[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Wheezy update of irssi?



Hi all,

Any news about this? Will maintainers take care of irssi CVEs in wheezy?

As Antoine said, irssi is one of the packages in our radar. I will wait an answer until the end of the week, otherwise I'll prepare an upload based on patches in jessie and stretch.

Cheers.


2017-06-27 15:33 GMT-03:00 Antoine Beaupré <anarcat@orangeseeds.org>:
On 2017-06-09 10:22:37, Rhonda D'Vine wrote:
>     Dear Ola,
>
>  this is on my board.  The issue isn't that pressing, and I want to fix
> it for stretch and jessie too, and only do the update for wheezy after
> those got approved (which I expect).  If it won't be approved for
> stretch and jessie there is quite little sense to invest to fix it just
> for wheezy. :)
>
>  At least it won't get tackled by the security team, so I don't see much
> of a pressure that the LTS team should put it high on its priority,
> there are probably more pressuring things to fix.

Hi Rhonda!

Just to let you know, it's not high priority, but it's still on our
dashboard. :) LTS issues are prioritized by how many people have the
affected packages installed, and irssi is one of the packages that have
"votes". Considering it's a remote DOS, I still believe it's worth
fixing.

We are happy, of course, to wait for you to make the update if you still
plan on doing so, now that updates trickled down in stretch/jessie. Do
let us know, however, if you want the LTS team to take care of it for
wheezy.

Thanks!

A.

--
La destruction de la société totalitaire marchande n'est pas une affaire
d'opinion. Elle est une nécessité absolue dans un monde que l'on sait
condamné. Puisque le pouvoir est partout, c'est partout et tout le temps
qu'il faut le combattre. - Jean-François Brient, de la servitude moderne




--
Lucas Kanashiro

Reply to: