Re: Upload of GNOME 2.6 to unstable

2004-04-18 Thread Martin Schulze
James Curbo wrote: Does Debian do point releases? Yes, and as a matter of fact a new revision of woody is about to come out. (3.0r3) Please take into account that there is no way we would update an entire GNOME system in such an update. The updates are only meant to suck up all those

Re: NMU sysklogd and/or switch to different system logger?

2004-04-01 Thread Martin Schulze
Nathanael Nerode wrote: It fits even better. :-) Thanks for finding the time to do this in amongst all your other work. Rrowr... now there's just db3, db4.0, glibc, linux-kernel-headers, ;-) Incidentally, regarding bug #223210, I notice: * Added a private module.h with extracted

Re: Keep non-gnome2.6 package out of the discussion please [was: GNOME 2.6 definitely not ready for unstable]

2004-05-23 Thread Martin Schulze
Moin! Martin-Éric Racine wrote: Le dim, 23/05/2004 à 01:36 +0300, Martin-Éric Racine a écrit : Today, Rhythmbox 0.8.4 entered unstable, with rather unpleasant consequences rhythmbox is not related to gnome2.6 at all, That's incorrect. Configuration of the audio sink used by

Re: Upgrading stable postgresql to 7.2.4

2004-06-13 Thread Martin Schulze
J.H.M. Dassen (Ray) wrote: Can I put the package in stable-proposed-updates anyway? I don't think that's productive. It's probably a lot more productive to use your energy to bring the existence of www.backports.org (which has 7.4.2 backports available for i386) to the attention of

Re: Sarge and real i386-boxes

2004-06-15 Thread Martin Schulze
Andrew Shugg wrote: Goswin von Brederlow said: Is anyone still using real i386 cpus? I decommissioned my last one a few months ago. (12 years old...) Maybe the best thing to do would be to announce via debian-announce, DWN etc that i386 will likely be dropped for sarge and only i486 and

Re: checking testing against this year's DSAs

2004-08-11 Thread Martin Schulze
Joey Hess wrote: Executive summary: Security holes not fixed yet in sarge include those in libpng, libpng3, php4, netkit-telnet-ssl, pavuk, www-sql, lha, log2mail, hsftp, trr19, slocate. Grep for ! for details. Good work Joey! Thanks a lot. Regards, Joey -- Everybody talks about

Re: final report on all woody DSAs and sarge

2004-08-18 Thread Martin Schulze
Many thanks for tackling this. Joey Hess wrote: On Wed, Aug 11, 2004 at 10:42:03PM -0300, Joey Hess wrote: We have now finished checking all the DSAs since woody's release, except for a few that we didn't reach any conclusions on. That the following DSAs seem to still be unfixed in

Re: final report on all woody DSAs and sarge

2004-09-03 Thread Martin Schulze
Steve Langasek wrote: pavuk 0.9pl28-3 includes the fix for DSA-527, but there is another security bug affecting this package (same bug #). Hinting this for removal from sarge. Not in stable. rlpr - hinting for removal. That won't help since it is in stable as well, so people upgrading

Re: Security in sarge

2004-09-28 Thread Martin Schulze
Joey Hess wrote: Martin Schulze wrote: ruby 1.8.1+1.8.2pre1-4 needed, have 1.8.1-8 for DSA-537 This is fixed in ruby1.8 in testing; ruby itself is a dependency package. I don't know if ruby1.7 was/is vulnetable, do you? I don't know. CAN-2004-0818: star: local root exploit I can't

Re: education-common: con't fulfill the Recommends on !i386

2004-09-30 Thread Martin Schulze
Jeroen van Wolffelaar wrote: On Mon, Sep 27, 2004 at 11:38:02PM +0200, Adrian Bunk wrote: Package: education-common Version: 0.801 Severity: serious education-common recommends grub which is available only on i386. education-common is an arch: all package, therefore, it is

Re: Bug#273734: education-common: con't fulfill the Recommends on !i386

2004-09-30 Thread Martin Schulze
Frank Lichtenheld wrote: On Thu, Sep 30, 2004 at 12:31:11PM +0200, Martin Schulze wrote: I'd rather investigate why education-common needs to recommend grub at all. The name makes me think that it's a task package, basically consisting on dependencies. Does it need to have

Re: DELO and sarge

2004-11-09 Thread Martin Schulze
Martin Michlmayr wrote: - get delo removed from Packages-arch-specific so it's actually built on all arches. This has been requested some weeks ago already. Once this is done, it'll be compiled for other architectures as well, superceding the mips binary so that it doesn't need to be

Re: DELO and sarge

2004-11-10 Thread Martin Schulze
Andreas Barth wrote: * Karsten Merker ([EMAIL PROTECTED]) [041109 19:35]: I can change the priority to optional and re-upload the package, if that is the general consent. If the priority is changed, than it needs to be done by the ftp-masters (and I guess, an upload is not required). The

Re: Testing-proposed-updates question

2004-11-11 Thread Martin Schulze
Graham Wilson wrote: On Wed, Nov 10, 2004 at 08:54:57AM +0100, Martin Schulze wrote: There is no mips buildd for testing-proposed-updates, which is one of the problems with this bypass... Is the problem that a machine does not exist to be a buildd for t-p-u, or that one has not been set

Preparation of the next stable Debian GNU/Linux update (I)

2004-11-12 Thread Martin Schulze
the license prohibits their distribution. Disclaimer -- This list intends to help the ftp-masters releasing 3.0r4. They have the final power to accept a package or not. If you want to comment on this list, please send a mail to Martin Schulze [EMAIL PROTECTED]. Last updated 2004/11/12 10

Re: Upload of GNOME 2.8 to unstable

2004-11-16 Thread Martin Schulze
Wouter Verhelst wrote: Op di, 16-11-2004 te 00:51 +0100, schreef Sven Luther: I was also under the impression (from joeyh, but he did speak about .udebs), that it also affected priority of the autobuilders in some way, that is higher urgency packages get prioritized higher in the

Re: Please hint mozilla-firefox

2004-11-16 Thread Martin Schulze
Andreas Barth wrote: * Mike Hommey ([EMAIL PROTECTED]) [041116 12:00]: Please hint mozilla-firefox for migration, so that locale packages which depend on older versions don't block it. The two issues with firefox are: - out of date on sparc. We won't hint for that issue, but you need to

Re: Testing-proposed-updates question

2004-11-18 Thread Martin Schulze
Graham Wilson wrote: On Thu, Nov 11, 2004 at 05:51:30PM +0100, Martin Schulze wrote: Graham Wilson wrote: Is the problem that a machine does not exist to be a buildd for t-p-u, or that one has not been set up yet? The latter. Do you, or anyone else for that matter, know

Re: Testing-proposed-updates question

2004-11-23 Thread Martin Schulze
Robin wrote: I have asked on debian-mips@lists.debian.org and sent a request to [EMAIL PROTECTED] as well but got no replies from anyone yet. This is getting to be pretty frustrating. Now that I see you've got a debian.org address, don't you have an account on casals including access to the

Re: What is wrong with gutenbrowser?

2004-11-25 Thread Martin Schulze
Petter Reinholdtsen wrote: The package gutenbrowser was removed some time ago from Debian. I decided this was a shame, and brought it back to life. The new package was uploaded 11 days ago, and I expected it to make it into testing yesterday. It didn't, and seem to be stuck. The package

Re: What is wrong with gutenbrowser?

2004-11-25 Thread Martin Schulze
Björn Stenberg wrote: Is it valid for a package to be present in several sections simultaneously? I.e. is my script buggy or is the repository incorrect? The repository is incorrect since non-US is mostly not working. It was fixed to fit with the stable update recently, but not more. A package

Preparation of the next stable Debian GNU/Linux update (II)

2004-11-26 Thread Martin Schulze
the final power to accept a package or not. If you want to comment on this list, please send a mail to Martin Schulze [EMAIL PROTECTED]. Last updated 2004/11/26 12:48 MET -- Of course, I didn't mean that, which is why I didn't say it. What I meant to say, I said. -- Thomas Bushnell

Re: status of getting security fixes into sarge

2004-12-10 Thread Martin Schulze
Joey Hess wrote: perl 5.8.4-4 needed, have 5.8.4-3 for CAN-2004-0976 Still missing mipsel build, should probably be re-queued or uploaded manually. I suspect there is a problem with the buildd host. Perl builds (and runs) fine in environments outside of this particular buildd.

Preparation of the next stable Debian GNU/Linux update (III)

2004-12-18 Thread Martin Schulze
Preparation of the next stable Debian GNU/Linux update == An up-to-date version is at http://people.debian.org/~joey/3.0r4/. I am preparing the next revision of the current stable Debian distribution (woody) and will infrequently send reports

Re: Preparation of the next stable Debian GNU/Linux update (III)

2004-12-18 Thread Martin Schulze
Santiago Vila wrote: Not directly related to 3.0r4, but while we are at it: Would be possible to remove packages in security.debian.org which are already part of 3.0r3? What would we gain from this? I would not like that but maybe you have a good reason for asking. Regards, Joey

Re: Preparation of the next stable Debian GNU/Linux update (III)

2004-12-18 Thread Martin Schulze
Ron Johnson wrote: On Sat, 2004-12-18 at 19:53 +0100, Santiago Vila wrote: Not directly related to 3.0r4, but while we are at it: Would be possible to remove packages in security.debian.org which are already part of 3.0r3? Isn't that not correct, since someone who installs from 3.0 or

Preparation of the next stable Debian GNU/Linux update (IV)

2004-12-24 Thread Martin Schulze
Preparation of the next stable Debian GNU/Linux update == An up-to-date version is at http://people.debian.org/~joey/3.0r4/. I am preparing the next revision of the current stable Debian distribution (woody) and will infrequently send reports

Re: wanna-build only knows about older versions?

2005-07-05 Thread Martin Schulze
Michael Stone wrote: [3] What is the proper contact procedure? debian-admin seems to be a black hole at the moment--who should [EMAIL PROTECTED] contact about buildd problems if not d-a? d-a is wrong, James and Ryan are the people to contact. They are on d-a as well, though. [4] I'm sure

Preparation of the next stable Debian GNU/Linux update (I)

2005-07-08 Thread Martin Schulze
-masters releasing 3.1r1. They have the final power to accept a package or not. If you want to comment on this list, please send a mail to Martin Schulze [EMAIL PROTECTED]. Last updated 2005/07/08 09:16 MET -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble

Re: Preparation of the next stable Debian GNU/Linux update (I)

2005-07-08 Thread Martin Schulze
Steffen Grunewald wrote: Hi Joey, On Fri, Jul 08, 2005 at 09:18:16AM +0200, Martin Schulze wrote: Preparation of the next stable Debian GNU/Linux update == An up-to-date version is at http://people.debian.org/~joey/3.1r1/. I am

Re: f-prot-installer should be updated in stable

2005-08-16 Thread Martin Schulze
Johannes Rohr wrote: I am not sure whether this is really the appropriate place for my inquiry. I am the maintainer of f-prot-installer, an installer package for the F-Prot virus scanner, which is in contrib. Currently the installer is broken due to a minor change in the F-Prot tarball that

Preparation of the next stable Debian GNU/Linux update (II)

2005-08-20 Thread Martin Schulze
to Martin Schulze [EMAIL PROTECTED]. Last updated 2005/08/20 17:09 MET -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Bug#318463: Proposed update to e2fsprogs for stable

2005-08-22 Thread Martin Schulze
Steve Langasek wrote: On Sun, Aug 21, 2005 at 11:20:49PM -0400, Theodore Ts'o wrote: I would like to upload the following release to sarge to fix a grave bug (#318463), and taking the opportunity to fix a few other potential core-dumping inducing bugs. All of these are cherry picked from

Re: Preparation of the next stable Debian GNU/Linux update (II)

2005-08-22 Thread Martin Schulze
Alexander Sack wrote: On Sat, Aug 20, 2005 at 05:11:01PM +0200, Martin Schulze wrote: If you would like to get a package updated in the stable release, you are advised to talk to the stable release manager first (see http://www.debian.org/intro/organization). Changelog

Re: Bug#318463: Proposed update to e2fsprogs for stable

2005-08-22 Thread Martin Schulze
Theodore Ts'o wrote: When is the first stable update planned to be released? I would like to update sarge before September, but haven't heard back from ftpmaster yet whether this would be possible. Regards, Joey -- MIME - broken solution for a broken design. -- Ralf Baechle -- To

Re: Bug#318463: Proposed update to e2fsprogs for stable

2005-08-23 Thread Martin Schulze
Theodore Ts'o wrote: On Tue, Aug 23, 2005 at 06:58:27AM +0200, Martin Schulze wrote: Theodore Ts'o wrote: When is the first stable update planned to be released? I would like to update sarge before September, but haven't heard back from ftpmaster yet whether this would be possible

Re: Preparation of the next stable Debian GNU/Linux update (IV)

2005-09-15 Thread Martin Schulze
Martin Zobel-Helas wrote: Hi Joey, please also update base-config. #154482 is still valid for sarge, and is very annoying. From the first glance this looks like a wrong setting in the debconf db. -- dpkg-reconfigure base-config with proper priorities Regards, Joey -- Testing?

