Emanuele Rocca wrote...
> Any armel users out there? :-)
Fairly late, but just to avoid the impression there aren't any left:
Yes, here.
But that's not an objection against plans in Debian kernel and/or d-i,
I'm using my own kernel, and should I ever have the need of a new
installation, I know h
Salvatore Bonaccorso wrote...
> Is this still something we should try to get into stretch (now to late
> for 9.12 but might be possible for 9.13)?
For me, I would like to, so I'll re-visit the scenary and will try to
eventually get this done.
Christoph
signature.asc
Description: PGP signat
Josh Triplett wrote...
> debootstrap currently only supports a single mirror. For testing
> initial install scenarios with modified packages, it would help greatly
> to have support for an additional mirror, to allow pointing at a Debian
> mirror for the majority of packages and a local mirror fo
Cyril Brulebois wrote...
> Restoring the patch is not sufficient, as the context obviously changed.
> Given there were few changes there, I've tried reverting the upstream
> commit (9c143ce52da11ec3d21a3491c3749841d3dc10f0), restoring
> temp-deb-installer-hack.patch and enabling the relevant confi
Control: tag 924442 pending
Steve Langasek wrote...
> After updating Ubuntu to include isc-dhcp-client 4.4.1-2 from Debian
> unstable, we found that initramfs-tools' autopkgtests were failing for us,
> because we use isc-dhcp-client in the initramfs for more complete and
> correct early networkin
Control: tag 924374 pending
Dominik George wrote...
> busybox upstream found out that their ip address show command, with the
> oneline option, includes link layer addresses, which iproute2 normally
> doesn't. They patched that, without realising their ip link show code
> ultimately calls their i
Cyril Brulebois wrote...
> p-u NEW usually gets frozen a week before the point release. Having the
> package to review/test a week before that (so 2 weeks before the point
> release date) would be awesome. Depending on external things, I could
> still make time if that's only a few days before the
Adam D. Barratt wrote...
> Folks, what's the current status here?
It's not forgotten, but now quite outdated. There are several more fixes
that should go into the stretch version of busybox. I will take care of
this in the next days.
Cyril, you previously mentioned the submission was too close t
Cyril Brulebois wrote...
> > #877258: stretch-pu: package busybox/1:1.22.0-19+deb9u1
> > #877260: jessie-pu: package busybox/1:1.22.0-9+deb8u2
(...)
> > Also: In the # mentioned above, SRM asked for a d-i RM ack. Can you
> > provide this in time? My plan is to update the above bugs by Thursday
lity in tar implementation.
+Closes: #802702 [CVE-2011-5325]
+ * Fix integer overflow in bzip2 decompresson.
+Closes: #879732 [CVE-2017-15873]
+ * Filter out terminal escape sequence filtering in autocompletion.
+Closes: #882258 [CVE-2017-16544]
+
+ -- Christoph Biedl Mon, 25 Sep 2017
22:
-2017-16544]
+
+ -- Christoph Biedl Thu, 30 Nov 2017
19:41:31 +0100
+
busybox (1:1.22.0-9+deb8u1) jessie; urgency=medium
* Non-maintainer upload.
diff -Nru
busybox-1.22.0/debian/patches/cherry-pick.1_22_0-220-g4e314fa.modprobe-rmmod-reject-module-names-with-slashes.patch
busybox-1.22.0/deb
on.
+Closes: #879732 [CVE-2017-15874]
+ * Filter out terminal escape sequence filtering in autocompletion.
+Closes: #882258 [CVE-2017-16544]
+
+ -- Christoph Biedl Mon, 25 Sep 2017
22:42:41 +0200
+
busybox (1:1.20.0-7) unstable; urgency=low
* set CONFIG_FEATURE_COPYBUF_KB from 4 to 64 fo
found 882258 1:1.20.0-7
found 882258 1:1.22.0-9+deb8u1
found 882258 1:1.22.0-19
found 882258 1:1.27.2-1
thanks
Salvatore Bonaccorso wrote...
> Please adjust the affected versions in the BTS as needed, only
> unstable checked so far.
Can help with that: All versions back to and including wheezy a
tags 882175 confirmed upstream
tags 882177 confirmed upstream
thanks
Jakub Wilk wrote...
> Adding forgotten attachment...
Thanks, was already able to reproduce without that one.
Christoph
signature.asc
Description: Digital signature
Tags: upstream confirmed
Moritz Muehlenhoff wrote...
> Hi,
> please see:
Thanks for the heads-up, we'll try to get this fixed as soon as
possible. For the moment, I'm somewhat confused about the affected
distributions as listed in the security tracker. Could you please check?
> CVE-2017-15873
>
Steve McIntyre wrote...
> On Thu, Oct 05, 2017 at 06:12:46PM +0200, John Paul Adrian Glaubitz wrote:
> >Hmm, ok. Is that currently actually a concern? If I'm seeing that correctly,
> >the "-Os" here only saved us around 200k. Does that already make a difference
> >on armel?
>
> Massively so, yes.
Adam D. Barratt wrote...
> I'd be happy with this in general, but the udeb means we need an
> explicit d-i RM ack; CCing appropriately.
Okay, lesson learned: For such packages, don't proscrastinate the
request until close to the deadline that has passed now. There'll be
another point relase, I'll
tags 801850 +moreinfo +patch
thanks
> With both coreutils and busybox installed however, the
> busybox variant gets used before the coreutils variant causing package
> failures.
Does such a breakage happen or is this rather a theoretical scenario?
Or: Is this an issue to be fixed in (old)stable a
Petter Reinholdtsen wrote...
> [Christoph Biedl]
> > Now that laptop-detect has been orphaned I intend to do a QA upload in
> > about a week (aiming for stretch).
>
> Good to hear you are on the case.
>
> But according to
> https://lists.debian.org/debian-devel-
Petter Reinholdtsen wrote...
> Is it still unclear why Debian Edu need the laptop-detect-udeb package?
> Can we please have it back, to allow us to drop our copy from the
> debian-edu-install package?
Now that laptop-detect has been orphaned I intend to do a QA upload in
about a week (aiming for
Package: installation-reports
Severity: normal
Also to document my interest in keeping powerpc in Debian, I ran the
installer on and old Apple iMac.
Boot method: kexec
(using kernel and initrd extracted from mini.iso)
Image version:
http://ftp.de.debian.org/debian/dists/stretch/main/installe
21 matches
Mail list logo
