Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5665

Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to dla-needed.txt with comments.

Show all headers | View raw

Hi,

On Thu, 29 Aug 2019, Moritz Mühlenhoff wrote:
> The upstream link makes it sound as if they are one of those upstreams
> which reject the idea of distributions shipping an older release to
> a stable distro. For a tool like radare2 that seems fair enough, so
> how about simply excluding it from stable releases (and retroactively
> drop it from Buster/Stretch in the forthcoming point releases)?

<pkg-security hat>
While I have no problem in getting it out of stable release, it is
important that we are able to provide backports so the package must
stay in Debian testing. 
</pkg-security hat>

<kali hat>
Also radare2 is a package that we care about in Kali and we are based
on Debian testing so we would prefer if it could continue to be there.
</kali hat>

In general, we (Debian) don't have a good answer to this problem and
virtualbox is clearly a bad precedent. We really need to find a solution
to this in concertation with the release managers.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: [Git][security-tracker-team/security-tracker][master] Add  radare2 to dla-needed.txt with comments. Holger Levsen <holger@layer-acht.org> - 2019-08-16 22:50 +0200
  Re: [Git][security-tracker-team/security-tracker][master] Add radare2  to dla-needed.txt with comments. Markus Koschany <apo@debian.org> - 2019-08-16 23:30 +0200
    Re: [Git][security-tracker-team/security-tracker][master] Add  radare2 to dla-needed.txt with comments. Moritz Mühlenhoff <jmm@inutil.org> - 2019-08-29 09:40 +0200
      Re: [Git][security-tracker-team/security-tracker][master] Add  radare2 to dla-needed.txt with comments. Raphael Hertzog <hertzog@debian.org> - 2019-08-29 13:50 +0200
        how to deal with widely used packages unsuitable for stable (was Re:  [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Holger Levsen <holger@layer-acht.org> - 2019-08-29 14:20 +0200
          Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Raphael Hertzog <hertzog@debian.org> - 2019-08-29 14:30 +0200
            Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Paul Gevers <elbrus@debian.org> - 2019-08-29 15:20 +0200
              Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Dan Clery <dan@savevsgeek.com> - 2019-08-29 16:40 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Raphael Hertzog <hertzog@debian.org> - 2019-08-30 09:20 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Alexander Wirt <formorer@formorer.de> - 2019-08-30 09:40 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Raphael Hertzog <hertzog@debian.org> - 2019-08-30 11:00 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Alexander Wirt <formorer@formorer.de> - 2019-08-30 11:10 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Raphael Hertzog <hertzog@debian.org> - 2019-08-30 16:50 +0200
                Side issue/question -- {Re: how to deal with widely used packages  ...} Richard Owlett <rowlett@cloud85.net> - 2019-08-30 17:20 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Alexander Wirt <formorer@formorer.de> - 2019-08-30 22:10 +0200
                Re: how to deal with widely used packages unsuitable for stable (was  Re: [Git][security-tracker-team/security-tracker][master] Add radare2 to  dla-needed.txt with comments.) Moritz Mühlenhoff <jmm@inutil.org> - 2019-08-30 10:20 +0200
      Re: [Git][security-tracker-team/security-tracker][master] Add  radare2 to dla-needed.txt with comments. Moritz Mühlenhoff <jmm@inutil.org> - 2019-09-04 21:40 +0200

csiph-web