Re: testing security status

2006-02-23 Thread Steve Langasek
On Tue, Feb 21, 2006 at 07:25:50PM -0500, Joey Hess wrote: ffmpeg 28 days old! FTBS on mips, mipsel, apparently generates broken control file Pretty sure this is a transient buildd problem, actually. Given back. imagemagick 7 days old blocked by perl Looks like

Re: testing security status

2006-02-23 Thread Aníbal Monsalve Salazar
On Tue, Feb 21, 2006 at 07:25:50PM -0500, Joey Hess wrote: Note, I've switched over to using http://idssi.enyo.de/tracker/status/dtsa-candidates to make these reports; the backend data is the same. I uploaded a new version of metamail to close CVE-2006-0709. Changes: metamail (2.7-51)

testing security status

2006-02-21 Thread Joey Hess
Note, I've switched over to using http://idssi.enyo.de/tracker/status/dtsa-candidates to make these reports; the backend data is the same. blender 13 days old FTBS on mips, mipsel coreutils 96 days old! FTBFS on ia64, test suite failure RC bugs ffmpeg

Re: testing security status

2006-02-21 Thread Aníbal Monsalve Salazar
On Tue, Feb 21, 2006 at 07:25:50PM -0500, Joey Hess wrote: Note, I've switched over to using http://idssi.enyo.de/tracker/status/dtsa-candidates to make these reports; the backend data is the same. [...] powersave 11 days old needs to go in with kpowersave, which is 5/10 days old

Re: testing security status

2006-01-24 Thread Joey Hess
Steve Langasek wrote: fuse 11 days old 3 RC bugs suggest removal from testing Hinted for removal. FWIW, there's been a DTSA for this now. gpdf too young And waits on gnome-vfs2/dbus/avahi; with luck this will all clear up shortly. And this shortly. -- see

Re: testing security status

2006-01-23 Thread Steve Langasek
On Sat, Jan 21, 2006 at 04:28:49PM -0500, Joey Hess wrote: The list is back. Not very interesting at the moment though from a RM POV. These packages have fixed security holes that are still present in testing: amanda 20 days old FTBFS alpha due to missing gnuplot deps, probably

testing security status

2006-01-21 Thread Joey Hess
The list is back. Not very interesting at the moment though from a RM POV. These packages have fixed security holes that are still present in testing: amanda 20 days old FTBFS alpha due to missing gnuplot deps, probably needs requeue apache2 too young blender too

Re: testing security status

2005-12-11 Thread Steve Langasek
On Sat, Dec 10, 2005 at 05:48:50PM -0500, Joey Hess wrote: centericq 9 days old missing s390 upload (built successfuly 4 days ago) blocked by gcc-4.0 DTSA issued Also blocked by fribidi, which needed (and now has) a hint for its udeb. As mentioned earlier, gcc-4.0 is

testing security status

2005-12-10 Thread Joey Hess
centericq 9 days old missing s390 upload (built successfuly 4 days ago) blocked by gcc-4.0 DTSA issued chmlib 38 days old! bocked by xchm, which is blocked by gcc-4.0 coreutils 23 days old! RC bug FTBFS on ia64 (pwd test

Re: testing security status

2005-12-10 Thread Russ Allbery
Joey Hess [EMAIL PROTECTED] writes: curl 2 days old FTBFS on hppa blocked by krb5 (bug #341898 needs to be closed on Dec 13th) Yup, I'm watching it. The only remaining issue that I want to see dealt with is a fix to libapache-mod-auth-kerb before krb5 breaks the version

Re: testing security status [silliness]

2005-12-10 Thread Nathanael Nerode
Joey Hess wrote tetex-bin too young blocked by gcc-2.0 ^^^ Wow, really? ;-) I guess that shows that this is a manually generated list :-) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

testing security status

2005-11-17 Thread Joey Hess
Well, this turned out to be boring.. amd64-libs 29 days old blocked by glibc and zlib chmlib 15 days old needs to go in at same time as xchm, which is missing arm, mipsel, powerpc builds and is blocked by gcc-4.0 courier too young blocked by

Re: testing security status (post kde)

2005-11-06 Thread Florian Weimer
* Steve Langasek: Heh. Would it be worth posting summaries of the unfixed RC security bugs somewhere from time to time, to try to get more people involved with NMUing them? Or are most of these not RC security bugs at this point? There is http://idssi.enyo.de/tracker/status/release/unstable

Re: testing security status (post kde)

2005-11-04 Thread Steve Langasek
On Thu, Nov 03, 2005 at 04:58:17PM -0500, Joey Hess wrote: enigmail 17 days old blocked by mozilla and mozilla-thunderbird mozilla 23 days old vorlon is forcing it, hope that works mozilla-thunderbird 23 days old vorlon is forcing it, hope that works

Re: testing security status (post kde)

2005-11-04 Thread Frank Lichtenheld
On Fri, Nov 04, 2005 at 04:18:23AM -0800, Steve Langasek wrote: On Thu, Nov 03, 2005 at 04:58:17PM -0500, Joey Hess wrote: uim scheduled for removal Has reverse deps, though, so it's not going anywhere at the moment. Frank, thoughts on this? Someone should be begin with actually