Re: Preparation of the next stable Debian GNU/Linux update (IV)

2005-09-15 Thread Martin Schulze
Colin Watson wrote: Martin Zobel-Helas wrote: please also update base-config. #154482 is still valid for sarge, and is very annoying. From the first glance this looks like a wrong setting in the debconf db. -- dpkg-reconfigure base-config with proper priorities (a) You

Re: bug 285025

2005-10-09 Thread Martin Schulze
Thomas Bushnell BSG wrote: Bug 285025 is fixed in sarge and etch; do I need to leave the bug open? Is there anything I need to do about it? Thanks for the note, I'll update the woody package with the large patch. Regards, Joey -- This is GNU/Linux Country. On a quiet night, you

Re: f-prot-installer needs update in stable again

2005-10-25 Thread Martin Schulze
Johannes Rohr wrote: Dear release team, unfortunately the f-prot-installer package is again broken by upstream changes. The release of f-prot 4.6.2 includes a modification of the check-updates.pl script incompatible with the installer script in the package. Therefore I would like to ask for

Re: When's the mirror pulse?

2005-11-02 Thread Martin Schulze
Nathanael Nerode wrote: I've been waiting for the latest updates to etch to hit the mirrors, but I can't figure out when they'll get there. Is the time of the mirror pulse documented anywhere for the benefit of the obsessive? Incidentally, mirror.debian.org/status.html is dead. The mirror

Re: Preparation of the next stable Debian GNU/Linux update (VI)

2005-12-03 Thread Martin Schulze
Andrew Donnellan wrote: It's been a while since the last update: how long to go before r1? Dunno. Ryan (ftpmaster) won't give a green light for r1 until the kernel has been updated. That'll still take a while. Regards, Joey -- Life is too short to run proprietary software. --

Re: Preparation of the next stable Debian GNU/Linux update (VI)

2005-12-03 Thread Martin Schulze
Otavio Salvador wrote: Martin Schulze [EMAIL PROTECTED] writes: Andrew Donnellan wrote: It's been a while since the last update: how long to go before r1? Dunno. Ryan (ftpmaster) won't give a green light for r1 until the kernel has been updated. Kernel of sarge? 2.6.8

Re: fai 2.8.4sarge for sarge-proposed-updates

2006-01-15 Thread Martin Schulze
Thomas Lange wrote: Content-Description: message body text Hi, I uploaded fai (2.8.4sarge1) sarge-proposed-updates; urgency=low. This contains fixes for three important bugs. Attached is the debdiff to 2.8.4, but most lines in it are just cvs/svn diffs since I moved from CVS to svn. Most

Preparation of the next stable Debian GNU/Linux update (I)

2006-02-06 Thread Martin Schulze
. They have the final power to accept a package or not. If you want to comment on this list, please send a mail to Martin Schulze [EMAIL PROTECTED]. Last updated 2006/02/06 09:43 MET -- Reading is a lost art nowadays. -- Michael Weber signature.asc Description: Digital signature

Re: Preparation of the next stable Debian GNU/Linux update (I)

2006-02-09 Thread Martin Schulze
Martin Zobel-Helas wrote: Hi Joey, there was some discussion[1] wether the next stable update could have some timezone data updated in the glibc package. Show me the changes. Unless large chunks of the world are affected I don't consider timezone details to warrant an update in our stable

Re: Preparation of the next stable Debian GNU/Linux update (I)

2006-02-09 Thread Martin Schulze
Thomas Viehmann wrote: would you entertain a one-line fix removing the deluser command from the postrm of chipcard-tools (source package libchipcard). I'm having trouble with this on #346527 (still need to figure out how to fix this for users upgrading from original sarge) and think that this

Preparation of the next stable Debian GNU/Linux update (II)

2006-02-09 Thread Martin Schulze
their distribution. Disclaimer -- This list intends to help the ftp-masters releasing 3.1r2. They have the final power to accept a package or not. If you want to comment on this list, please send a mail to Martin Schulze [EMAIL PROTECTED]. Last updated 2006/02/10 07:22 MET -- Linux

Preparation of the next stable Debian GNU/Linux update (III)

2006-02-17 Thread Martin Schulze
Preparation of the next stable Debian GNU/Linux update == An up-to-date version is at http://people.debian.org/~joey/3.1r2/. I am preparing the next revision of the current stable Debian distribution (sarge) and will frequently send reports so

Re: Bug#349396

2006-03-01 Thread Martin Schulze
Mario Joußen wrote: Hi, I fixed the RC bug #349396 of affix-kernel with my last upload to unstable. Since the package in Sarge is unusable also, I want to update this package as well. Is this okay? Please go ahead. If it is okay, what is the correct distribution? stable or

Status of PowerPC64?

2006-03-12 Thread Martin Schulze
Dear Release managers and assistants, what is the current status of the inclusion of a powerpc64 architecture? Are there plans to include it in the archive? If so, for when is the inclusion planned? Or, what's the current status of the port as perceived by you. Is the port official and

Re: timeline for next kernel update round

2006-03-15 Thread Martin Schulze
Martin Zobel-Helas wrote: Hi Moritz, On Wednesday, 15 Mar 2006, you wrote: Frans Pop wrote: On Wednesday 15 March 2006 00:15, Moritz Muehlenhoff wrote: The update is built and tested, it'll appear soon. It contains three ABI changing security fixes, so the ABI will be bumped. I

Re: Kaffeine in Debian unstable

2006-03-27 Thread Martin Schulze
Jordi Pina Estany - Pinucset wrote: Hi, I'm here for asking if it's planned to enter Kaffeine in Debian unstable. Is there somebody working in it? Errm... Is anything wrong with the current packages? kaffeinestable0.6-1 alpha arm hppa i386 ia64 m68k mips mipsel powerpc

Re: debian history?

2006-04-03 Thread Martin Schulze
?? wrote: I wanna debian history if exist summarize debian history infomation ttp://www.debian.org/doc/manuals/project-history/ http://cvs.infodrom.org/calendar/calendar.infodrom.debian Regards, Joey -- Every use of Linux is a proper use of Linux. -- Jon 'maddog' Hall --

Re: libapache2-request-perl security upgrade broken

2006-04-04 Thread Martin Schulze
Martin Zobel-Helas wrote: When trying to upgrade to the latest libapache2-request-perl (2.04-dev-1sarge2) I've got a broken dep on perl = 5.8.4-8sarge4, but perl 5.8.4-8sarge3 only is available. Following Joey's piece of advice, I'm contacting you on that matter. He remarked that

Re: sarge upgrade - linux, grub conflict

2006-04-22 Thread Martin Schulze
Bastian Blank wrote: On Tue, Apr 18, 2006 at 05:04:53PM +0200, maximilian attems wrote: waldi why not add your patch to update-grub to the next stable release? Please keep in mind that you can't rely on a current sarge installation when it is upgraded to etch, in other words, you can't depend

Re: The powerpc port should be removed from etch release candidates ...

2006-04-27 Thread Martin Schulze
Sven Luther wrote: I have seen Frans claim various times about patches and changes i was proposing that it will never be applied anyway because i proposed it, and he didn't thrust me. Do you really thing that in the light of this me sending in patches just to have them rote in the BTS is

Re: [D-I] Preparing for update in stable

2006-04-28 Thread Martin Schulze
Andreas Barth wrote: The main problem is going to be testing the new images as it will not be possible to run an installation and download kernel udebs from s-p-u and other udebs from stable. The question is however: should we try to keep the old udebs in stable also? Are they not

Postgresql-related updates

2006-06-03 Thread Martin Schulze
Moin! DSA 1087 introduced a stricter parsing of specially encoded data streams in postgresql. Martin Pitt pointed out that psycopg and python-pgsql still use \' for '-encoding instead of '' which is the only accepted encoding after installing this security upeate. Hence, both package should

Re: release updates and the general audience

2006-06-03 Thread Martin Schulze
Andreas Barth wrote: the target group for our release updates are our developers. However, we have seen in the past more than once journalists picking up the release update and writing articles about them. Not only once there have been slightly suboptimal stories, e.g. with overemphasizing

Re: Postgresql-related updates

2006-06-03 Thread Martin Schulze
Martin Schulze wrote: DSA 1087 introduced a stricter parsing of specially encoded data streams in postgresql. Martin Pitt pointed out that psycopg and python-pgsql still use \' for '-encoding instead of '' which is the only accepted encoding after installing this security upeate. Hence

Re: CVE-2006-2314: debian dovecot package vulnerable. (fwd)

2006-06-15 Thread Martin Schulze
martin f krafft wrote: I tend to agree with Joey on the issue, though I do think it's not very nice that the postgresql security upgrade breaks other packages. But going via stable-proposed-updates seems like the right path. Have you talked to the stable release team? Maybe they'd be

Re: Security fix for shadow in sarge (#356939)

2006-07-09 Thread Martin Schulze
Christian Perrier wrote: As a consequence, I hereby ask the security team to DROP the processing of the 4.0.3-31sarge6 version you have. As you wish, packages deleted. Regards, Joey -- Testing? What's that? If it compiles, it is good, if it boots up, it is perfect. Please always Cc

