Re: Please upload (SECURITY): netpbm-10.29-1

2005-11-04 Thread Yaakov S (Cygwin Ports)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christopher Faylor wrote: > Uploaded. Thanks. Could you please remove all previous versions now? Yaakov -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (Cygwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDa39apiW

Security advisory (UPLOAD): libungif

2005-11-04 Thread Yaakov S (Cygwin Ports)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 libungif (< 4.1.4) may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution. Please upload, and remove all previous versions: ftp://sunsite.dk/projects/cygwin

Re: Linux distro qualification clarification

2005-11-04 Thread Christopher Faylor
On Fri, Nov 04, 2005 at 11:53:44AM +0100, Dr. Volker Zell wrote: >> Christopher Faylor writes: > >> Btw, as long as we're talking about this, I think we need to clarify the >> rules a little. I don't think that existence of a package in an >> experimental category in Debian or any

Re: Linux distro qualification clarification

2005-11-04 Thread Dr. Volker Zell
> Christopher Faylor writes: > Btw, as long as we're talking about this, I think we need to clarify the > rules a little. I don't think that existence of a package in an > experimental category in Debian or any other distribution should make it > an automatic candidate for inc

Re: [ITP] gnubg: A backgammon player and analysis tool

2005-11-04 Thread Dr. Volker Zell
> Yaakov S writes: > Corinna Vinschen wrote: >> No problems with the packaging (except that the ldesc lines in setup.hint >> are too long, IMHO. However, I don't see that gnubg is packed with any >> Linux distro according to rpmfind, so we need the usual three votes here.

Re: Linux distro qualification clarification

2005-11-04 Thread Corinna Vinschen
On Nov 3 14:21, Christopher Faylor wrote: > On Thu, Nov 03, 2005 at 01:09:38PM -0600, Yaakov S (Cygwin Ports) wrote: > >-BEGIN PGP SIGNED MESSAGE- > >Hash: SHA1 > > > >Corinna Vinschen wrote: > >> No problems with the packaging (except that the ldesc lines in setup.hint > >> are too long,

Re: [ITP] gnubg: A backgammon player and analysis tool

2005-11-04 Thread Corinna Vinschen
On Nov 3 13:09, Yaakov S (Cygwin Ports) wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Corinna Vinschen wrote: > > No problems with the packaging (except that the ldesc lines in setup.hint > > are too long, IMHO. However, I don't see that gnubg is packed with any > > Linux distro a