating process for publishing DLAs on the website

2018-11-20 Thread Holger Levsen
On Mon, Nov 19, 2018 at 07:07:26PM -0500, Antoine Beaupré wrote: > The process broke down a while back, and reasons don't matter. We need > to figure out how to fix this. > > So I opened #859122 to import the missing DLAs and I've made good > progress. > > But I've opened this bug report (#859123

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-20 Thread Antoine Beaupré
On 2018-11-20 15:19:45, Ben Hutchings wrote: > On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: >> On 2018-11-13 22:02:45, Ben Hutchings wrote: >> > On Tue, 2018-11-13 at 12:31 -0500, Daniel Kahn Gillmor wrote: >> > > On Mon 2018-11-12 15:16:39 -0500, Antoine Beaupré wrote: >> > > >> > >

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-20 Thread Ben Hutchings
On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: > On 2018-11-13 22:02:45, Ben Hutchings wrote: > > On Tue, 2018-11-13 at 12:31 -0500, Daniel Kahn Gillmor wrote: > > > On Mon 2018-11-12 15:16:39 -0500, Antoine Beaupré wrote: > > > > > > > * libgcrypt20 (part of GnuTLS, 1.6 -> 1.7) > > >

Re: How to handle undetermined

2018-11-20 Thread Holger Levsen
Hi Ola, On Sun, Nov 18, 2018 at 10:30:16PM +0100, Ola Lundqvist wrote: > > > What I did was to check CVE-2016-10729 and my conclusion that I cannot > > > reproduce the problem. > > can you reproduce the bug in sid or stretch? > I have not tried, but I doubt I will succeed. I think the same securit