Bug#834854: jessie-pu: package charybdis/3.4.2-5~deb8u1
Control: tags -1 +moreinfo
On 2016-09-06 09:10:43, Antoine Beaupré wrote:
> On 2016-09-06 03:58:44, Adam D. Barratt wrote:
>> On 2016-09-06 1:31, Antoine Beaupré wrote:
>>> Turns out this took about three weeks instead of 24h. But 3.5.3 is
>>> released, and I will push the update to unstable now.
>>>
>>> The situation is a tad more complicated now because there was a
>>> security
>>> issue disclosed in the meantime:
>>>
>>> https://security-tracker.debian.org/tracker/CVE-2016-7143
>>>
>>> ... which 3.5.3 fixes. I have prepared a deb8u2 update for the security
>>> team in #836714, which the attached debdiff builds upon.
>>
>> When's that likely to be released? We can't really accept ~debu3 via p-u
>> containing the security update until there actually is a published
>> security update.
>
> I just got approval from the security team for the upload, i should
> complete this during the day.
>
> 3.5.3 was accepted in unstable, FWIW.
Sigh... found another regression from wheezy, reported upstream here:
https://github.com/charybdis-ircd/charybdis/issues/215
Let's hold off on the p-u a little more while upstream collects their
thoughts.
a.
--
People in glass houses shouldn't throw stones.
People in glass cities shouldn't fire missiles.
- Bansky
Reply to: