[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Not the only one. Was: Re: Bug#757555: pam: CVE-2014-2583 pam_timestamp directory traversal issues



On Saturday 09 August 2014 18:46:09 Steve Langasek wrote:
[snip] 
> Which according to elsewhere in my mailbox, you've dealt with by uploading a
> 10-day delayed NMU.  This is unacceptable.  The NMU process always requires
> that you send your NMU diff to the BTS for review by the maintainer
> *first*. When doing a delayed NMU, it's reasonable to send this diff to the
> BTS at the same time.  Here, you have failed to send this NMU diff at all,
> and the only notification has been an easily-overlooked mail from the
> ftp-master queue software.
> 
> Maintainers should not have to go grubbing around in the delayed queue to
> find out what's been uploaded.  The NMUer is responsible for sending the NMU
> diff to the maintainer.
> 
> I have removed pam_1.1.3-8.1_amd64.changes from the delayed queue.  If you
> have changes that you would like to see included in this package, please
> send them to the BTS where they belong.

Interesting, because yesterday I've got a patch [0] (cool, thanks a lot!) but 
stating that the package has been NMUed and uploaded to delayed/5. So, even 5 
less days than in your case.

Less than 5 minutes later, the package entered the archive [1].

So, what am I supposed to do here?

Doko: I *really* appreciate the fact that you sent a patch, but *please* 
respect your fellow DDs.

[0] <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746907#12>
[1] <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746907#19>

-- 
Una sola bomba nuclear puede arruinar el resto de tu día.

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: