Re: Wheezy update for tryton-server
* Thorsten Alteholz: " Re: Wheezy update for tryton-server" (Wed, 31 Aug 2016
20:33:24 +0200 (CEST)):
Hi Thorsten,
> Hi Mathias,
>
> On Wed, 31 Aug 2016, Mathias Behrle wrote:
> > I have prepared a fixed wheezy package for CVE-2016-1242 in tryton-server,
> > debdiff attached.
>
> yes, looks good for me.
>
> > I would like to get into the procedures for LTS, so if it is ok for you I
> > would do the next steps myself.
>
> Sure, just go ahead.
>
> > Please just tell me, if I should upload and then
> > claim the DLA and post the announce according to
> > https://wiki.debian.org/LTS/Development#secure-testing.
>
> As the LTS team coordinates all the work through the file dla-needed.txt
> in the security tracker repository, the first step should be to claim the
> package there. So everyone knows that you will do all the work ...
> (I added you now)
This step has to be done manually, right?
> Afterwards, please upload first and wait until you got an email that the
> package was accepted. After that claim the DLA and send the signed
> announcement. While claiming the DLA with bin/gen-DLA your entry in
> dla-needed.txt will be removed as well.
Uploaded. Thanks for your guidance!
Mathias
--
Mathias Behrle
PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6
AC29 7E5C 46B9 D0B6 1C71 7681 D6D0 9BE4 8405 BBF6
Reply to: