Re: QEMU in Jessie: call for testers

2018-11-22 Thread Hugo Lefeuvre
> > I have prepared a preliminary package for qemu to fix most of currently > > open CVEs (among those that have a patch or have been fixed in stretch). > > I would be glad if someone could give it a try. It is found in the usual > > place: > > > > deb https://people.debian.org/~santiago/debian

Re: Security updates of keepalived and icecast2

2018-11-22 Thread Abhijith PA
Hi, On Friday 23 November 2018 04:06 AM, Markus Koschany wrote: > Hello Abhijith, > > I have just reviewed and uploaded your security updates of keepalived > and icecast2. All looked good to me. I have not sent the announcements > yet because I assume you will take care of them as usual. Thanks f

Security updates of keepalived and icecast2

2018-11-22 Thread Markus Koschany
Hello Abhijith, I have just reviewed and uploaded your security updates of keepalived and icecast2. All looked good to me. I have not sent the announcements yet because I assume you will take care of them as usual. Thanks for the updates. Regards, Markus signature.asc Description: OpenPGP dig

Re: QEMU in Jessie: call for testers

2018-11-22 Thread Lucas Kanashiro
Hi Santiago, On 11/21/18 7:23 AM, Santiago R.R. wrote: > Hi there, > > I have prepared a preliminary package for qemu to fix most of currently > open CVEs (among those that have a patch or have been fixed in stretch). > I would be glad if someone could give it a try. It is found in the usual > pla

Re: feedback on review-update-needed --lts --unclaim (Re: november report)

2018-11-22 Thread Holger Levsen
On Thu, Nov 22, 2018 at 11:25:52AM -0500, Antoine Beaupré wrote: > > However no changes were made. > > Yeah, that's a total, typical, python unicode crash. :p Could you give > me more information on your locale? It looks like you don't have a UTF-8 > locale, which will, naturally, cause problems w

Re: unclaiming packages claimed for 3 weeks or more (Re: november report)

2018-11-22 Thread Holger Levsen
On Thu, Nov 22, 2018 at 11:54:16AM -0500, Antoine Beaupré wrote: > Right. That's the one I had in mind as well. :) :) > So how *do* we make that "whitelist"? Commandline param? And what will > it list? Packages? People? Package/people combination? commandline param with a list of (src) packages

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-22 Thread Antoine Beaupré
On 2018-11-22 17:32:09, Holger Levsen wrote: > On Thu, Nov 22, 2018 at 10:54:41AM -0500, Antoine Beaupré wrote: >> On 2018-11-20 12:55:16, Daniel Kahn Gillmor wrote: >> > All that said, i don't think that upgrading jessie to the versions of >> > these libraries that are in debian stretch will break

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-22 Thread Holger Levsen
On Thu, Nov 22, 2018 at 10:54:41AM -0500, Antoine Beaupré wrote: > On 2018-11-20 12:55:16, Daniel Kahn Gillmor wrote: > > All that said, i don't think that upgrading jessie to the versions of > > these libraries that are in debian stretch will break jessie. I do wish > > we had more substantive au

Re: unclaiming packages claimed for 3 weeks or more (Re: november report)

2018-11-22 Thread Antoine Beaupré
On 2018-11-20 16:17:57, Holger Levsen wrote: > Hi, > > So I ran it asking it to unclaim packages which didnt see activity in > dla-needed.txt for more than 3 weeks. These are the results from running > ./bin/review-update-needed --lts --unclaim 1814400 [...] > -linux (Ben Hutchings) > +linux > a

Re: feedback on review-update-needed --lts --unclaim (Re: november report)

2018-11-22 Thread Antoine Beaupré
On 2018-11-20 16:06:53, Holger Levsen wrote: > hi, > > this reply is mostly about using the tool itself, see below. I will now write > another mail about the results from using it... > [...] > So, third, what did "./bin/review-update-needed --unclaim --lts" do? Too > much, so I ran (in a sid schr

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-22 Thread Antoine Beaupré
On 2018-11-20 12:55:16, Daniel Kahn Gillmor wrote: > All that said, i don't think that upgrading jessie to the versions of > these libraries that are in debian stretch will break jessie. I do wish > we had more substantive autopkgtest-style coverage in jessie, so that we > could feel more confiden