Bug#829606: jessie-pu: package duck/0.7+deb8u1

2017-01-07 Thread Julien Cristau
On Fri, Jan 6, 2017 at 22:07:19 +0100, Simon Kainz wrote: > Ah, sorry, i tried to follow [0], which then either is wrong or does not > apply in my case. Can someone enlighten me please. > It doesn't apply in your case, since the security team decided not to fix this through security.d.o.

Processed: Re: Bug#829606: jessie-pu: package duck/0.7+deb8u1

2017-01-06 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + pending Bug #829606 [release.debian.org] jessie-pu: package duck/0.7+deb8u1 Added tag(s) pending. -- 829606: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829606 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2017-01-06 Thread Adam D. Barratt
Control: tags -1 + pending On Fri, 2017-01-06 at 22:07 +0100, Simon Kainz wrote: > Am 2017-01-06 um 22:04 schrieb Salvatore Bonaccorso: > > Hi Simon > > > > Looks you uploaded to the wrong host (security-master instead of > > ftp-master), and the target distribution was set to jessie-security. >

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2017-01-06 Thread Salvatore Bonaccorso
Hi Simon Looks you uploaded to the wrong host (security-master instead of ftp-master), and the target distribution was set to jessie-security. I have thus rejected the package on security-master. So as Adam said, you need to change the target distribution to 'jessie', then upload to ftp-master

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2017-01-06 Thread Simon Kainz
Ah, sorry, i tried to follow [0], which then either is wrong or does not apply in my case. Can someone enlighten me please. [0] https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security Am 2017-01-06 um 22:04 schrieb Salvatore Bonaccorso: > Hi Simon > > Looks you uploaded

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-12-29 Thread Simon Kainz
Hello, sorry for the delay, i somehow thought this was already fixed. I will upload my fixed version (following [0] today/tomorrow) - Scarlet fever struck the whole family :-(. Regards, Simon [0] https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security Am 2016-12-26

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-12-26 Thread Moritz Mühlenhoff
On Sun, Aug 28, 2016 at 03:55:24PM +0100, Adam D. Barratt wrote: > Control: tags -1 +confirmed -moreinfo > > [re-ordered] > > > Am 2016-07-29 um 14:20 schrieb Julien Cristau: > > > Control: tag -1 moreinfo > > > > > > On Mon, Jul 4, 2016 at 18:22:46 +0200, Simon Kainz wrote: > [...] > > >>

Processed: Re: Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-08-28 Thread Debian Bug Tracking System
Processing control commands: > tags -1 +confirmed -moreinfo Bug #829606 [release.debian.org] jessie-pu: package duck/0.7+deb8u1 Added tag(s) confirmed. Bug #829606 [release.debian.org] jessie-pu: package duck/0.7+deb8u1 Removed tag(s) moreinfo. -- 829606:

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-08-28 Thread Adam D. Barratt
Control: tags -1 +confirmed -moreinfo [re-ordered] > Am 2016-07-29 um 14:20 schrieb Julien Cristau: > > Control: tag -1 moreinfo > > > > On Mon, Jul 4, 2016 at 18:22:46 +0200, Simon Kainz wrote: [...] > >> Paul Wise found out that duck rund untrusted code from the current > >> directory as >

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-08-01 Thread Simon Kainz
Hello, sorry for making this extra complicated :-( Ok, please see the attached patch, which is the same as the previous one, but cleaned up - i made a diff without commiting all my changes, so git had a hard time recognising rename vs. delete new. Sorry for the noise. Simon Am 2016-07-29 um

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-07-29 Thread Julien Cristau
Control: tag -1 moreinfo On Mon, Jul 4, 2016 at 18:22:46 +0200, Simon Kainz wrote: > Package: release.debian.org > Severity: normal > Tags: jessie > User: release.debian@packages.debian.org > Usertags: pu > > Paul Wise found out that duck rund untrusted code from the current directory >

Processed: Re: Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-07-29 Thread Debian Bug Tracking System
Processing control commands: > tag -1 moreinfo Bug #829606 [release.debian.org] jessie-pu: package duck/0.7+deb8u1 Added tag(s) moreinfo. -- 829606: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829606 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-07-05 Thread Salvatore Bonaccorso
Hi Adam, On Tue, Jul 05, 2016 at 08:06:50AM +0200, Adam D. Barratt wrote: > Control: tags -1 + moreinfo > > On Mon, 2016-07-04 at 18:22 +0200, Simon Kainz wrote: > > Paul Wise found out that duck rund untrusted code from the current > > directory as > > well as the ./lib and ./lib/checks

Processed: Re: Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-07-05 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + moreinfo Bug #829606 [release.debian.org] jessie-pu: package duck/0.7+deb8u1 Added tag(s) moreinfo. -- 829606: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829606 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-07-05 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Mon, 2016-07-04 at 18:22 +0200, Simon Kainz wrote: > Paul Wise found out that duck rund untrusted code from the current directory > as > well as the ./lib and ./lib/checks directory. The attached patch fixes this > issue. +duck (0.7+deb8u1) jessie-security;

Bug#829606: jessie-pu: package duck/0.7+deb8u1

2016-07-04 Thread Simon Kainz
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Paul Wise found out that duck rund untrusted code from the current directory as well as the ./lib and ./lib/checks directory. The attached patch fixes this issue. -- System