Re: Security in sarge

2004-09-28 Thread Andres Salomon
On Mon, 27 Sep 2004 20:41:13 -0400, Joey Hess wrote: Martin Schulze wrote: ruby 1.8.1+1.8.2pre1-4 needed, have 1.8.1-8 for DSA-537 This is fixed in ruby1.8 in testing; ruby itself is a dependency package. I don't know if ruby1.7 was/is vulnetable, do you? Ruby1.7 (ie, ruby-beta) is most

Re: Security in sarge

2004-09-28 Thread Steve Langasek
On Tue, Sep 28, 2004 at 02:13:45AM -0400, Andres Salomon wrote: On Mon, 27 Sep 2004 20:41:13 -0400, Joey Hess wrote: Martin Schulze wrote: ruby 1.8.1+1.8.2pre1-4 needed, have 1.8.1-8 for DSA-537 This is fixed in ruby1.8 in testing; ruby itself is a dependency package. I don't know if

Re: Security in sarge

2004-09-28 Thread Martin Schulze
Joey Hess wrote: Martin Schulze wrote: ruby 1.8.1+1.8.2pre1-4 needed, have 1.8.1-8 for DSA-537 This is fixed in ruby1.8 in testing; ruby itself is a dependency package. I don't know if ruby1.7 was/is vulnetable, do you? I don't know. CAN-2004-0818: star: local root exploit I can't

Re: Security in sarge

2004-09-28 Thread Tobias Stefan Richter
pavuk (unfixed; bug #264684) for DSA-527 pavuk 0.9pl28-3 fixed that. #264684 is left open only for the other security hole mentioned there. We might need a DSA for that hole.. I'm not explicitly tracking it since it already has an RC bug. Package is in a weird state in the archive

status of non-US

2004-09-28 Thread Andreas Barth
Hi, I did some analysis of the packages in non-US. Short summary: Only two are left over, but both have an interessted maintainer. One of them could be moved to main, the other is in non-US/non-free, and needs to stay there. The only package in non-US/main left over is vtun. I spoke with the

Re: status of non-US

2004-09-28 Thread Martin Zobel-Helas
Hi Andreas, On Tuesday, 28 Sep 2004, you wrote: The only package in non-free left over is pgp5i; it is orphaned, but somebody wants to adopt it and has already made packages (quite recently). See http://bugs.debian.org/237370 for details. non-free Package: pgp5i ITA, #237370

remove kernel-patch-acl from sarge/testing

2004-09-28 Thread maks attems
please remove kernel-patch-acl as it's completly useless, package includes patches against kernel 2.4.22/23. they are included in 2.6.8 so there is no point for that patch. maintainer indicated to have no time to maintain his package see end of thread - #250478 thanks -- maks kernel janitor

Re: remove kernel-patch-acl from sarge/testing

2004-09-28 Thread Colin Watson
On Wed, Sep 29, 2004 at 12:00:11AM +0200, maks attems wrote: please remove kernel-patch-acl as it's completly useless, package includes patches against kernel 2.4.22/23. they are included in 2.6.8 so there is no point for that patch. maintainer indicated to have no time to maintain his

Re: Bug#273958: RM: moobot -- RoM; Not in development anymore, supybot will replace it

2004-09-28 Thread Jeroen van Wolffelaar
clone 273958 -1 reassign -1 moobot severity -1 serious retitle -1 In process of being removed, should not be in Sarge. thanks On Wed, Sep 29, 2004 at 02:50:41AM +0200, Jeroen van Wolffelaar wrote: Brad Stewart [EMAIL PROTECTED]: | Please go ahead and orphan it, or straight out remove it from