Re: [Secure-testing-team] Security support for volatile?

2009-03-15 Thread Tom Furie
On Fri, Mar 13, 2009 at 09:21:44PM +0100, Florian Weimer wrote: > > Yes, this is the correct approach in principle, but I don't think > release candidates should be uploaded to volatile. But I can't speak > for debian-volatile, really. Never noticed the rc in the version number there. I suppose

Re: [Secure-testing-team] Security support for volatile?

2009-03-13 Thread Florian Weimer
* Tom Furie: > On Fri, Mar 13, 2009 at 12:37:35PM +0100, Michael Tautschnig wrote: > >> I'm right now in the process of preparing an upload of clamav 0.95rc1; as >> such, >> the question is: where to upload to? unstable? volatile? Any of the other >> queues? > > Maybe I'm not quite clear on the c

Re: [Secure-testing-team] Security support for volatile?

2009-03-13 Thread Tom Furie
On Fri, Mar 13, 2009 at 12:37:35PM +0100, Michael Tautschnig wrote: > I'm right now in the process of preparing an upload of clamav 0.95rc1; as > such, > the question is: where to upload to? unstable? volatile? Any of the other > queues? Maybe I'm not quite clear on the concept of volatile, but

Re: [Secure-testing-team] Security support for volatile?

2009-03-13 Thread Michael Tautschnig
> This one time, at band camp, Michael Stone said: > > On Mon, Feb 23, 2009 at 07:27:14PM +0100, Kurt Roeckx wrote: > > >I think one the reason why clamav is in volatile is that the engine > > >might need updating to detect new viruses. Is that something you > > >want to support in stable-security

Re: [Secure-testing-team] Security support for volatile?

2009-02-28 Thread Stephen Gran
This one time, at band camp, Michael Stone said: > On Mon, Feb 23, 2009 at 07:27:14PM +0100, Kurt Roeckx wrote: > >I think one the reason why clamav is in volatile is that the engine > >might need updating to detect new viruses. Is that something you > >want to support in stable-security? > > I t

Re: [Secure-testing-team] Security support for volatile?

2009-02-28 Thread Michael Stone
On Mon, Feb 23, 2009 at 07:27:14PM +0100, Kurt Roeckx wrote: I think one the reason why clamav is in volatile is that the engine might need updating to detect new viruses. Is that something you want to support in stable-security? I think there's a couple of questions to answer: 1) is there any

Re: [Secure-testing-team] Security support for volatile?

2009-02-27 Thread Florian Weimer
* Kurt Roeckx: >> For ClamAV and ClamAV-derived packages, I'd prefer to see uploads of >> new upstream versions to stable-security or stable-proposed-updates >> (that is, remove it from volatile). > > I think one the reason why clamav is in volatile is that the engine > might need updating to dete

Re: [Secure-testing-team] Security support for volatile?

2009-02-23 Thread Kurt Roeckx
On Sun, Feb 22, 2009 at 10:06:41PM +0100, Florian Weimer wrote: > * Luk Claes: > > > Currently the security support for the volatile archive is supposed > > to be taken care of by the uploaders of the respective packages. > > > > I think it would make sense to have someone or a team tracking > > s

Re: [Secure-testing-team] Security support for volatile?

2009-02-23 Thread Matus UHLAR - fantomas
> * Luk Claes: > > > Currently the security support for the volatile archive is supposed > > to be taken care of by the uploaders of the respective packages. > > > > I think it would make sense to have someone or a team tracking > > security issues for volatile. > > > > What do you think? Is anyon

Re: [Secure-testing-team] Security support for volatile?

2009-02-22 Thread Florian Weimer
* Luk Claes: > Currently the security support for the volatile archive is supposed > to be taken care of by the uploaders of the respective packages. > > I think it would make sense to have someone or a team tracking > security issues for volatile. > > What do you think? Is anyone up to providing