Bug#437454: [Pkg-xfce-devel] Bug#437454: Bug#437454: Bug#437454: fix for Etch still missing

2007-10-10 Thread Simon Huggins
Security team, any news?

On Fri, Aug 24, 2007 at 07:28:28PM +0100, Simon Huggins wrote:
 On Fri, Aug 24, 2007 at 08:10:38PM +0200, Tino Keitel wrote:
  On Fri, Aug 24, 2007 at 17:11:04 +0100, Simon Huggins wrote:
   On Fri, Aug 24, 2007 at 05:19:08PM +0200, Tino Keitel wrote:
what is the status of this bug regarding Etch? The Etch version is
affected, too, and the fix should also apply to the Etch version.
   I have untested packages for stable at:
   http://the.earth.li/~huggie/xfce4-terminal-fix/
   If you have an amd64 box you can just install the deb.  Otherwise if you
   rebuild it from that .dsc/.diff.gz/.orig.tar.gz on your machine and can
   let me know that you can reproduce the bug on the old one but not the
   new that would be useful.
   I need to test it myself tonight.
  I can build it myself if I need them, but I don't use xfce4-terminal
  from Etch. I just wondered why a security related bug that is fixed for
  nearly 2 weeks in Sid is still not fixed in Etch.
 Because no one has picked this up and looked into it I guess.

 I've tested the packages above in a stable chroot now.

 Debdiff is:
   Depends: libatk1.0-0 (= 1.12.2), libc6 (= 2.3.5-1),
   [-libdbus-1-3,-] {+libdbus-1-3 (= 0.94),+}

   libdbus-1-3 is 1.0.2-1 in stable.

   libdbus-glib-1-2 (= 0.71),
   libexo-0.3-0 (= [-0.3.1.10rc1-1),-] {+0.3.1.12rc2-1),+}

   0.3.1.12rc2-1 is current in stable.

   libglib2.0-0 (= 2.12.0), libgtk2.0-0 (= 2.8.0),
   libstartup-notification0 (= 0.8-1), libvte4 (= 1:0.12.1),
   libx11-6, libxfce4util4 (= [-4.3.99.1)-] {+4.3.99.2)+}

   4.3.99.2 is in stable.

   Version: [-0.2.5.6rc1-2-] {+0.2.5.6rc1-2etch1+}

 Security team, the packages above from
 http://the.earth.li/~huggie/xfce4-terminal-fix/
 are confirmed working and hopefully have the right distribution
 (stable-security) and priority (high).

 Can I upload them somewhere?


Simon.

-- 
[ If at first you don't succeed, destroy all evidence that you tried.  ]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#437454: fix for Etch still missing

2007-08-24 Thread Tino Keitel
Hi,

what is the status of this bug regarding Etch? The Etch version is
affected, too, and the fix should also apply to the Etch version.

Regards,
Tino


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#437454: [Pkg-xfce-devel] Bug#437454: fix for Etch still missing

2007-08-24 Thread Simon Huggins
On Fri, Aug 24, 2007 at 05:19:08PM +0200, Tino Keitel wrote:
 what is the status of this bug regarding Etch? The Etch version is
 affected, too, and the fix should also apply to the Etch version.

I have untested packages for stable at:
http://the.earth.li/~huggie/xfce4-terminal-fix/

If you have an amd64 box you can just install the deb.  Otherwise if you
rebuild it from that .dsc/.diff.gz/.orig.tar.gz on your machine and can
let me know that you can reproduce the bug on the old one but not the
new that would be useful.

I need to test it myself tonight.

-- 
 _[EMAIL PROTECTED]  -+*+- fou, con et anglais  _
(_)   No, the radio works.  You don't - Basil, Fawlty Towers   (_)
(_)  (_)
  \______/


signature.asc
Description: Digital signature


Bug#437454: [Pkg-xfce-devel] Bug#437454: fix for Etch still missing

2007-08-24 Thread Tino Keitel
On Fri, Aug 24, 2007 at 17:11:04 +0100, Simon Huggins wrote:
 On Fri, Aug 24, 2007 at 05:19:08PM +0200, Tino Keitel wrote:
  what is the status of this bug regarding Etch? The Etch version is
  affected, too, and the fix should also apply to the Etch version.
 
 I have untested packages for stable at:
 http://the.earth.li/~huggie/xfce4-terminal-fix/
 
 If you have an amd64 box you can just install the deb.  Otherwise if you
 rebuild it from that .dsc/.diff.gz/.orig.tar.gz on your machine and can
 let me know that you can reproduce the bug on the old one but not the
 new that would be useful.
 
 I need to test it myself tonight.

I can build it myself if I need them, but I don't use xfce4-terminal
from Etch. I just wondered why a security related bug that is fixed for
nearly 2 weeks in Sid is still not fixed in Etch.

Regards,
Tino


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#437454: [Pkg-xfce-devel] Bug#437454: Bug#437454: fix for Etch still missing

2007-08-24 Thread Simon Huggins
On Fri, Aug 24, 2007 at 08:10:38PM +0200, Tino Keitel wrote:
 On Fri, Aug 24, 2007 at 17:11:04 +0100, Simon Huggins wrote:
  On Fri, Aug 24, 2007 at 05:19:08PM +0200, Tino Keitel wrote:
   what is the status of this bug regarding Etch? The Etch version is
   affected, too, and the fix should also apply to the Etch version.
  I have untested packages for stable at:
  http://the.earth.li/~huggie/xfce4-terminal-fix/
  If you have an amd64 box you can just install the deb.  Otherwise if you
  rebuild it from that .dsc/.diff.gz/.orig.tar.gz on your machine and can
  let me know that you can reproduce the bug on the old one but not the
  new that would be useful.
  I need to test it myself tonight.
 I can build it myself if I need them, but I don't use xfce4-terminal
 from Etch. I just wondered why a security related bug that is fixed for
 nearly 2 weeks in Sid is still not fixed in Etch.

Because no one has picked this up and looked into it I guess.

I've tested the packages above in a stable chroot now.

Debdiff is:
Depends: libatk1.0-0 (= 1.12.2), libc6 (= 2.3.5-1),
[-libdbus-1-3,-] {+libdbus-1-3 (= 0.94),+}

libdbus-1-3 is 1.0.2-1 in stable.

libdbus-glib-1-2 (= 0.71),
libexo-0.3-0 (= [-0.3.1.10rc1-1),-] {+0.3.1.12rc2-1),+}

0.3.1.12rc2-1 is current in stable.

libglib2.0-0 (= 2.12.0), libgtk2.0-0 (= 2.8.0),
libstartup-notification0 (= 0.8-1), libvte4 (= 1:0.12.1),
libx11-6, libxfce4util4 (= [-4.3.99.1)-] {+4.3.99.2)+}

4.3.99.2 is in stable.

Version: [-0.2.5.6rc1-2-] {+0.2.5.6rc1-2etch1+}


Security team, the packages above from
http://the.earth.li/~huggie/xfce4-terminal-fix/
are confirmed working and hopefully have the right distribution
(stable-security) and priority (high).

Can I upload them somewhere?

-- 
 _[EMAIL PROTECTED]  -+*+- fou, con et anglais  _
(_)  benj[w0rK] naoko: ca marche parfaitement ... quand on a   (_)
(_)  une carte QUI FONCTIONNE !  (_)
  \___benj[w0rK] alors camembert :) ___/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]