[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: sarge security status



On Fri, Feb 11, 2005 at 06:21:13PM -0800, Steve Langasek wrote:
> On Fri, Feb 11, 2005 at 01:08:39PM -0500, Joey Hess wrote:
> > The list is getting a bit long so I thought I'd go through it here again:

> > # bind 1:8.4.6-1 needed, have 1:8.4.4-1 for CAN-2005-0033
> > 	15 days old
> > 	FTBFS on arm, looks like autobuilder breakage to me

> Has already been requeued, but I know we've had one hardware outage on
> arm which AIUI has impacted the architecture's ability to keep up with
> the queue.

Got picked up again and failed again, same failure, different buildd. :/

> > # emacs21 21.3+1-9 needed, have 21.3+1-8 for CAN-2005-0100
> > 	4 days old
> > 	OOD on mips, FTBFS on m68k, not sure why

> Hmm, no build log for m68k, but on mips it shows a failure due to a
> missing build-dep on automake?  Could be classic timestamp skew, judging
> by the archs that failed (m68k, mips, amd64).

This is indeed a timestamp skew problem: the debian/autofiles.diff target in
debian/rules depends on debian/patches/*.dpatch, several of which are
ordered after it in the .diff.gz.  A build-dep on automake will need to be
added.

> > # kdegraphics 4:3.3.2-1 needed, have 4:3.3.1-2 for CAN-2005-0064
> > 	FTBFS on mips, apt install problem, needs requeue

> Has been requested.

Finally made it in yesterday.

> > # kernel-image-2.6.8-hppa 2.6.8-6 needed, have 2.6.8-5 for CAN-2004-1235
> > 	Too new, needs ftp-master to remove old binaries.

> Known by rene, should be picked up by an ftpmaster eventually.

> > # kernel-image-2.6.8-sparc 2.6.8-6 needed, have 2.6.8-5 for CAN-2004-1235
> > 	42 days old
> > 	Blocked by RC bug that was filed on the version currently in sarge.

> force-hinted.

Both of these kernels are in now.

> > # mooix 1.0rc5.pre4 needed, have 1.0rc5.pre3 for CAN-2005-0155
> > 	some FTBFS issues

> Does mooix work on the mipsen?  This failure looks like it might be
> related to the problem that prevents fakeroot from running there.

I see this has been sorted as well...

> > # php4 4:4.3.10-3 needed, have 4:4.3.10-2 for CAN-2004-1392
> > 	too new, RC bugs, potentially blocked by curl

> Yeah, I'll be working on this over the weekend.

Has taken several iterations, but the current version should finally be
testing-worthy.  The security fixes are coupled with an ABI transition, so a
bit of hinting will be needed to get the package into testing; at least one
package implicated in that hint, php-imlib, is also bound up with the
xfree86-common breakage on the buildds, so won't be hintable until that's
sorted.  (I may just try to fix this with a sourceful upload of php-imlib
that bypasses the breakage and does proper AC_PATH_X detection...)

> > # postgresql 7.4.7-2 needed, have 7.4.7-1 for CAN-2005-0247
> > 	too new, potentially blocked by libxml2

> I need to touch base with Mike again about libxml2/libxslt, but barring
> any hidden bugs they should be hinted within the next day or two.

All done.

> > # python2.3 2.3.4-20 needed, have 2.3.4-19 for DSA-666-1
> > 	2 day old arm build not uploaded yet

> Is 2.3.5 the appropriate fix here?  Matthias indicated there was an
> upload to t-p-u that he preferred to use, this is the 2.3.4-20 mentioned
> above; and of course, it's missing builds on several architectures
> still (arm is not one of them).

python2.3 2.3.5-1 is now hinted.

> > # xemacs21 21.4.16-2 needed, have 21.4.16-1 for CAN-2005-0100, DSA-671-1
> > 	4 day old mipsel build not uploaded yet
> > 	blocked by bd3, which is frozen

> I plan to push db3 through in a couple more days once we have reasonable
> assurance that there are no new problems introduced by the thread
> changes.

db3 is in, still waiting on that mipsel upload though.

-- 
Steve Langasek
postmodern programmer

Attachment: signature.asc
Description: Digital signature


Reply to: