[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Xen 4.4 updates vs. Xen Stretch backport



Hi Holger, hi all,


On 06.12.18 21:49, Holger Levsen wrote:
>>> I assume it might also be a good idea if'd summarize the state
>>> of the various (CVE) issues in NOTEs in data/dla-needed.txt in
>>> security-tracker.git so that it's clearly visible in one location what
>>> the status of backporting these fixes is. That information is also in
>>> the mails of this thread, but that's not easy to find.
>> I don't know the security-tracker.git and have no idea how to do this,
>> sorry. I might pass this to colleagues, but they are very busy, currently.
> no problem and don't worry, no need to bother busy colleages, the file
> in the security-tracker I meant is
> https://salsa.debian.org/security-tracker-team/security-tracker/blob/master/data/dla-needed.txt
> and if you look at it you will see many NOTE entries for other packages,
> but none for xen (at the bottom), while it would be great to report the 
> status of the xen update there.
ah, ok, got you.
> Assuming (*) you will continue to work on xen DLAs: please apply to become
> a project member of https://salsa.debian.org/security-tracker-team/ so
> that you can push your commits directly. Until you are accepted (which
> should be a matter of hours or very few days) I'll be glad to merge
> patches from you sent to me via email or some such.

Oh, thats nice. How do I do this? I haven't found such an option to join
on the salsa gitlab page and the documentation at
https://wiki.debian.org/LTS/Development#Prepare_security_updates_for_Jessie_LTS
says, this list here is one of the three options to request this access.

> (*) not 100% sure how credativ works on LTS...

currently credativ works on request of Freexian, as far as I know. But
some colleagues are Debian developers in their private live. So there
might be some overlap, as credativ encourages people to do open source work.

Kind regards

Peter


-- 
Peter Dreuw
Teamleiter
Tel.:  +49 2166 9901-155
Fax:   +49 2166 9901-100
E-Mail: Peter.Dreuw@credativ.de

gpg fingerprint: 33B0 82D3 D103 B594 E7D3  53C7 FBB6 3BD0 DB32 ED41
http://www.credativ.de/

**********************************************
Jetzt neu: 
Elephant Shed - PostgreSQL Appliance
PostgreSQL und alles was dazugehört

Von Backup über Monitoring bis Reporting: 
https://elephant-shed.io/index.de.html
**********************************************

credativ GmbH, HRB Mönchengladbach 12080
USt-ID-Nummer: DE204566209
Trompeterallee 108, 41189 Mönchengladbach
Geschäftsführung: Dr. Michael Meskes, Jörg Folz, Sascha Heuer

Unser Umgang mit personenbezogenen Daten unterliegt
folgenden Bestimmungen: https://www.credativ.de/datenschutz

begin:vcard
fn:Peter Dreuw
n:Dreuw;Peter
org:credativ GmbH;Team Support
adr;quoted-printable:;;Trompeter Allee 108;M=C3=B6nchengladbach;Nordrhein-Westfalen;41189;Deutschland
email;internet:peter.dreuw@credativ.de
title:Teamleiter
tel;work:+4921669901155
tel;fax:+4921669901100
note;quoted-printable:gpg fingerprint: 33B0 82D3 D103 B594 E7D3  53C7 FBB6 3BD0 DB32 ED41=0D=0A=
	=0D=0A=
	credativ GmbH, HRB M=C3=B6nchengladbach 12080=0D=0A=
	USt-ID-Nummer: DE204566209=0D=0A=
	Gesch=C3=A4ftsf=C3=BChrung: Dr. Michael Meskes, J=C3=B6rg Folz, SaschaHeu=
	er
url:www.credativ.de
version:2.1
end:vcard

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: