Re: bullseye-security arm64 buildds seem to be broken

2024-09-12 Thread Ben Hutchings
On Thu, 2024-09-12 at 14:54 +0300, Adrian Bunk wrote: > On Thu, Sep 12, 2024 at 12:46:08AM +0200, Ben Hutchings wrote: > > Building linux-6.1 in the bullseye-security suite for arm64 has been > > attempted and failed on 4 different buildds today, with the messages: > >

bullseye-security arm64 buildds seem to be broken

2024-09-11 Thread Ben Hutchings
chroot does not exist E: Error creating chroot session: skipping linux-6.1 Ben. -- Ben Hutchings Power corrupts. Absolute power is kind of neat. - John Lehman signature.asc Description: This is a digitally signed message part

Bug#1081356: Configuration changes for linux-6.1 in bullseye-security

2024-09-10 Thread Ben Hutchings
Package: ftp.debian.org Severity: important X-Debbugs-Cc: debian-lts@lists.debian.org As with earlier releases that had LTS, I'm trying to add a backported kernel version to bullseye-security now that bullseye-backports is closed. This will need some configuration changes in dak and the signing s

Re: [SECURITY] [DLA 3856-1] python-html-sanitizer security update

2024-08-26 Thread Ben Hutchings
there is still a policy queue for bullseye-security. Please check that an uploaded package has actually been built and released before issuing the corresponding DLA. Ben. -- Ben Hutchings Man invented language to satisfy his deep need to complain.

Re: Policy queue in buster-security

2023-11-30 Thread Ben Hutchings
looks this is controlled by the External-Signature-Requests::Default-Suites key in dak.conf. Ben. -- Ben Hutchings It is easier to write an incorrect program than to understand a correct one. signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DLA 3623-1] linux-5.10 security update

2023-10-23 Thread Ben Hutchings
On Fri, 2023-10-20 at 00:10 +0200, Andreas Ziegler wrote: > Ben Hutchings wrote on 19.10.23 23:24: > > - > > Debian LTS Advisory DLA-3623-1debian-lts@lists.debian.org > > https://www.de

Re: CVE-2023-2884[0-2]: impact for debian user

2023-06-22 Thread Ben Hutchings
010 > and seems inclomplete without: > https://github.com/moby/moby/commit/1e195acee45ac69a2f7d8d4f2c9ea05ff6b0af2c > And for completeness again auser config: > https://github.com/moby/moby/commit/9a692a38028f4914a3a914c9a229e61bb3fbaf66 > > Bastien -- Ben Hutchi

Re: [buster] CVE-2022-46871: libusrsctp maybe backporting a new version ?

2023-06-19 Thread Ben Hutchings
ds libusrsctp-dev -w -sPackage > /var/lib/apt/lists/*Sources > give me: > - janus on o-o-stable-backport > > Do not know what to do with it. buster-backports is not supported at all, so we don't need to care about that. I think we can mark this package us unsupported. Ben. --

Re: Request for suggestions/opinion about triaging decision for renderdoc

2023-06-19 Thread Ben Hutchings
ewall. It's unfortunate that we still don't enable that by default in desktop installations. If we can't fix the code then maybe we could issue a DLA recommending blocking this port. Ben. -- Ben Hutchings Experience is directly proportional to the value of equipment destroyed

Re: Proposal: Rebuilding 4.19 from Upstream LTS kernel

2022-09-13 Thread Ben Hutchings
bably never will be. If you are hosting untrusted VMs then I strongly encourage you to use Linux 5.10 or later. Ben. -- Ben Hutchings Unix is many things to many people, but it's never been everything to anybody. signature.asc Description: This is a digitally signed message part

linux-5.10 code signing in buster

2022-07-28 Thread Ben Hutchings
, or when any configuration change has been done. Thanks, Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of. signature.asc Description: This is a digitally signed message part

NEW kernel and firmware packages for stretch

2020-08-05 Thread Ben Hutchings
x27;t* include any urgent security updates, though I expect that such an update will be needed before long. Ben. -- Ben Hutchings Theory and practice are closer in theory than in practice - John Levine signature.asc Description: This is a digitally signed message part

RFT: Linux 3.16.84 package, updated

2020-06-03 Thread Ben Hutchings
find any regressions from the current released version (3.16.81-1). I intend to upload linux early next week. Ben. -- Ben Hutchings Make three consecutive correct guesses and you will be considered an expert. signature.asc Description: This is a digitally signed message part

RFT: Linux 3.16.84 package

2020-05-24 Thread Ben Hutchings
find any regressions from the current released version (3.16.81-1). I intend to upload linux within the next week. Ben. -- Ben Hutchings You can't have everything. Where would you put it? signature.asc Description: This is a digitally signed message part

RFT: Linux 3.16.83 package

2020-05-11 Thread Ben Hutchings
find any regressions from the current released version (3.16.81-1). Ben. -- Ben Hutchings Teamwork is essential - it allows you to blame someone else. signature.asc Description: This is a digitally signed message part

Re: Jessie update of ceph?

2020-04-11 Thread Ben Hutchings
27;s ceph client as far as 4.9, but introduced a bug in the process (since fixed). At that point I decided not to backport them any further, but can have a go if someone sets up an updated server to test against. Ben. -- Ben Hutchings Time is nature's way of making sure that ev

RFT: Linux 3.16.82 package

2020-04-02 Thread Ben Hutchings
find any regressions from the current released version (3.16.81-1). Ben. -- Ben Hutchings Lowery's Law: If it jams, force it. If it breaks, it needed replacing anyway. signature.asc Description: This is a digitally signed message part

Re: Wheezy LTS not present in archive.debian.org

2020-03-17 Thread Ben Hutchings
On Tue, 2020-03-17 at 10:00 +0100, Emilio Pozuelo Monfort wrote: > On 17/03/2020 03:58, Ben Hutchings wrote: > > On Fri, 2020-03-13 at 16:29 +0100, Piviul wrote: > > > Sylvain Beucler ha scritto il 06/03/20 alle 13:14: [...] > > > > Anybody knows if there's an a

Re: Wheezy LTS not present in archive.debian.org

2020-03-16 Thread Ben Hutchings
re no more point releases and so security updates are not copied to the main archive, or from there to archive.debian.org. (But squeeze-lts was on the main archive, so it was copied along with the main squeeze suite.) So it seems that we are lacking a procedure for archiving a suite from the secur

Re: linux-latest for jessie

2020-03-10 Thread Ben Hutchings
;s the current best practice for running jessie systems > with Linux 4.9? (I know that jessie is oldoldstable, the replacement > systems are already under testing, but until then...) > > (Please Cc me, I'm not subscribed.) -- Ben Hutchings 73.46% of all statistics are made up.

Re: (semi-)automatic unclaim of packages with more than 2 weeks of inactivity (and missing DLAs on www.do)

2020-02-24 Thread Ben Hutchings
sing on www.debian.org: > > ERROR: .data or .wml file missing for DLA 2114-1 (reserved by Ben Hutchings) [...] Not yet issued as the upload is waiting in NEW. Ben. -- Ben Hutchings Larkinson's Law: All laws are basically false. signature.asc Description: This is a digitally signed message part

Re: Is it okay to bump dh-compat?

2020-02-22 Thread Ben Hutchings
tream is a small change. If the maintainer has also made that change in later versions, I wouldn't hesitate to do so in a security update. Ben. -- Ben Hutchings You can't have everything. Where would you put it? signature.asc Description: This is a digitally signed message part

Re: phppgadmin / CVE-2019-10784

2020-02-20 Thread Ben Hutchings
tect against CSRF, though it's not the most effective mitigation: <https://owasp.org/www-community/attacks/csrf>. Ben. -- Ben Hutchings Unix is many things to many people, but it's never been everything to anybody. signature.asc Description: This is a digitally signed message part

Re: closing bugs in security uploads and the BTS

2020-02-20 Thread Ben Hutchings
LTS and normal security support? -- Ben Hutchings Unix is many things to many people, but it's never been everything to anybody. signature.asc Description: This is a digitally signed message part

Re: Triage advice for CVE-2020-8492

2020-02-02 Thread Ben Hutchings
to check with > others for an opinion,. > > For now I have marked as ignored, but if people have good arguments I will > change my mind. > > Best regards > > // Ola > -- Ben Hutchings I haven't lost my mind; it's backed up on tape somewhere. signature.asc Description: This is a digitally signed message part

Re: [CVE-2019-17026] Firefox Security Advisory 2020-03

2020-01-29 Thread Ben Hutchings
er}-security also references packages with an upstream version 68.4.1esr. However DLA-2061-1 for jessie-security has a version of 68.4.0esr-1~deb8u1. I think the wrong version was backported to jessie-security, leaving this issue unfixed. Ben. > [0] https://security-tracker.debian.org/tracker/CVE-2

