Re: gcc-6: please enable PIE hardening flags by default on amd64 ppc64el and s390x

2016-10-09 Thread Niels Thykier
On Tue, 23 Aug 2016 00:25:30 +0200 Balint Reczey wrote: > Package: gcc-6 > Version: 6.1.1-12 > Severity: wishlist > Tags: patch > > Dear Matthias, > > As a continuation of the discussions [1][2] on debian-devel I'm > attaching the simple patch that implements enabling

Re: Enabling PIE by default for Stretch

2016-10-09 Thread Niels Thykier
Niels Thykier: > Hi, > > As brought up on the meeting last night, I think we should try to go for > PIE by default in Stretch on all release architectures! > * It is a substantial hardening feature > * Upstream has vastly reduced the performance penalty for x86 > * The majority of all porters

Re: Porter roll call for Debian Stretch

2016-10-09 Thread Adam D. Barratt
On Sun, 2016-10-09 at 21:12 +0300, Adrian Bunk wrote: > [ adding debian-powerpc ] > > On Sun, Oct 09, 2016 at 06:54:44PM +0200, Moritz Mühlenhoff wrote: > > Niels Thykier schrieb: > > > If I am to support powerpc as a realease architecture for Stretch, I > > > need to know

Re: Porter roll call for Debian Stretch

2016-10-09 Thread Adrian Bunk
[ adding debian-powerpc ] On Sun, Oct 09, 2016 at 06:54:44PM +0200, Moritz Mühlenhoff wrote: > Niels Thykier schrieb: > > If I am to support powerpc as a realease architecture for Stretch, I > > need to know that there are *active* porters behind it committed to > > keeping it

Re: Porter roll call for Debian Stretch

2016-10-09 Thread Moritz Mühlenhoff
Niels Thykier schrieb: > If I am to support powerpc as a realease architecture for Stretch, I > need to know that there are *active* porters behind it committed to > keeping it in the working. People who would definitely catch such > issues long before the release. People who

Processed: official DD

2016-10-09 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # bugs with submitter b...@sandroknauss.de > submitter 839905 ! Bug #839905 [pkg-kde-tools] pkgkde-symbolshelper: Use of uninitialized value in concatenation (.) or string at /usr/bin/pkgkde-symbolshelper line 318. Changed Bug submitter to

Bug#813272: marked as done (RM: guile-1.8/1.8.8+1-10)

2016-10-09 Thread Debian Bug Tracking System
Your message dated Sun, 9 Oct 2016 17:16:41 +0300 with message-id <20161009141641.42jxs5zwmpkey...@bunk.spdns.de> and subject line guile-1.8 has already been removed from unstable and testing has caused the Debian Bug report #813272, regarding RM: guile-1.8/1.8.8+1-10 to be marked as done. This

Bug#840191: jessie-pu: package gnutls28/3.3.8-6+deb8u4

2016-10-09 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi Stable Release Managers, X-Debbugs-CC'ed Andreas Metzler. gnutls28 in jessie is affected by CVE-2016-7444, GNUTLS-SA-2016-3, having a flaw in the OCSP certificate check. This

Bug#836795: jessie-pu: package samba/2:4.1.17+dfsg-2+deb8u2

2016-10-09 Thread Jelmer Vernooij
On Sun, Oct 09, 2016 at 10:34:55AM +0100, Adam D. Barratt wrote: > On Sun, 2016-10-09 at 00:16 +, Jelmer Vernooij wrote: > > On Sat, Sep 24, 2016 at 08:14:38PM +0100, Adam D. Barratt wrote: > > > Control: tags -1 -moreinfo +confirmed > > > > > > On Mon, 2016-09-05 at 20:50 +, Jelmer

Bug#836795: jessie-pu: package samba/2:4.1.17+dfsg-2+deb8u2

2016-10-09 Thread Adam D. Barratt
On Sun, 2016-10-09 at 00:16 +, Jelmer Vernooij wrote: > On Sat, Sep 24, 2016 at 08:14:38PM +0100, Adam D. Barratt wrote: > > Control: tags -1 -moreinfo +confirmed > > > > On Mon, 2016-09-05 at 20:50 +, Jelmer Vernooij wrote: > > > I'd like to update Samba in jessie to 4.2.14+dfsg. Debdiff

Re: Stretch freeze and the possible future upload of MATE 1.18

2016-10-09 Thread Emilio Pozuelo Monfort
On 09/10/16 00:22, Mike Gabriel wrote: > Hi Vlad, > > thanks for taking this initiative of communication. Much appreciated. > > I try to give some answers, Niels may jump in and correct me, if necessary. > > On Fr 07 Okt 2016 14:51:47 CEST, Vlad Orlov wrote: > >> Hi, >> >>> It depends on what

Re: jessie-ignore for "maintainer address bounces" bugs?

2016-10-09 Thread Emilio Pozuelo Monfort
On 08/10/16 09:51, Andreas Beckmann wrote: > On 2016-09-10 10:37, Andreas Beckmann wrote: >> Hi, >> >> would it be OK to tag "maintainer address bounces" bugs as jessie-ignore? > > This would affect about 10 bugs in jessie and a few less in wheezy. I wouldn't do that to these bugs for now, as I