Re: Proposal for public announcement for the next release update

2006-07-24 Thread Martin Schulze
Moin! Andreas Barth wrote: just two things: First, I think the release team has the right to send out texts to debian-news on his own. Why didn't you approve our mail? I'm considering to ask the mailing list admins to give us direct permissions to post to that list. I don't think so. I

Secure APT Key Management

2006-07-26 Thread Martin Schulze
According to the last release update the key management issue for Secure APT is not yet resolved. Are there chances to get key management settled down before the release? It would really be a shame if we couldn't get this done and provide the user with a proper infrastructure. This requires

Re: Secure APT Key Management

2006-07-27 Thread Martin Schulze
Raphael Hertzog wrote: I'd really love to see this feature properly implemented. The only approach which is known to work is static keys for stable releases and stable security updates. The keys can be stored off-line or on-line, at the discretion of the respective teams. So far,

Summary: Secure APT Key Management

2006-07-30 Thread Martin Schulze
Last week I started a discussion[1] to find out the current status of key management in Secure APT which is a release goal for etch and said to be included in the next release of Debian. I don't find the situation terribly promising, though, but here's a summary, so we may come to a solution some

Re: how to cleanly get rid of exim 3 for etch?

2006-07-30 Thread Martin Schulze
Marc Haber wrote: (2) Update exim3 with the warning message in sarge via s-p-u and a point release. If this is a required step upon the upgrade/removal, then your path is flawed. You cannot expect all users who upgrade from sarge to etch to have the most recent updates installed. There

Re: Preparation of the next stable Debian GNU/Linux update (I)

2006-08-24 Thread Martin Schulze
+++ freetype-2.1.7/debian/changelog @@ -1,3 +1,19 @@ +freetype (2.1.7-3.1) stable-security; urgency=high + + * Non-maintainer upload by the Security Team + * Rebuilt with higher version number + + -- Martin Schulze [EMAIL PROTECTED] Fri, 18 Aug 2006 17:06:28 +0200 + +freetype (2.1.7-2.6) stable

Re: Preparation of the next stable Debian GNU/Linux update (I)

2006-08-25 Thread Martin Schulze
Kevin B. McCarty wrote: Second, is it planned to include the next round of security updates to the Mozilla family by Alexander Sack? (cf. [0] [1]) For some reason these don't seem to have gone into security.d.o yet and it would be very nice to ship mozilla* packages that are up-to-date with

Re: HAL needed by Konqueror in kde-desktop

2006-08-25 Thread Martin Schulze
Stephen Frazier wrote: I installed ETCH from Aug 21 businesscard iso. My preseed file selects tasks standard, kde-desktop. When I tried to open a floppy disk with Konqueror it issued a message saying that HAL was needed. I installed HAL using aptitude and after rebooting Konqueror was

Preparing the next Release

2006-08-30 Thread Martin Schulze
Langasek wrote: On Wed, Aug 30, 2006 at 07:44:27AM +0200, Martin Schulze wrote: These bugs are at least to be investigated and maybe resolved in a rather pragmatic way: - packages that FTBFS . on which architecture? As long as it's a release architecture, does this matter? Doesn't

Re: Preparing the next Release

2006-08-30 Thread Martin Schulze
Steve Langasek wrote: Another transition that today is in an earlier stage is the mozilla-xulrunner transition. I've asked on #debian-release what people thought should be done if seamonkey isn't packaged in time for etch -- should mozilla and all its reverse-deps be dropped because it's not

Re: Secure APT Key Management

2006-09-06 Thread Martin Schulze
Andreas Barth wrote: Hi, I try to summarize the results of the discussion from start of August, in hope that we can finish this off, and test-run this first for the next stable point release. From the security team, some input on their preference would be welcome. The idea is to have

Re: mailman 2.1.5-8sarge3: screwup between security and maintainer upload

2006-09-06 Thread Martin Schulze
Lionel Elie Mamane wrote: let a be an architecture in sarge. Then one of the following holds for mailman in sarge r3: - it is affected by a security problem. - it has a severity critical bug. Mailman in sid: - may or may not suffer of a security problem A security problem in

Re: Sarge - Etch upgrade issue

2006-09-07 Thread Martin Schulze
Ingo Juergensmann wrote: Joey asked me to forward this to here, so here it is: When upgrading sarge to etch, apt-get complains about untrusted source of packages because gnupg isn't installed during apt-get dist-upgrade. After manually installing gnupg apt-get update everything seems

