Dear Peter, On Tuesday, 6 July 2021 6:54:14 AM AEST Peter Pentchev wrote: > First of all, thanks for your work on nomad and Debian in general!
Thank you for your kind words and for your help. > Dmitry, what do you think about my attempt to backport the upstream > patch for CVE-2021-32575 to the Debian package of nomad? > The upstream patch is at: > > https://github.com/hashicorp/nomad/commit/003d68fe6df652b172bc68beabd11a25 > fd7e1b58 > > My proposed update to the Debian package is in my forked Salsa repo: > > https://salsa.debian.org/roam/nomad/-/commits/roam-CVE-2021-32575/ > > git clone -b roam-CVE-2021-32575 https://salsa.debian.org/roam/nomad.git Unfortunately I can not have a look right now... > If you have no objections, I could push these commits to the team repo, > upload to unstable, and send an unblock request to the release team. Go for it. It would be great if you could do all this, if you think it is worth the effort. Thank you. Frankly, at this point I think we can allow Nomad to be dropped from "testing". Without Podman support, Nomad is not as useful as I expected... -- Regards, Dmitry Smirnov GPG key : 4096R/52B6BBD953968D1B --- Lies are the social equivalent of toxic waste: Everyone is potentially harmed by their spread. -- Sam Harris --- All-cause mortality during COVID-19: No plague and a likely signature of mass homicide by government response. D. G. Rancourt, June 2020. -- https://deb.li/37mn4 https://www.researchgate.net/publication/341832637_All-cause_mortality_during_COVID-19_No_plague_and_a_likely_signature_of_mass_homicide_by_government_response
signature.asc
Description: This is a digitally signed message part.