Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-29 Thread Didier 'OdyX' Raboud
Le vendredi, 28 décembre 2012 19.39:33, Moritz Mühlenhoff a écrit : On Fri, Dec 28, 2012 at 06:40:29PM +0100, Didier 'OdyX' Raboud wrote: Le jeudi, 27 décembre 2012 20.43:12, Moritz Mühlenhoff a écrit : AFAICS can there haven't been any regressions, can we should go ahead with the update

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-28 Thread Didier 'OdyX' Raboud
Le jeudi, 27 décembre 2012 20.43:12, Moritz Mühlenhoff a écrit : AFAICS can there haven't been any regressions, can we should go ahead with the update now. EPARSE Didier, can you upload to security-master, please? The release targetted to Wheezy has just been reviewed in #695423, I'll upload

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-28 Thread Moritz Mühlenhoff
On Fri, Dec 28, 2012 at 06:40:29PM +0100, Didier 'OdyX' Raboud wrote: Le jeudi, 27 décembre 2012 20.43:12, Moritz Mühlenhoff a écrit : AFAICS can there haven't been any regressions, can we should go ahead with the update now. EPARSE I meant: No regressions in sid - We can proceed with

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-27 Thread Moritz Mühlenhoff
On Sat, Dec 08, 2012 at 11:32:57AM +0100, Didier Raboud wrote: Le samedi, 8 décembre 2012 09.12:20, Yves-Alexis Perez a écrit : On sam., 2012-12-08 at 01:58 +0100, Didier 'OdyX' Raboud wrote: I propose to get CVE-2012-5519 (#692791) fixed with the attached debdiff. To be honest,

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-08 Thread Yves-Alexis Perez
On sam., 2012-12-08 at 01:58 +0100, Didier 'OdyX' Raboud wrote: Hi dear security team, I propose to get CVE-2012-5519 (#692791) fixed with the attached debdiff. It is a backport of the patches discussed on the upstream bug [#4223] for cups 1.4.4, plus the needed packaging changes to

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-08 Thread Didier Raboud
Le samedi, 8 décembre 2012 09.12:20, Yves-Alexis Perez a écrit : On sam., 2012-12-08 at 01:58 +0100, Didier 'OdyX' Raboud wrote: I propose to get CVE-2012-5519 (#692791) fixed with the attached debdiff. To be honest, considering how invasive the patch is, I'd like it to stay a bit in

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-08 Thread Yves-Alexis Perez
On sam., 2012-12-08 at 11:32 +0100, Didier Raboud wrote: Le samedi, 8 décembre 2012 09.12:20, Yves-Alexis Perez a écrit : On sam., 2012-12-08 at 01:58 +0100, Didier 'OdyX' Raboud wrote: I propose to get CVE-2012-5519 (#692791) fixed with the attached debdiff. To be honest,

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-08 Thread Didier 'OdyX' Raboud
Le samedi, 8 décembre 2012 12.26:05, Yves-Alexis Perez a écrit : That said, who triggers the re-examination of the patch for security release? What do you mean? I'd like it to stay a bit in unstable #define a bit ? I was just wondering about who would decide when it would be the good

Bug#692791: #692791: CVE-2012-5519 Security update towards Squeeze ?

2012-12-08 Thread Yves-Alexis Perez
On sam., 2012-12-08 at 13:43 +0100, Didier 'OdyX' Raboud wrote: Le samedi, 8 décembre 2012 12.26:05, Yves-Alexis Perez a écrit : That said, who triggers the re-examination of the patch for security release? What do you mean? I'd like it to stay a bit in unstable #define a bit ?