Re: Bug#746946: wheezy-pu: package distro-info-data/0.23~deb7u1

2015-04-16 Thread Moritz Mühlenhoff
On Thu, Apr 16, 2015 at 04:02:23PM +0200, Raphael Hertzog wrote: > Yes there are packages which are unsupported in Squeeze but very much > like there are unsupported packages in Wheezy right now: Also, all other distros with long support have some level of reduced support over time, see for exampl

Re: Bug#746946: wheezy-pu: package distro-info-data/0.23~deb7u1

2015-04-16 Thread Raphael Hertzog
[ Moving it to -lts to continue the discussion ] Hi, On Thu, 16 Apr 2015, Stuart Prescott wrote: > > cf http://wiki.debian.org/LTS > > There is an on-going confusion in the wider Debian community about whether > squeeze is still supported or EOL. Where did you notice any confusion? > The sque

Re: squeeze update of commons-httpclient

2015-04-16 Thread Markus Koschany
On 16.04.2015 09:00, Thijs Kinkhorst wrote: [...] > I can take care of this, but did you also prepare a package for wheezy? If > so, I missed it. > Hi Thijs, I already filed a bug report for wheezy against release.debian.org. [1] The security team has marked this CVE as "no-dsa". The debdiff for

Re: squeeze update of commons-httpclient

2015-04-16 Thread Thijs Kinkhorst
On Wed, April 15, 2015 23:10, Markus Koschany wrote: > Hi, > > I have prepared a debdiff for commons-httpclient that addresses three > CVEs namely CVE-2012-5783, CVE-2012-6153 and CVE-2014-3577. The > differences between the versions in wheezy, jessie and sid are minor > since we use the same upstr