[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: sarge security status



On Wed, Feb 23, 2005 at 05:20:32PM -0500, Joey Hess wrote:
> As always, see http://merkel.debian.org/~joeyh/testing-security.html

> armagetron (unfixed; bug #295294) for CAN-2005-0369, CAN-2005-0370, CAN-2005-0371 
> 	The fix requires packaging what sounds like a significant
> 	new upstream fork. This could take time, I'd say drop it from
> 	testing until it's fixed.

Looks like this is actually a candidate for testing tomorrow, so not
dropping it at present.

> gaim 1:1.1.3-1 needed, have 1:1.1.1-1 for CAN-2005-0472, CAN-2005-0473 
> 	just fixed, too new
> 	blocked by aspell and gtk+2.0

Also waiting on an m68k upload to be approved and signed by the buildd
maintainer.  Will probably look at pushing aspell before the 10 days are up.

> php4 4:4.3.10-3 needed, have 4:4.3.10-2 for CAN-2004-1392 
> 	Vorlon's force failed, new version breaks deps of many php libs.
> 	Highly complicated situation, which I'm leaving to vorlon.

we're down to only three packages not being ready to go for this:
php4-sqlite, whose urgency I'll bump; php4-auth-pam, whose upload for the
ABI change is completely broken and will be removed; and php-imlib, which is
waiting on the xfree86 cleanup on arm and sparc and will be pushed out
temporarily to let php4 in.

No change on the rest, which have either gotten in on their own or are still
blocked for the same reason...

Cheers,
-- 
Steve Langasek
postmodern programmer

Attachment: signature.asc
Description: Digital signature


Reply to: