Re: firefox on buster

2023-08-08 Thread Chris Frey
On Tue, Aug 08, 2023 at 11:10:11AM -0400, Roberto C. Sánchez wrote:
> Emilio probably meant that the choices were:
> 
> - delay the buster update to do a bunch of toolchain updates (could take
>   quite a long time)
> - grab the latest 102.x.x from git, which wouldn't be quite as quick as
>   a normal update for us (since the unstable packaging work wouldn't
>   have been done on it, as the maintainer already moved to the next
>   version), but is still much quicker than waiting on the toolchain
>   stuff

That certainly makes sense, thanks!  I had not been keeping an eye on
the ESR timetable, so didn't realize we were hitting the switchover
just yet.

- Chris



Re: firefox on buster

2023-08-08 Thread Roberto C . Sánchez
On Tue, Aug 08, 2023 at 11:03:48AM -0400, Chris Frey wrote:
> On Tue, Aug 08, 2023 at 12:24:17PM +0200, Emilio Pozuelo Monfort wrote:
> > Given that the package is no longer in sid, I had a little trouble preparing
> > the backport from the git repository. That's sorted now, and the update
> > should go out today or tomorrow, once testing on my part has been done.
> 
> Thank you very much!
> 
> What does it mean that the package is no longer in sid?
> It appears that 102 is the main version for all the stable Debians,
> so it's surprising to me that there was trouble.

He is referring to the fact that 115.x.x ESR has been uploaded to sid.
The normal LTS workflow is to take the sid version of firefox-esr and
backport it. However, the transition from 102.x.x -> 115.x.x will
require a bunch of toolchain work to come with it. We normally do this
once per year, but at a time where it won't hold up the update of
firefox-esr. Emilio probably meant that the choices were:

- delay the buster update to do a bunch of toolchain updates (could take
  quite a long time)
- grab the latest 102.x.x from git, which wouldn't be quite as quick as
  a normal update for us (since the unstable packaging work wouldn't
  have been done on it, as the maintainer already moved to the next
  version), but is still much quicker than waiting on the toolchain
  stuff

Regards,

-Roberto
-- 
Roberto C. Sánchez



Re: firefox on buster

2023-08-08 Thread Chris Frey
On Tue, Aug 08, 2023 at 12:24:17PM +0200, Emilio Pozuelo Monfort wrote:
> Given that the package is no longer in sid, I had a little trouble preparing
> the backport from the git repository. That's sorted now, and the update
> should go out today or tomorrow, once testing on my part has been done.

Thank you very much!

What does it mean that the package is no longer in sid?
It appears that 102 is the main version for all the stable Debians,
so it's surprising to me that there was trouble.

Thanks,
- Chris



Re: Accepted thunderbird 1:102.14.0-1~deb10u1 (source) into oldoldstable

2023-08-08 Thread Emilio Pozuelo Monfort

On 08/08/2023 12:00, Emilio Pozuelo Monfort wrote:

Hi Sylvain,

On 07/08/2023 11:46, Sylvain Beucler wrote:

Hello Carsten,

Thanks for updating Thunderbird for buster :)

Do you want the LTS Team to take care of the DLA registration and 
announcement, or do you plan to do that yourself?


Please send it out, or I can do it if you want.


Coordinated over irc, and announcement is out.

Cheers,
Emilio



Re: firefox on buster

2023-08-08 Thread Emilio Pozuelo Monfort

Hi Chris,

On 07/08/2023 23:57, Chris Frey wrote:

I noticed firefox security updates for 102.14.x have been released for
bullseye and bookworm, but not for buster (still on 102.13.x)

Anything that an outsider can do to help with that?


Given that the package is no longer in sid, I had a little trouble preparing the 
backport from the git repository. That's sorted now, and the update should go 
out today or tomorrow, once testing on my part has been done.


Cheers,
Emilio



Re: Accepted thunderbird 1:102.14.0-1~deb10u1 (source) into oldoldstable

2023-08-08 Thread Emilio Pozuelo Monfort

Hi Sylvain,

On 07/08/2023 11:46, Sylvain Beucler wrote:

Hello Carsten,

Thanks for updating Thunderbird for buster :)

Do you want the LTS Team to take care of the DLA registration and announcement, 
or do you plan to do that yourself?


Please send it out, or I can do it if you want.


(I assume this matches https://www.debian.org/security/2023/dsa-5469)


Yes, same one.

Thanks,
Emilio