Re: Your stable + oldstable "tigervnc" uploads

[mike.gabriel@das-netzwerkteam.de]

Hi Adam,

I will support Joachim in sending the correct formal pu bug reports.

@Joachim: please ping me around 12am tomorrow or on Monday via Jabber on this.

Greets, Mike

Am Samstag, 25. Januar 2020 schrieb Joachim Falk:
> Am 25. Januar 2020 21:36:09 MEZ schrieb "Adam D. Barratt" <adam@adam-barratt.org.uk>:
> >Hi,
> >
> >I noticed that you've uploaded proposed "tigervnc" updates for stable
> >and oldstable.
> >
> >Could you please file tracking bugs regarding the changes, as described
> >in 
> >https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#special-case-uploads-to-the-stable-and-oldstable-distributions
> >?
> >
> >Regards,
> >
> >Adam
> 
> Hi Adam,
> 
> these are security fixes. See conversation with Salvatore for context.
> 
> Bug should be 
> 
> Debian Bug report logs - #947428
> tigervnc: CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695
> 
> 
> Am 19. Januar 2020 11:31:53 MEZ schrieb Salvatore Bonaccorso <carnil@debian.org>:
> >Hi Mike, Joachim,
> >
> >On Sat, Jan 18, 2020 at 11:15:51PM +0000,
> >mike.gabriel@das-netzwerkteam.de wrote:
> >> Hi,
> >> 
> >> Am Samstag, 18. Januar 2020 schrieb Salvatore Bonaccorso:
> >> > Hi Joachim, hi Mike,
> >> > 
> >> > On Sat, Jan 18, 2020 at 08:32:19PM +0100, Joachim Falk wrote:
> >> > > Dear security team,
> >> > > 
> >> > > I also back ported the fixes to stretch
> >> > >
> >(https://salsa.debian.org/debian-remote-team/tigervnc/tree/stretch).
> >> > > The fixed package for buster can be found at
> >> > > https://salsa.debian.org/debian-remote-team/tigervnc/tree/buster.
> > I
> >> > > am awaiting your decision what to do with these fixes.
> >> > 
> >> > Can you fix those issues with the upcoming point releases for
> >stretch
> >> > and buster?
> >> > 
> >> > Regards,
> >> > Salvatore
> >> 
> >> Sure, we can do that. Joachim, please let me know if you need a hand
> >> with uploading to spu and old-spu.
> >
> >Perfect and thank you. Keep in mind that the upcoming point releases
> >will be at 8th of february[1]. and the windows for uploading fixes
> >closing the preveeding weekend.
> >
> >[1]:
> >[🔎] 498bc782c076645b293c9449cdca83b1f29693d6.camel@adam-barratt.org.uk">https://lists.debian.org/[🔎] 498bc782c076645b293c9449cdca83b1f29693d6.camel@adam-barratt.org.uk
> >
> >Regards,
> >Salvatore
> 
> Regards,
> 
> Joachim Falk
> 
> 
> -- 
> Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.
>

-- 
Gesendet von meinem Sailfish Gerät