Re: Meeting Minutes from the latest SRM meeting

2006-09-12 Thread Martin Schulze
Martin Zobel-Helas wrote: - Time based release: We spoke about the idea of a time based release for r4. Anthony and Julien think it is a too short time frame, but we should try this experiment, and the speak with cd-vendors after r4, so we get better impression. Release

Re: Sarge - Etch upgrade issue

2006-09-15 Thread Martin Schulze
Alexander Schmehl wrote: * Steve Langasek [EMAIL PROTECTED] [060908 01:46]: 1) sarge: 1.1) apt-get dist-upgrade - upgrading to etch [..] Yes, I can see that apt Recommends: debian-archive-keyring and Suggests: gnupg. Given that apt should be doing secure archives by default now, the

Re: Preparation of the next stable Debian GNU/Linux update (I)

2006-09-16 Thread Martin Schulze
Matthijs Mohlmann wrote: Hi, What about #375494 and #377047, those are security bugs in the current stable distribution (Sarge) and according to the Security Team it didn't warrant an upload. Although it has a CVE so I think it's worth an upload to stable. The first one doesn't look like a

Re: Preparation of the next stable Debian GNU/Linux update (I)

2006-09-16 Thread Martin Schulze
Holger Levsen wrote: On Saturday 16 September 2006 08:50, Martin Schulze wrote: The first one doesn't look like a real security problem. Please explain why you think that putting arbitrary long strings into fixed sized buffers is not a security problem, preferedly in the bugreport. Please

Re: m68k not a release arch for etch; status in testing, future plans?

2006-09-18 Thread Martin Schulze
Frans Pop wrote: On Monday 18 September 2006 09:18, Frans Pop wrote: * Installation Guide Add note in the introduction that m68k is not officially supported. Otherwise the same as d-i: continue building and uploading into unstable. I'd suggest to just keep the development version

Re: m68k not a release arch for etch; status in testing, future plans?

2006-09-19 Thread Martin Schulze
Wouter Verhelst wrote: I think the best way forward at this point in time is to create our own release, as you suggest, very much like what amd64 did for sarge. On the August 16 birthday party in Breda, I discussed this with Jeroen Van Wolffelaar who told me that in theory, it should not be

Re: security support mozilla, php

2006-11-14 Thread Martin Schulze
Andreas Barth wrote: we have two bug reports against the release notes which should be discussed here: #390441: release-notes: Document unclear Mozilla security situation Mozilla and friends will be supported as long as their package maintainer are able to backport patches from upstream.

Re: user-mode-linux too [was: Re: apache2 DSA considerations for etch]

2006-11-14 Thread Martin Schulze
Mattia Dongili wrote: On Tue, Nov 14, 2006 at 08:06:38AM +0100, Joey Schulze wrote: [...] *sigh* That would've been the best solution. I'd say this is ok, however, please watch security updates as the security team will probably forget to update apache2-mpm-itk when apache2 has been

Re: a few comments on the release notes

2006-11-26 Thread Martin Schulze
Frans Pop wrote: On Thursday 16 November 2006 01:02, peter green wrote: 3: the restructuring of the ssh packages probablly deserves a mention in the upgrading section, if i'm not mistaken then upgrading a system with ssh installed but sshd disabled is likely to result in sshd enabled

Re: Security team's opinion

2006-12-12 Thread Martin Schulze
Andreas Barth wrote: Hi, there are two issues where I would like to ask you to comment on: - mantis: We have two requests to allow it in. Is this ok from your side? (No bug id, sorry - in case that not, could you please open an RC bug on mantis?) Why should the Security Team oppose a

Re: Security team's opinion

2006-12-12 Thread Martin Schulze
Moritz Muehlenhoff wrote: On Tue, Dec 12, 2006 at 08:12:31PM +0100, Martin Schulze wrote: Andreas Barth wrote: Hi, there are two issues where I would like to ask you to comment on: - mantis: We have two requests to allow it in. Is this ok from your side? (No bug id, sorry

SSH upgrade problem

2006-12-28 Thread Martin Schulze
I upgraded a machine from sarge to etch and the process broke over ssh :( Here's the log: Preconfiguring packages ... (Reading database ... 100606 files and directories currently installed.) Unpacking openssh-client (from .../openssh-client_1%3a4.3p2-7_i386.deb) ... Transferring ownership of

