Bug#802331: jessie-pu: package cyrus-imapd-2.4/2.4.17+nocaldav-1
Control: retitle -1 jessie-pu: package
cyrus-imapd-2.4/2.4.17+nocaldav-0~deb8u1
So, it looks like the security queue is quite stalled, so I will use
your offer to p-u.
Just changed s/jessie-security/jessie/ and preparing the rebuild.
debdiff should be same as already attached except this change.
I'll upload right away after the build is finished. Thanks.
Cheers,
--
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
On Wed, Oct 21, 2015, at 09:26, Ondřej Surý wrote:
> Hi Adam,
>
> thanks for quick confirmation
>
> On Mon, Oct 19, 2015, at 19:26, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> >
> > Hi,
> >
> > On 2015-10-19 16:12, Ondřej Surý wrote:
> > > there's a RC bug in 2.4.17+caldav~beta10 upstream package that
> > > prevents the replication from working (#799724). Unfortunately the
> > > bug is caused by caldav module and the code is quite complex and
> > > upstream author doesn't have a time to debug the issue, so we might be
> > > forced to drop the *experimental* caldav support (and drop the
> > > cyrus-caldav package along the way).
> > >
> > > I would also recommend disabling SSLv3 and TLS compression in the same
> > > update as it's really unsafe to use them nowadays.
> > >
> > > Rough proposed patch generated from git is attached.
> > >
> > > Also there seems to be a security issue fixed in 2.4.18, so I might be
> > > updating the cyrus-imapd-2.4 package via security, so I might bundle
> > > this update together, but it will need the release team ack.
> >
> > ACK for that via security. If you end up looking at a p-u release
> > instead, please could we have a debdiff of the stable package just for
> > confirmation first; thanks.
>
> Here's the debdiff for reference anyway - I'll submit this to Security
> Team in a minute.
>
> Cheers,
> --
> Ondřej Surý <ondrej@sury.org>
> Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
> Email had 1 attachment:
> + cyrus-imapd-2.4_2.4.17+nocaldav-0~deb8u1.debdiff
> 5.4M (application/octet-stream)
Reply to: