buster update for jackson-databind

2021-04-19 Thread Utkarsh Gupta
Hello, There are 18 no-dsa marked entries for jackson-databind for buster, the same ones I fixed for jessie and also the same ones that I intend to work on for stretch. It'd be thus unfair if those are pending in buster and so I ask if it'd be OK for me to prepare a corresponding update for

Re: Match ecosystems with limited support in debian-security-support

2021-04-19 Thread Sylvain Beucler
Hi, On 17/04/2021 21:29, Holger Levsen wrote: On Sat, Apr 17, 2021 at 05:42:11PM +0200, Sylvain Beucler wrote: stretch however doesn't report the 3 packages I mentioned in my initial mail. Should we fix it now? because the packages are not listed in sec-support.ended9? if so, sure, please

Re: buster update for jackson-databind

2021-04-19 Thread Moritz Muehlenhoff
On Mon, Apr 19, 2021 at 02:40:56PM +0200, Markus Koschany wrote: > Hi, > > Am Montag, den 19.04.2021, 13:15 +0530 schrieb Utkarsh Gupta: > > Hello, > > > > There are 18 no-dsa marked entries for jackson-databind for buster, > > the same ones I fixed for jessie and also the same ones that I

Re: buster update for jackson-databind

2021-04-19 Thread Markus Koschany
Hi, Am Montag, den 19.04.2021, 13:15 +0530 schrieb Utkarsh Gupta: > Hello, > > There are 18 no-dsa marked entries for jackson-databind for buster, > the same ones I fixed for jessie and also the same ones that I intend > to work on for stretch. It'd be thus unfair if those are pending in >

(semi-)automatic unclaim of packages with more than 2 weeks of inactivity (and missing DLAs on www.do)

2021-04-19 Thread Holger Levsen
hi, today two packages were unclaimed for LTS: LTS: - cgal (Anton Gladky) - gsoap (Abhijith PA) and none for ELTS. Nobody claimed 4 packages or more. Four DLAs have been reserved and haven't been published yet: - DLA 2629-1 (18 Apr 2021) (libebml) - DLA 2628-1 (17 Apr 2021) (python2.7) - DLA