Bug#858564: Confirmed on sid

2017-03-27 Thread Adrian Bunk
Control: severity -1 grave

On Sun, Mar 26, 2017 at 09:40:31AM +0200, Mathieu Parent wrote:
> Control: tag -1 + confirmed upstream
> Control: found -1 2:4.5.6+dfsg-2
> Control: severity -1 important
> 
> Hello,
> 
> I can reproduce it on sid. It has also been reproduced on master.
> 
> I've downgraded the severity: this is a regression but it doesn't
> "renders package unusable", as removing "follow symlinks = no"
> workarounds the problem.

I've upgraded the severity again.

Quoting the original bug report:
   * What led up to the situation?
I upgraded to 8u4 through unattended upgrades.


Regressions in a DSA that are actually among the worst possible bugs, 
since these are supposed to be automatically deployed to production 
systems running Debian.


> Regards

cu
Adrian

-- 

   "Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
   "Only a promise," Lao Er said.
   Pearl S. Buck - Dragon Seed



Bug#858564: Confirmed on sid

2017-03-28 Thread Mathieu Parent
On Tue, 28 Mar 2017 01:33:44 +0300 Adrian Bunk  wrote:
> Control: severity -1 grave

> I've upgraded the severity again.
>
> Quoting the original bug report:
>* What led up to the situation?
> I upgraded to 8u4 through unattended upgrades.
>
>
> Regressions in a DSA that are actually among the worst possible bugs,
> since these are supposed to be automatically deployed to production
> systems running Debian.

Really?

https://www.debian.org/Bugs/Developer#severities

Severity levels are well defined. Don't make your own definition. This
doesn't change the urgency of this bug which is very high.

I won't change the severity again.

Regards

Mathieu Parent



Bug#858564: Confirmed on sid

2017-03-26 Thread Mathieu Parent
Control: tag -1 + confirmed upstream
Control: found -1 2:4.5.6+dfsg-2
Control: severity -1 important

Hello,

I can reproduce it on sid. It has also been reproduced on master.

I've downgraded the severity: this is a regression but it doesn't
"renders package unusable", as removing "follow symlinks = no"
workarounds the problem.


Regards

-- 
Mathieu Parent