On 2018-12-20 Daniel Kahn Gillmor wrote:
[...]
> On Wed 2018-12-19 11:59:46 -0500, Antoine Beaupré wrote:
>> On 2018-12-18 14:34:06, Emilio Pozuelo Monfort wrote:
>>> libgcrypt is a bit more worrying, even after dropping most of the noise:
>>> $ diff libgcrypt20-1.*/ | filterdiff -x '*.pc/*' -x
First off, thanks to Antoine not only for doing all this work for
jessie, but for helping out with getting stretch in better shape.
If we aim to support our users for an LTS distro, this is exactly the
sort of thing we need done.
If we're realistically talking about actually dropping support for
On 2018-12-18 14:34:06, Emilio Pozuelo Monfort wrote:
[...]
> Looking at a jessie -> jessie-new diff, I see that several -dbg packages are
> gone in your backports.
Yes. That's because they were switched to dbgsym in stretch, but that
mecanism wasn't supported in jessie. I did a "fast" backport
Hi Antoine, dkg,
On Sat, Dec 15, 2018 at 01:09:39PM +0100, Moritz Mühlenhoff wrote:
> On Fri, Dec 14, 2018 at 09:08:42AM +0100, Emilio Pozuelo Monfort wrote:
> > However given the impact of these library updates, I was wondering
> > if we have considered to just mark enigmail as EOL in jessie?
On Tue 2018-12-18 14:34:06 +0100, Emilio Pozuelo Monfort wrote:
> FWIW I see that Ubuntu added OpenPGP.js back, and is using gnupg 2.0.x
> in trusty.
sounds fairly dubious to me, see below:
> We ruled that out because supporting gnupg 2.0.x is unfeasible or
GnuPG 2.0.x is unsupported upstream,
On 14/12/2018 09:08, Emilio Pozuelo Monfort wrote:
> On 13/12/2018 21:14, Antoine Beaupré wrote:
>> Hi,
>>
>> This is the latest update in the Thunderbird / Enigmail changes that are
>> happening in jessie. I have built a series of test packages, partly from
>> stretch (gnupg2, enigmail) and
On Fri, Dec 14, 2018 at 09:08:42AM +0100, Emilio Pozuelo Monfort wrote:
> However given the impact of these library updates, I was wondering
> if we have considered to just mark enigmail as EOL in jessie? Obviously if we
> can keep supporting stuff we should do that, but as you say these library
>
On Fri 2018-12-14 09:26:50 -0500, Antoine Beaupré wrote:
> I have outlined the tradeoffs of this in the past. For me, the biggest
> concern is that users will blindly install Enigmail from the app store
> and that actually has security vulnerabilities because the jessie gpg
> version is too old,
On 2018-12-14 09:08:42, Emilio Pozuelo Monfort wrote:
> On 13/12/2018 21:14, Antoine Beaupré wrote:
>> Hi,
>>
>> This is the latest update in the Thunderbird / Enigmail changes that are
>> happening in jessie. I have built a series of test packages, partly from
>> stretch (gnupg2, enigmail) and
On 13/12/2018 21:14, Antoine Beaupré wrote:
> Hi,
>
> This is the latest update in the Thunderbird / Enigmail changes that are
> happening in jessie. I have built a series of test packages, partly from
> stretch (gnupg2, enigmail) and partly from backports (libassuan,
> libgcrypt, libgpg-error,
10 matches
Mail list logo