Re: Match ecosystems with limited support in debian-security-support

2021-04-17 Thread Holger Levsen
On Sat, Apr 17, 2021 at 05:42:11PM +0200, Sylvain Beucler wrote: > What approach would you suggest to make users aware that such packages do > not have security support, through default 'check-security-support'? that's a tricky question, I'll pass for now... however I want to respond to the

Re: FTBFS on i386

2021-04-17 Thread Salvatore Bonaccorso
Hi, On Sat, Apr 17, 2021 at 05:11:27PM +0200, Salvatore Bonaccorso wrote: > Hi, > > On Sat, Apr 17, 2021 at 08:30:51PM +0530, Utkarsh Gupta wrote: > > Hi Security team, > > > > On Sat, Apr 17, 2021 at 6:29 PM Anton Gladky wrote: > > > I prepared and uploaded python2.7_2.7.13-2+deb9u5, fixing >

[SECURITY] [DLA 2628-1] python2.7 security update

2021-04-17 Thread Anton Gladky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian LTS Advisory DLA-2628-1debian-...@lists.debian.org https://www.debian.org/lts/security/ Anton Gladky April 17, 2021

Re: FTBFS on i386

2021-04-17 Thread Anton Gladky
Thank you all for the very quick response and help! It is built now successfully! Have a nice weekend. Anton Am Sa., 17. Apr. 2021 um 18:53 Uhr schrieb Utkarsh Gupta : > Hi Salvatore, > > On Sat, Apr 17, 2021 at 10:19 PM Salvatore Bonaccorso > wrote: > > > I have given it back to try a

Re: FTBFS on i386

2021-04-17 Thread Utkarsh Gupta
Hi Salvatore, On Sat, Apr 17, 2021 at 10:19 PM Salvatore Bonaccorso wrote: > > I have given it back to try a rebuild. > Should be built now. Awesome, thanks a bunch for your help! - u

Accepted python2.7 2.7.13-2+deb9u5 (source) into oldstable

2021-04-17 Thread Debian FTP Masters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 16 Apr 2021 16:02:03 +0200 Source: python2.7 Architecture: source Version: 2.7.13-2+deb9u5 Distribution: stretch-security Urgency: medium Maintainer: Matthias Klose Changed-By: Anton Gladky Changes: python2.7

Re: Match ecosystems with limited support in debian-security-support

2021-04-17 Thread Holger Levsen
Hi Moritz, thanks for the review! On Fri, Apr 16, 2021 at 03:47:49PM +0200, Moritz Mühlenhoff wrote: > > These source package sets comes to mind: > > - node-* > That would be super-noisy and will potentially clash with a lot of local > package state. I won't hurt to patch debian-security-support

FTBFS on i386

2021-04-17 Thread Anton Gladky
Dear LTS team, I prepared and uploaded python2.7_2.7.13-2+deb9u5, fixing two CVEs. Unfortunately it fails on i386 due to timeout during the network test. I believe that one more try should fix the problem, because most of the other archs are already green. But in the security suite the

Re: FTBFS on i386

2021-04-17 Thread Sylvain Beucler
Hi Anton, On 17/04/2021 14:58, Anton Gladky wrote: Dear LTS team, I prepared and uploaded python2.7_2.7.13-2+deb9u5, fixing two CVEs. Unfortunately it fails on i386 due to timeout during the network test. I believe that one more try should fix the problem, because most of the other archs are

Re: FTBFS on i386

2021-04-17 Thread Utkarsh Gupta
Hi Security team, On Sat, Apr 17, 2021 at 6:29 PM Anton Gladky wrote: > I prepared and uploaded python2.7_2.7.13-2+deb9u5, fixing > two CVEs. > > Unfortunately it fails on i386 due to timeout during the network > test. I believe that one more try should fix the problem, because > most of the

Re: FTBFS on i386

2021-04-17 Thread Salvatore Bonaccorso
Hi, On Sat, Apr 17, 2021 at 08:30:51PM +0530, Utkarsh Gupta wrote: > Hi Security team, > > On Sat, Apr 17, 2021 at 6:29 PM Anton Gladky wrote: > > I prepared and uploaded python2.7_2.7.13-2+deb9u5, fixing > > two CVEs. > > > > Unfortunately it fails on i386 due to timeout during the network > >

Re: Match ecosystems with limited support in debian-security-support

2021-04-17 Thread Sylvain Beucler
Hi, On 17/04/2021 14:44, Holger Levsen wrote: On Fri, Apr 16, 2021 at 03:47:49PM +0200, Moritz Mühlenhoff wrote: These source package sets comes to mind: - node-* That would be super-noisy and will potentially clash with a lot of local package state. I won't hurt to patch