Bug#782615: nmu: multiple bin-NMU in squeeze-lts for CVE-2013-7439

[Niels Thykier <niels@thykier.net>]

Control: tags -1 moreinfo

On 2015-04-14 22:12, Raphael Hertzog wrote:
> Package: release.debian.org
> User: release.debian.org@packages.debian.org
> Usertags: binnmu
> Severity: normal
> 
> Hello,
> 
> I'm wondering whether bin-NMU are possible in squeeze-lts for packages
> which are not in squeeze-lts but in squeeze only.
> 
> My question is related to the handling of
> https://security-tracker.debian.org/tracker/CVE-2013-7439
> 
> I have uploaded a fixed libx11 package in squeeze-lts but the packages
> listed in the comment will have to be rebuilt in squeeze against
> libx11-dev 2:1.3.3-4+squeeze2 available in squeeze-lts.
> 
> If it's possible, feel free to schedule the bin-NMU on amd64 and i386
> as soon as the packages are built (or combine them with an appropriate
> dep-wait I guess).
> 
> [...]
> 
> 
> Cheers,
> 

As mentioned over IRC, it seems we are unable to schedule these binNMUs
for technical reasons.

I am not sure what the timeline is for resolving those issues,  so I am
tagging this moreinfo for now.

Thanks,
~Niels