Re: [SECURITY] [DLA 2068-1] linux security update

2020-01-18 Thread Ben Hutchings
scription form at < https://www.debian.org/MailingLists/unsubscribe>. Tick the box for "debian-lts-announce" (and any other Debian lists he was subscribed to), enter the email address that he used, and press Unsubscribe. You'll then get a confirmation mail, which you need to respo

RFT: Linux 3.16.81 package

2020-01-13 Thread Ben Hutchings
find any regressions from the current released version (3.16.76-1). I intend to upload soon, so please plan to test and report back before the end of this week. Ben. -- Ben Hutchings Unix is many things to many people, but it's never been everything to anybody. signature.asc Description:

RFT: Linux 3.16.80 package

2020-01-05 Thread Ben Hutchings
find any regressions from the current released version (3.16.76-1). Ben. -- Ben Hutchings Who are all these weirdos? - David Bowie, on joining IRC signature.asc Description: This is a digitally signed message part

RFT: Linux 3.16.79 package

2019-12-11 Thread Ben Hutchings
find any regressions from the current released version (3.16.76-1). Ben. -- Ben Hutchings The generation of random numbers is too important to be left to chance. - Robert Coveyou signature.asc Description: This is a digitally signed message

RFT: Linux 3.16.78 package

2019-11-22 Thread Ben Hutchings
find any regressions from the current released version (3.16.76-1). Ben. -- Ben Hutchings I say we take off; nuke the site from orbit. It's the only way to be sure. signature.asc Description: This is a digitally signed message part

RFT: Linux 3.16.76 package

2019-11-03 Thread Ben Hutchings
find any regressions from the current released version (3.16.74-1). Ben. -- Ben Hutchings The generation of random numbers is too important to be left to chance. - Robert Coveyou signature.asc Description: This is a digitally signed message

RFT: Linux 3.16.75 package

2019-10-22 Thread Ben Hutchings
find any regressions from the current released version (3.16.74-1). Ben. -- Ben Hutchings Hoare's Law of Large Problems: Inside every large problem is a small problem struggling to get out. signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DLA 1942-2] phpbb3 regression update

2019-10-08 Thread Ben Hutchings
On Mon, 2019-10-07 at 07:02 -0700, howard wrote: > Please discontinue sending [SECURITY] [XXX --] items,Thank > you! [...] You need to write to debian-lts-announce-requ...@lists.debian.org, as explained at <https://www.debian.org/MailingLists/#subunsub>. Ben. -- Ben Hu

Re: [SECURITY] [DLA 1942-1] phpbb3 security update

2019-10-06 Thread Ben Hutchings
an announce lists, is configured to redirect replies to a discussion list. Mike, you should issue a DLA-1942-2 as a new non-reply message. Ben. -- Ben Hutchings One of the nice things about standards is that there are so many of them. signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DLA 1865-1] sdl-image1.2 security update

2019-07-27 Thread Ben Hutchings
ounce about package updates should be numbered DLAs. 3. DLAs that are related to prior DLAs should use the same first part and an incremented second part. Ben. -- Ben Hutchings If at first you don't succeed, you're doing about average. signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DLA 1865-1] sdl-image1.2 security update

2019-07-27 Thread Ben Hutchings
.12-5+deb9u2. > > Typo: version number is 1.2.12-5+deb8u2, not 1.2.12-5+deb9u2. The proper way to make such a correction is to issue a -2 advisory with the correct information and a note about what changed. Ben. -- Ben Hutchings Lowery's Law: If it jams, force it. If it bre

RFT: Linux 3.16.67 + MDS package

2019-05-16 Thread Ben Hutchings
updates up to 3.16.67 plus a backport of MDS mitigations to 3.16 which will be in 3.16.68. Let me know if you find any regressions from the current released version (3.16.64-2). Ben. -- Ben Hutchings Man invented language to satisfy his deep need to complain

Re: Security update in Jessie for intel-microcode and linux?

2019-05-15 Thread Ben Hutchings
he intel-microcode update as he has done before. Note that stable branches older than 4.9 are not getting the speculation mitigations for KVM, and should not be used with untrusted guests (at least on Intel hardware). Ben. -- Ben Hutchings To err is human; to really foul things up r

Re: Bug#928660: hyperv-daemons matching linux-image-4.9-amd64 in jessie-security are missing

2019-05-12 Thread Ben Hutchings
s. > > > > Please always include them with the kernel-uploades for jessie- > > security. > > > > Christoph > > > > -- Ben Hutchings It is a miracle that curiosity survives formal education. - Albert Einstein signature.asc Description: This is a digitally signed message part

RFT: Linux 3.16.66 package

2019-05-05 Thread Ben Hutchings
find any regressions from the current released version (3.16.64-2). Ben. -- Ben Hutchings Time is nature's way of making sure that everything doesn't happen at once. signature.asc Description: This is a digitally signed message part

Re: Re: Removal of Wheezy and Jessie (except LTS) from mirrors

2019-04-23 Thread Ben Hutchings
the -updates suite will not be removed until end of LTS. As for jessie-backports, the removal was announced in July 2018. Ben. > OK, I am a little late to pick up on this, but I'm sure there are > other people still running some Jessie systems who only run update > commands on the

Re: [Pkg-clamav-devel] LTS update of clamav and call for advice

2019-04-16 Thread Ben Hutchings
Assuming that you are going to take almost all the changes from stretch: 1. Add all the newer changelog entries from stretch to jessie's debian/changelog. 2. Add an entry for the backport version. 3. Use the -v option with the previous jessie version when building the source package.

RFT: Linux 3.16.65 package

2019-04-09 Thread Ben Hutchings
find any regressions from the current released version (3.16.64-2). Ben. -- Ben Hutchings Never attribute to conspiracy what can adequately be explained by stupidity. signature.asc Description: This is a digitally signed message part

Re: jessie-updates gone

2019-04-03 Thread Ben Hutchings
On Wed, 2019-04-03 at 00:02 +, Andy Smith wrote: > Hi Ben, > > On Wed, Apr 03, 2019 at 12:23:46AM +0100, Ben Hutchings wrote: > > Debian LTS is a team within Debian. It's separate from the main > > security team and the stable release managers, but it is no l

Re: jessie-updates gone

2019-04-02 Thread Ben Hutchings
t's separate from the main security team and the stable release managers, but it is no less part of Debian. The transition to extended support by the LTS team has always been announced, in any case: https://lists.debian.org/debian-announce/2014/msg4.html https://lists.debian.org/debian-announce/201

Re: firmware-nonfree update

2019-04-01 Thread Ben Hutchings
On Mon, 2019-03-25 at 17:20 +, Ben Hutchings wrote: > On Tue, 2019-03-05 at 22:00 +0000, Ben Hutchings wrote: > > On Fri, 2019-03-01 at 14:05 +0100, Emilio Pozuelo Monfort wrote: > [...] > > > (It > > > may be unlikely for old suites to have users with new

Re: Having a test repository for (kernel?) updates

2019-04-01 Thread Ben Hutchings
pload packages for testing to people.debian.org, in the absence of something more official. Ben. -- Ben Hutchings Life is what happens to you while you're busy making other plans. - John Lennon signature.asc Description: This is a digitally signed message part

Re: Crashes: Debian 8, new kernels and cifs

2019-03-31 Thread Ben Hutchings
(linux-image-3.16.0-7-amd64 > (version 3.16.59-1) both kernels are crashing while mounting the CIFS > share: [...] Hi, sorry for the slow response to this. I can reproduce this and am testing a candidate fix. Ben. -- Ben Hutchings Life is what happens to you while you

Re: Where is wheezy-lts archive?

2019-03-31 Thread Ben Hutchings
On Sun, 2019-03-31 at 16:32 -0600, Bob Proulx wrote: > Ben Hutchings wrote: > > Bob Proulx wrote: > > > Where would the entire wheezy-lts be archived? Hopefully it wasn't lost. > > > > There was no wheezy-lts suite. All uploads during the LTS period wen

Re: Where is wheezy-lts archive?

2019-03-31 Thread Ben Hutchings
re was no wheezy-lts suite. All uploads during the LTS period went into wheezy-security which is currently still available from security.debian.org (but I would expect it to be archived soon). Ben. -- Ben Hutchings Design a system any fool can use, and only a fool will want to use it. signat

RFT: linux with fix for VMware regression

2019-03-29 Thread Ben Hutchings
image packages if needed. Ben. -- Ben Hutchings Design a system any fool can use, and only a fool will want to use it. signature.asc Description: This is a digitally signed message part

Re: Accepted linux 3.16.64-1 (all source) into oldstable

2019-03-27 Thread Ben Hutchings
On Wed, 2019-03-27 at 20:19 +0100, Pascal Hambourg wrote: > Hello, > > Le 27/03/2019 à 08:32, Ben Hutchings wrote : > > Binary: linux-doc-3.16 linux-manual-3.16 linux-source-3.16 > > linux-support-3.16.0-8 > > Since this is an ABI change, is linux-latest going to b

Re: firmware-nonfree update

2019-03-26 Thread Ben Hutchings
On Tue, 2019-03-26 at 17:51 +0100, Emilio Pozuelo Monfort wrote: > On 25/03/2019 18:20, Ben Hutchings wrote: > > On Tue, 2019-03-05 at 22:00 +0000, Ben Hutchings wrote: > > > On Fri, 2019-03-01 at 14:05 +0100, Emilio Pozuelo Monfort wrote: > > [...] > > > >

Re: firmware-nonfree update

2019-03-25 Thread Ben Hutchings
On Tue, 2019-03-05 at 22:00 +, Ben Hutchings wrote: > On Fri, 2019-03-01 at 14:05 +0100, Emilio Pozuelo Monfort wrote: [...] > > (It > > may be unlikely for old suites to have users with new hardware, however it's > > possible and users that don't have i

Re: Newer kernel for jessie backports

2019-03-14 Thread Ben Hutchings
reviously sent to debian-kernel but was re-posted here) > -- Ben Hutchings Make three consecutive correct guesses and you will be considered an expert. signature.asc Description: This is a digitally signed message part

Re: firmware-nonfree update

2019-03-05 Thread Ben Hutchings
are, > so > it wouldn't hurt to ship it.) > > My branch is for jessie but I can prepare it for stretch too if you think > that's > worth it. The current jessie-security version of firmware-nonfree is really a backport from stretch. So I would prefer it if you update the

Re: Bug#922384: jessie-pu: package gsoap/2.8.17-1+deb8u2

2019-02-16 Thread Ben Hutchings
blic header, and is exported, so I don't know whether this distinction exists other than in the mind of the upstream developer... Ben. -- Ben Hutchings When in doubt, use brute force. - Ken Thompson signature.asc Description: This is a digitally signed message part

Re: Bug#922384: jessie-pu: package gsoap/2.8.17-1+deb8u2

2019-02-15 Thread Ben Hutchings
if (len == 0 || len > PTRDIFF_MAX) return 0; > Is that right? If so, would it be possible to just change the type to a > ssize_t > instead? Either that or ptrdiff_t should work. Ben. -- Ben Hutchings When in doubt, use brute force. - Ken Thompson signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DSA 4371-1] apt security update

2019-02-14 Thread Ben Hutchings
t; > OK, that sounds fine. I've just started a build now as 8.11.1 for the > > 4 LTS arches. I'll do a little bit of smoke testing, then publish in > > the normal place (https://cdimage.debian.org/cdimage/archive) and > > report back. > > Now done. Thank you very much, Steve. Ben. -- Ben Hutchings When in doubt, use brute force. - Ken Thompson signature.asc Description: This is a digitally signed message part

Re: proposed removal of Enigmail from jessie/LTS

2019-01-22 Thread Ben Hutchings
the least bad. Ben. > But I could be convinced otherwise. -- Ben Hutchings The most exhausting thing in life is being insincere. - Anne Morrow Lindberg signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Ben Hutchings
On Tue, 2019-01-22 at 13:50 +, Steve McIntyre wrote: > On Tue, Jan 22, 2019 at 01:44:12PM +0000, Ben Hutchings wrote: > > On Tue, 2019-01-22 at 13:17 +0100, Yves-Alexis Perez wrote: > > > - > > &g

Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-22 Thread Ben Hutchings
initial installation and we don't have any provision for updating installer images during LTS. So we're either going to have to revisit that or come up with some kind of workaround for installation time. Ben. -- Ben Hutchings Power corrupts. Absolute power is kind of neat. - John L

Re: gzip not working properly

2019-01-13 Thread Ben Hutchings
from gzip likely relates to creation of the initramfs image, which has to go in /boot. If there isn't even room for 2 versions of the kernel and initramfs in /boot, another option would be to reduce the size of the initramfs by setting MODULES=dep (see initramfs.conf(5)). Ben. -- Ben Hutchi

Re: Xen 4.4 updates vs. Xen Stretch backport

2018-12-03 Thread Ben Hutchings
On Mon, 2018-12-03 at 15:49 -0500, Antoine Beaupré wrote: > On 2018-12-03 20:40:08, Ben Hutchings wrote: > > [...] > > > I don't see this as an acceptable option for LTS. We could maybe add a > > xen-4.8 package if it was popular in jessie-backports, but that does

Re: Xen 4.4 updates vs. Xen Stretch backport

2018-12-03 Thread Ben Hutchings
a working day or less if we abandon Xen > 4.4. [...] I don't see this as an acceptable option for LTS. We could maybe add a xen-4.8 package if it was popular in jessie-backports, but that doesn't excuse us from having to support 4.4. Ben. -- Ben Hutchings Beware of bugs in the above code; I have only proved it correct, not tried it. - Donald Knuth signature.asc Description: This is a digitally signed message part

Re: QEMU in Jessie: call for testers

2018-11-23 Thread Ben Hutchings
alisation. However, nested VMX was considered experimental in KVM for a long time so you have to set a module parameter to enable it. Ben. -- Ben Hutchings I'm always amazed by the number of people who take up solipsism because they heard someone else explain it. - E*Borg on alt.fan.pratchett signature.asc Description: This is a digitally signed message part

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-20 Thread Ben Hutchings
On Tue, 2018-11-20 at 10:28 -0500, Antoine Beaupré wrote: > On 2018-11-20 15:19:45, Ben Hutchings wrote: > > On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: [...] > > > I think this is overengineered. I still haven't heard exactly what the > > > probl

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-20 Thread Ben Hutchings
On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: > On 2018-11-13 22:02:45, Ben Hutchings wrote: > > On Tue, 2018-11-13 at 12:31 -0500, Daniel Kahn Gillmor wrote: > > > On Mon 2018-11-12 15:16:39 -0500, Antoine Beaupré wrote: > > > > > > > *

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-13 Thread Ben Hutchings
nd that would remain after an upgrade. But it would be harmless cruft that "apt autoremove" would deal with. (I assume that GnuPG 2.1 would be packaged as "gnupg2", replacing GnuPG 2.0 since that is no longer supported upstream. If not then I do see a problem of how to make, say,

Re: the way to enigmail: gnupg 2.1 backport considerations

2018-11-13 Thread Ben Hutchings
don't think they are suitable for jessie-security. Would it be possible to bundle the libraries with gpg 2.1, and install them somewhere that doesn't conflict with the existing versions? Ben. -- Ben Hutchings No political challenge can be met by shopping. - George Monbiot signature.asc Description: This is a digitally signed message part

Re: Documenting installer issues for jessie LTS

2018-11-10 Thread Ben Hutchings
On Sat, 2018-11-10 at 22:55 +0100, Laura Arjona Reina wrote: > Hello all > > El 9/11/18 a las 2:50, Ben Hutchings escribió: > > I recently discovered a bug in the installer (#908711). During > > installation with network sources enabled, security update are normally > >

Documenting installer issues for jessie LTS

2018-11-08 Thread Ben Hutchings
wever, I wonder whether it would be helpful and possible to update the release notes or other official documentation at this stage? Ben. -- Ben Hutchings Knowledge is power. France is bacon. signature.asc Description: This is a digitally signed message part

Re: Xen 4.4 updates - request for feedback

2018-10-30 Thread Ben Hutchings
On Mon, 2018-10-29 at 15:56 +0100, Peter Dreuw wrote: > Am 26.10.18 um 14:48 schrieb Ben Hutchings: > > On Thu, 2018-10-25 at 11:32 +0200, Peter Dreuw wrote: > > > Am 25.10.18 um 10:08 schrieb Peter Dreuw: > > > may one point to make it clear, tho it migh

Re: Confusing our users - who is supporting LTS?

2018-10-27 Thread Ben Hutchings
nizations, complete with the restrictions that might come > with that. Debian can't afford to pay developers in general, and previous proposals to pay specific developers were not well received. So, I don't this happening. Ben. > Another way is for Debian websites to not solic

Re: Confusing our users - who is supporting LTS?

2018-10-26 Thread Ben Hutchings
but "supported by LTS", which might be confusing to these users. So, > maybe just fix this nitpick? [...] Although Freexian organises funding for LTS work, there are other LTS contributors paid directly by other organisations or working on their own time. So the best name we have for those

Re: Confusing our users - who is supporting LTS?

2018-10-26 Thread Ben Hutchings
we refer to jessie's status (and future releases when regular security support for them ends). Ben. -- Ben Hutchings The obvious mathematical breakthrough [to break modern encryption] would be development of an easy way to factor large prime numbers.

Re: Xen 4.4 updates - request for feedback

2018-10-26 Thread Ben Hutchings
ll need to be as an additional source package, and that must not build any binary packages that are built from the "xen" source package. I did this for the Linux kernel by adding the "linux-4.9" source package. Ben. > From my perspective, looking into these fixes for 4.4 is mor

Re: backported gnutls28 3.3.30 packages availabled for jessie LTS

2018-10-23 Thread Ben Hutchings
. The previous behavior can be restored using the flag --with-ssl3 to configure. ** libgnutls: require strict DER encoding for certificates, OCSP requests, private keys, CRLs and certificate requests. This backports the already default behavior from the 3.5.x branch, in order to reduce i

Re: Jessie update of libssh?

2018-10-16 Thread Ben Hutchings
On Wed, 2018-10-17 at 03:18 +0100, Ben Hutchings wrote: > I've pushed backported fixes to a jessie-security branch at < > https://salsa.debian.org/debian/libssh>; and uploaded packages to < > https://people.debian.org/~benh/packages/jessie-security/>;. > > The

Re: Jessie update of libssh?

2018-10-16 Thread Ben Hutchings
. I got the test suite to build and pass, but I don't have a great deal of confidence in it. So I would appreciate any suggestions for how to test that the library still works for real applications. (Or, if you prefer, you could test and upload yourselves.) Ben. -- Ben Hutchings Man invent

Re: Missing dependency on latest jessie-security release of linux-image-4.9-amd64

2018-08-27 Thread Ben Hutchings
loads for LTS, this update of the linux source package requires approval by the FTP team. This should be resolved soon. Ben. -- Ben Hutchings - Debian developer, member of kernel, installer and LTS teams signature.asc Description: This is a digitally signed message part

Re: Bug#907042: opam 1.2.0 is deprecated (jessie)

2018-08-26 Thread Ben Hutchings
satisfiable in jessie (specifically libdose3-ocaml-dev (>= 4.0.1-2~), libcmdliner- ocaml-dev (>= 0.9.7~), ibjsonm-ocaml-dev). It looks like you will need to revert several of the packaging changes. Ben. -- Ben Hutchings Klipstein's 4th Law of Prototyping and Production:

Re: Advice for building tomcat8 on jessie?

2018-07-26 Thread Ben Hutchings
nge the release name in the .changes file to "UNRELEASED" before signing it. That way, it's possible to verify the integrity of the packages but the archive would reject an upload. I put this entry in my .dput.cf to support this practice: [pdo] fqdn = people.debian.org method = rsync login = benh incoming = public_html/packages/ allowed_distributions = UNRELEASED$ Ben. -- Ben Hutchings Tomorrow will be cancelled due to lack of interest. signature.asc Description: This is a digitally signed message part

Re: XFS Metadata corruption detected - linux-image-4.9

2018-07-21 Thread Ben Hutchings
; I have gone back to linux-image-3.16 and no longer triggers any problems > in the logs, the filesystem is OK. As I wrote in the announcement, there is no need to upgrade to Linux 4.9 just because it's available. Linux 3.16 will still be supported throughout the jessie LTS period. Ben.

Re: linux-4.9 in jessie, broken dependency on linux-base

2018-07-19 Thread Ben Hutchings
On Fri, 2018-07-20 at 01:09 +0200, Baptiste Jonglez wrote: > On 19-07-18, Ben Hutchings wrote: > > On Thu, 2018-07-19 at 17:26 +0200, Baptiste Jonglez wrote: > > > I saw the recent announcement about linux-4.9 [1,2] in jessie. > > > > > > However, these new

Re: linux-4.9 in jessie, broken dependency on linux-base

2018-07-19 Thread Ben Hutchings
er, this dependency on a version not in jessie is a real bug. It is probably safe to update linux-base in jessie, but I'll have to take some time to verify that. Ben. -- Ben Hutchings We get into the habit of living before acquiring the habit of thinking.

Re: RFC: jessie-backports-lts

2018-06-10 Thread Ben Hutchings
; Does that make sense? Should we introduce such a suite? I was planning to replace linux in jessie-backports with a linux-4.9 package in jessie proper, but would also be happy to support a jessie- backports-lts instead. Ben. -- Ben Hutchings If at first you don't succeed, you're doing a

Re: last call for wheezy updates and remaining work for transition

2018-05-31 Thread Ben Hutchings
e's the > whole thing, for the record: [...] > linux [...] I will update linux in the next few hours, but won't fix all the outstanding issues. Ben. -- Ben Hutchings No political challenge can be met by shopping. - George Monbiot signature.asc Description: This is a digitally signed message part

Re: intel-microcode?

2018-05-31 Thread Ben Hutchings
d the kernel changes to do so have not been backported to Linux 3.2. So there seems to be little point in doing the microcode update. Ben. -- Ben Hutchings No political challenge can be met by shopping. - George Monbiot signature.asc Description: This is a digitally signed message part

Re: Draft for EOL announcement

2018-05-22 Thread Ben Hutchings
updates for Debian 7.0. A > subset of Wheezy packages will be supported by Freexian though. Detailed > information can be found at https://deb.freexian.com/extended-lts. [...] -- Ben Hutchings Unix is many things to many people, but it's never been everything to anybody. signature.asc Description: This is a digitally signed message part

Re: [SECURITY] [DLA 1369-1] linux security update

2018-05-03 Thread Ben Hutchings
upload (which builds the metapackages) was handled entirely automatically. This doesn't happen for non-LTS security suites because the security team has to approve each update and can ensure that multiple related updates are done at the same time. Ben. -- Ben Hutchings Every program is eithe

Re: linux backport in jessie LTS

2018-04-24 Thread Ben Hutchings
On Tue, 2018-04-24 at 15:44 +0200, Raphael Hertzog wrote: > On Sun, 22 Apr 2018, Ben Hutchings wrote: > > Therefore, would it make sense to add a Linux 4.9 backport to the > > regular jessie and jessie-security suites? > > Yes, I think so. It's also interesting to

linux backport in jessie LTS

2018-04-22 Thread Ben Hutchings
running jessie with Linux 4.9 and expecting to continue doing so through the LTS period? (Maintaining kernel backports is generally quite easy once the suite they are backported from is stable.) Ben. -- Ben Hutchings It is easier to write an incorrect program than to understand a correct one

Re: Better communication about spectre/meltdown

2018-04-16 Thread Ben Hutchings
On Fri, 2018-04-13 at 21:18 -0400, Roberto C. Sánchez wrote: > On Sat, Apr 14, 2018 at 02:11:28AM +0100, Ben Hutchings wrote: > > On Sat, 2018-04-14 at 01:57 +0100, Ben Hutchings wrote: > > [...] > > > I've pushed my version to: > > > https://people.deb

Re: Better communication about spectre/meltdown

2018-04-16 Thread Ben Hutchings
On Sun, 2018-04-15 at 00:42 +0100, Ben Hutchings wrote: > On Sat, 2018-04-14 at 02:11 +0100, Ben Hutchings wrote: > > On Sat, 2018-04-14 at 01:57 +0100, Ben Hutchings wrote: > > [...] > > > I've pushed my version to: > > > https://people.debian.org/~benh/pa

Re: Better communication about spectre/meltdown

2018-04-14 Thread Ben Hutchings
On Sat, 2018-04-14 at 02:11 +0100, Ben Hutchings wrote: > On Sat, 2018-04-14 at 01:57 +0100, Ben Hutchings wrote: > [...] > > I've pushed my version to: > > https://people.debian.org/~benh/packages/wheezy-security/ > > > > I believe this builds the right se

Re: Better communication about spectre/meltdown

2018-04-13 Thread Ben Hutchings
On Sat, 2018-04-14 at 01:57 +0100, Ben Hutchings wrote: [...] > I've pushed my version to: > https://people.debian.org/~benh/packages/wheezy-security/ > > I believe this builds the right set of binary packages, and the files > contained in them match the binaries built from 4.

Re: Better communication about spectre/meltdown

2018-04-13 Thread Ben Hutchings
On Thu, 2018-04-12 at 23:02 +0100, Ben Hutchings wrote: > [Trimmed the cc list] > > On Thu, 2018-04-12 at 18:39 +0100, Ben Hutchings wrote: > > On Thu, 2018-04-12 at 17:00 +0100, Ben Hutchings wrote: > > [...] > > > I didn't know how it worked, only that it do

Re: Better communication about spectre/meltdown

2018-04-12 Thread Ben Hutchings
[Trimmed the cc list] On Thu, 2018-04-12 at 18:39 +0100, Ben Hutchings wrote: > On Thu, 2018-04-12 at 17:00 +0100, Ben Hutchings wrote: [...] > > I didn't know how it worked, only that it does work. Anyway, I've > > looked now and I think you need to apply the followin

  1   2   3   >