Re: testing security status (post kde)

2005-11-04 Thread Joey Hess
Steve Langasek wrote: Heh. Would it be worth posting summaries of the unfixed RC security bugs somewhere from time to time, to try to get more people involved with NMUing them? Or are most of these not RC security bugs at this point? The majority of them are not RC. The majority of them may

Re: testing security status (post kde)

2005-11-04 Thread Steve Langasek
On Fri, Nov 04, 2005 at 03:18:25PM +0100, Frank Lichtenheld wrote: On Fri, Nov 04, 2005 at 04:18:23AM -0800, Steve Langasek wrote: On Thu, Nov 03, 2005 at 04:58:17PM -0500, Joey Hess wrote: uim scheduled for removal Has reverse deps, though, so it's not going anywhere at the moment.

testing security status (post kde)

2005-11-03 Thread Joey Hess
Steve asked me to send in one of these amazingly easy to generate mails again now that kde is in. aduser goes in tomorrow amd64-libs 15 days old blocked by glibc asterisk 80 days old 3 RC bugs - 335079: Not clear if this affects a large

Re: testing security status

2005-10-31 Thread Rolandas Juodzbalis
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve Langasek wrote: endloop: 73+157: a-6:a-8:h-7:i-8:i-6:m-157:m-6:m-5:p-6:s-8:s-13 now: 76+157: a-6:a-8:h-7:i-11:i-6:m-157:m-6:m-5:p-6:s-8:s-13 * i386: mozilla-locale-fr, mozilla-locale-lt, mozilla-thunderbird-locale-sv It is

Re: testing security status

2005-10-31 Thread Aurelien Jarno
Joey Hess a écrit : Steve Langasek wrote: endloop: 73+157: a-6:a-8:h-7:i-8:i-6:m-157:m-6:m-5:p-6:s-8:s-13 now: 76+157: a-6:a-8:h-7:i-11:i-6:m-157:m-6:m-5:p-6:s-8:s-13 * i386: mozilla-locale-fr, mozilla-locale-lt, mozilla-thunderbird-locale-sv I have uploaded a new version of

Re: testing security status

2005-10-31 Thread Nathanael Nerode
Rolandas Juodzbalis wrote: It is mozilla-locale-lt or mozilla-locale-it? In report I see -lt, but bug filled for -it? It's -lt, Joey reassigned it. -- ksig --random| -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: testing security status

2005-10-30 Thread Steve Langasek
On Sun, Oct 30, 2005 at 04:43:31PM -0500, Joey Hess wrote: Another look at security fixes that have not reached testing. Pretty boring this time, it's almost all blockage due to kde. Very few missing builds are (directly) causing propigation problems for security fixes right now, in contrast

Re: testing security status

2005-10-10 Thread Jurij Smakov
Hi On Mon, 10 Oct 2005, Joey Hess wrote: Another one of my periodic mails generated by checking every security holes listed on http://spohr.debian.org/~joeyh/testing-security.html as fixed in unstable but not in testing. CCing this time to the mailing lists for the ports that appear in the

Re: testing security status report

2005-01-06 Thread Frank Lichtenheld
On Wed, Jan 05, 2005 at 06:33:41AM -0500, Joey Hess wrote: * lintian 1.23.6 needed, have 1.23.3 for CAN-2004-1000 Uploaded at low urgency, 2 days old, should its priority be raised? Please don't do that unless one of the lintian maintainers approved. While fixing the security bug I

testing security status report

2005-01-05 Thread Joey Hess
Here I am again with the weekly report on packages that have security fixes in sid that arn't in sarge yet. I've made a web page that has essentially the same info, if you ignore the open bugs also listed there. Not sure if it will make sense for me to keep up the reports or not given this page.

Re: what's current testing-security status?

2004-10-10 Thread Kenshi Muto
At Fri, 8 Oct 2004 10:46:44 +0200, Martin Schulze wrote: It means release process won't start without testing-security. What's status of this structure? It needs to be set up. Please donate time and cookies to Ryan Murray. OK, cheer up Ryan! I'll give enough cookies when you visit my

Re: what's current testing-security status?

2004-10-08 Thread Martin Schulze
Kenshi Muto wrote: At 25 Sep 04 06:33:13 GMT, Joey Hess wrote: Steve's plan does not define N, but sets a minimum value of N for October 6th. My plan makes the minimum value of N be October 15th, but as far as I can see, does not conflict with Steve's plan otherwise. N+0 days ~140

Re: what's current testing-security status?

2004-10-08 Thread Matthias Urlichs
Hi, Martin Schulze wrote: Please donate time and cookies to Ryan Murray. I can donate time. The cookies will have to wait until debconf5 or so. ;-) -- Matthias Urlichs

what's current testing-security status?

2004-10-07 Thread Kenshi Muto
Hi, I remember JoeyH's mail of debian-boot. At 25 Sep 04 06:33:13 GMT, Joey Hess wrote: Steve's plan does not define N, but sets a minimum value of N for October 6th. My plan makes the minimum value of N be October 15th, but as far as I can see, does not conflict with Steve's plan otherwise.