Re: [Bug 411849] Re: Please backport security fix for USN-812-1 in subversion 1.5

2010-03-03 Thread Arnd
Hi,

Am 02.03.2010 17:08, wrote Jamie Strandboge:
 NAK. The debdiff drops the changes introduced in hardy1 and hardy2.
 Please update the debdiff and I'll review it.


I'm sorry, could you elaborate what change the debdiff drops?
Change of hardy1 to hardy2 was switched libneon-gnutls-dev to libneon-dev
the debdiff does not touch this change, does it?

Or does the debdiff need to include all changes against some other base
version and
not against subversion_1.5.1dfsg1-1ubuntu2~hardy2 ?

Or are you concerned about the version number?

I changed

1.5.1dfsg1-1ubuntu2~hardy2

to

1.5.1dfsg1-1ubuntu2.1~hardy1

Maybe it should be

1.5.1dfsg1-1ubuntu2.1~hardy2 instead?


Best regards,
Arnd

-- 
Please backport security fix for USN-812-1 in subversion 1.5
https://bugs.launchpad.net/bugs/411849
You received this bug notification because you are a member of Ubuntu
Backports Testing Team, which is subscribed to Hardy Backports.

-- 
ubuntu-backports mailing list
ubuntu-backports@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports


Re: [Bug 411849] Re: Please backport security fix for USN-812-1 in subversion 1.5

2010-02-12 Thread John Vivirito
On 02/09/2010 05:15 PM, Arnd wrote:
 Hi John,
 
 John Vivirito wrote:
 Since you have diff on the bug. Is this still up to date?
 other than that i subscribed the team to look at i
 Yes bug is still valid.
 Most recent version in the backports repos is
 1.5.1dfsg1-1ubuntu2~hardy2
 which is still vulnerable to the mentioned attack.
 
 Best regards,
 Arnd
 
Ok thanks for the reply, someone should look at this and
decide what to do with it.

-- 
Sincerely Yours,
John Vivirito

https://launchpad.net/~gnomefreak
https://wiki.ubuntu.com/JohnVivirito
Linux User# 414246

How can i get lost, if i have no where to go
-- Metallica from Unforgiven III

-- 
Please backport security fix for USN-812-1 in subversion 1.5
https://bugs.launchpad.net/bugs/411849
You received this bug notification because you are a member of Ubuntu
Backports Testing Team, which is subscribed to Hardy Backports.

-- 
ubuntu-backports mailing list
ubuntu-backports@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports


Re: [Bug 411849] Re: Please backport security fix for USN-812-1 in subversion 1.5

2010-02-09 Thread John Vivirito
On 02/03/2010 08:15 AM, Arnd wrote:
 Hi John,
 
 John Vivirito wrote:
 On 02/03/2010 05:18 AM, mark wrote:
   
 Mind you, it does say in the Ubuntu release notes that backports aren't
 going to have security fixes etc on them... So its one of those problems
 I suppose

 
 The fix will be pushed to *-security repo not backports if and
 when its fixed
   
 
 as you seem more familiar with the backports / backports-security
 process. What can I do to move this bug forward?
 
 Best regards,
 Arnd
 
Since you have diff on the bug. Is this still up to date?
other than that i subscribed the team to look at it

-- 
Sincerely Yours,
John Vivirito

https://launchpad.net/~gnomefreak
https://wiki.ubuntu.com/JohnVivirito
Linux User# 414246

How can i get lost, if i have no where to go
-- Metallica from Unforgiven III

-- 
Please backport security fix for USN-812-1 in subversion 1.5
https://bugs.launchpad.net/bugs/411849
You received this bug notification because you are a member of Ubuntu
Backports Testing Team, which is subscribed to Hardy Backports.

-- 
ubuntu-backports mailing list
ubuntu-backports@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports


Re: [Bug 411849] Re: Please backport security fix for USN-812-1 in subversion 1.5

2010-02-09 Thread Arnd
Hi John,

John Vivirito wrote:
 Since you have diff on the bug. Is this still up to date?
 other than that i subscribed the team to look at i
Yes bug is still valid.
Most recent version in the backports repos is
1.5.1dfsg1-1ubuntu2~hardy2
which is still vulnerable to the mentioned attack.

Best regards,
Arnd

-- 
Please backport security fix for USN-812-1 in subversion 1.5
https://bugs.launchpad.net/bugs/411849
You received this bug notification because you are a member of Ubuntu
Backports Testing Team, which is subscribed to Hardy Backports.

-- 
ubuntu-backports mailing list
ubuntu-backports@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports


Re: [Bug 411849] Re: Please backport security fix for USN-812-1 in subversion 1.5

2010-02-03 Thread John Vivirito
On 02/03/2010 05:18 AM, mark wrote:
 Mind you, it does say in the Ubuntu release notes that backports aren't
 going to have security fixes etc on them... So its one of those problems
 I suppose
 
The fix will be pushed to *-security repo not backports if and
when its fixed

-- 
Sincerely Yours,
John Vivirito

https://launchpad.net/~gnomefreak
https://wiki.ubuntu.com/JohnVivirito
Linux User# 414246

How can i get lost, if i have no where to go
-- Metallica from Unforgiven III

-- 
Please backport security fix for USN-812-1 in subversion 1.5
https://bugs.launchpad.net/bugs/411849
You received this bug notification because you are a member of Ubuntu
Backports Testing Team, which is subscribed to Hardy Backports.

-- 
ubuntu-backports mailing list
ubuntu-backports@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports


Re: [Bug 411849] Re: Please backport security fix for USN-812-1 in subversion 1.5

2010-02-03 Thread Arnd
Hi John,

John Vivirito wrote:
 On 02/03/2010 05:18 AM, mark wrote:
   
 Mind you, it does say in the Ubuntu release notes that backports aren't
 going to have security fixes etc on them... So its one of those problems
 I suppose

 
 The fix will be pushed to *-security repo not backports if and
 when its fixed
   

as you seem more familiar with the backports / backports-security
process. What can I do to move this bug forward?

Best regards,
Arnd

-- 
Please backport security fix for USN-812-1 in subversion 1.5
https://bugs.launchpad.net/bugs/411849
You received this bug notification because you are a member of Ubuntu
Backports Testing Team, which is subscribed to Hardy Backports.

-- 
ubuntu-backports mailing list
ubuntu-backports@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports