LTS work report, February 2016

2016-03-01 Thread Damyan Ivanov
Here's the summary of my work on Debian LTS for February 2016: * investigating about update of ntp * update libebml in squeeze-lts This is my first month working on Debian LTS and I managed to work only 3.9 hours out of the allocated 11.25. The reason for this was mostly me not trying hard

Re: working for wheezy-security until wheezy-lts starts

2016-03-01 Thread Moritz Muehlenhoff
On Tue, Mar 01, 2016 at 02:08:56PM +, Sébastien Delafond wrote: > On 2016-03-01, Mike Gabriel wrote: > > @Security Team: Shall we (LTS contributors) handle wheezy-security > > updates like described below until Debian wheezy LTS comes into play? > > > >o Pick a

kernel oops with debian 2.6.32-48squeeze18

2016-03-01 Thread John Gorham
Any help with the following would be greatly appreciated! - Symptoms: - Issues: - Existing and new inbound TCP connections failed. However, system did respond to TCP connect (good 3-way handshake...

Non-security uploads for wheezy-lts

2016-03-01 Thread Scott Kitterman
I understand that the plan is not to create a separate package suite for Wheezy as was done for Squeeze and to upload to wheezy-security instead. How are uploads that aren't strictly security uploads going to be handled? Specifically, I'm wondering what to do about clamav since we've been

Re: working for wheezy-security until wheezy-lts starts

2016-03-01 Thread Sébastien Delafond
On 2016-03-01, Mike Gabriel wrote: > @Security Team: Shall we (LTS contributors) handle wheezy-security > updates like described below until Debian wheezy LTS comes into play? > >o Pick a package that has open CVE issues in wheezy, e.g. from > above list >o

Re: Unsupported packages for Wheezy LTS

2016-03-01 Thread Markus Koschany
Am 29.02.2016 um 18:04 schrieb Raphael Hertzog: > On Mon, 29 Feb 2016, Markus Koschany wrote: >> Matthias Klose, the OpenJDK maintainer, stated that he intends to >> support OpenJDK 6 until Ubuntu 12.04 reaches EOL in April 2017 [1] and I >> think it should be feasible to mirror this approach for

Re: Wiki update LTS/Using and EOL announcement

2016-03-01 Thread Markus Koschany
Am 01.03.2016 um 13:16 schrieb Bonno Bloksma (list account): > Hi, > > On 2016-02-29 20:27, Paul Gevers wrote: >>> I know, but that is not what I meant. I meant (and wrote), upgrade via >>> wheezy. >> >> I think that (what you wrote ealier) would be a sensible recommendation to >> make. >> >>

RE: Wiki update LTS/Using and EOL announcement

2016-03-01 Thread Bonno Bloksma (list account)
Hi, On 2016-02-29 20:27, Paul Gevers wrote: >> I know, but that is not what I meant. I meant (and wrote), upgrade via >> wheezy. > > I think that (what you wrote ealier) would be a sensible recommendation to > make. > > We're only keeping Wheezy around for system setups that were established

[SECURITY] Debian 6 Squeeze has reached end-of-life

2016-03-01 Thread Markus Koschany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The Debian Long Term Support (LTS) Team hereby announces that Debian 6 ("Squeeze") support has reached its end-of-life on February 29, 2016, five years after its initial release on February 6, 2011. There will be no further security support for

Re: working for wheezy-security until wheezy-lts starts

2016-03-01 Thread Mike Gabriel
On Di 01 Mär 2016 08:44:08 CET, Guido Günther wrote: On Tue, Mar 01, 2016 at 07:15:28AM +, Mike Gabriel wrote: [..snip..] >>Issues that are unfixed in wheezy but fixed in squeeze: >>* aptdaemon-> CVE-2015-1323 >>* cakephp -> TEMP-000-698CF7 >>* dhcpcd