Re: SSH upgrade problem

2006-12-28 Thread Martin Schulze
Noah Meyerhans wrote: On Thu, Dec 28, 2006 at 06:11:28PM +0100, Martin Schulze wrote: I upgraded a machine from sarge to etch and the process broke over ssh :( I believe this was fixed by 1:4.3p2-8, which should be allowed to enter etch ASAP. Cool! Good to know that this problem

Re: Bug#404888: glib2.0: cannot go into testing; causes gnucash regrsession

2006-12-28 Thread Martin Schulze
Josselin Mouette wrote: Le jeudi 28 décembre 2006 à 17:29 -0800, Thomas Bushnell BSG a écrit : On Fri, 2006-12-29 at 01:56 +0100, Josselin Mouette wrote: Now, if you don't provide us with the necessary data, we won't be able to fix the regression it introduces in gnucash. There are

Re: why is alpha a release candidate?

2007-01-17 Thread Martin Schulze
Thomas Bushnell BSG wrote: So the release criteria require buildd redundancy. And yet, half the release candidate archs still don't have it. It gets marked in yellow on http://release.debian.org/etch_arch_qualify.html. Well, the one-and-only alpha buildd has been down for apparently ten

Re: Erroneous upload of gnome-vfs2 2.16 to unstable

2007-01-21 Thread Martin Schulze
Loïc Minier wrote: I mistakingly uploaded gnome-vfs2 2.16 to unstable; it bumps shlibs and is incompatible with unstable's bonobo; it's not suitable for etch. First, sorry for this mistake. Second, here are the options: - upload bonobo 2.16 into unstable and upload updates via TPU

Re: Planning for an upgrade path from etch to lenny for mailman

2007-01-23 Thread Martin Schulze
Lionel Elie Mamane wrote: It has just come to my attention that there will be no upgrade path from the version of Mailman in etch at this time (2.1.9) to the version lenny will most probably have (2.2.x), but there will be an upgrade path from the yet-unreleased 2.1.y, y9, to 2.2.x, and an

Re: [Pkg-mailman-hackers] Re: Planning for an upgrade path from etch to lenny for mailman

2007-01-24 Thread Martin Schulze
Thijs Kinkhorst wrote: On Tue, 2007-01-23 at 11:50 +0100, Martin Schulze wrote: Please keep in mind that the upgrade path from etch to lenny needs to work for etch r0 to lenny r0 as well. So I've understood, but cannot back this up with any documentation. Where is this documented? I'm

Re: Permission to upload a new hylafax package

2007-02-21 Thread Martin Schulze
Steve Langasek wrote: On Tue, Feb 20, 2007 at 02:55:41PM +0100, Giuseppe Sacco wrote: Hi all, hylafax 4.3.2 has just been released[1]. This is a minor update but fixes a few bug forwarded upstream and simplify the way Debian package may be done. The more important fix is that PAM will

Re: Please remove live-package from Etch

2007-03-22 Thread Martin Schulze
Holger Levsen wrote: Holger (who's also a stable ion3 user. Or rather, have been.) Isn't that an oxymoron qua author? Regards, Joey -- The good thing about standards is that there are so many to choose from. -- Andrew S. Tanenbaum -- To UNSUBSCRIBE, email to

Re: desktop-base for etchr1

2007-06-02 Thread Martin Schulze
Fathi Boudra wrote: desktop-base for etchr1 was rejected. BTW, this is just a call to SRM team to know if Martin is alone to think desktop-base must be rejected ? Come on people! Can't you accept a decision others have to make? Regards, Joey -- Every use of Linux is a proper use

Re: etch and kernels2.4

2007-07-05 Thread Martin Schulze
Michelle Konzack wrote: Am 2007-06-17 19:48:10, schrieb Pierre Habouzit: Then you have to stay with sarge. too bad. I think, you do not understand the problem IF someone is using the Stock Debian Kernel she/he can not upgrade to Etchm since ALL Etch-Kernels have SMP compiled in. It

Re: [SRM] Please review apache2 2.2.3-4+etch3

2007-09-20 Thread Martin Schulze
Martin Zobel-Helas wrote: Hi, Considering that there is already an update pending for etch r2, and that CVE-2007-3847 is of similar severity as the issues fixed in 2.2.3-4+etch2, I think it makes sense to upload +etch3 to s-p-u, too. Martin Schulze agreed to this. Security team

Preparation of the next stable Debian GNU/Linux update (I)

2005-01-28 Thread Martin Schulze
Preparation of the next stable Debian GNU/Linux update == An up-to-date version is at http://people.debian.org/~joey/3.0r5/. I am preparing the next revision of the current stable Debian distribution (woody) and will infrequently send reports

  1   2   >