Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #187554 > unrolled thread

Asterisk security update

Started byRob van der Putten <rob@sput.nl>
First post2017-10-04 17:30 +0200
Last post2017-10-06 02:40 +0200
Articles 6 — 3 participants

Back to article view | Back to linux.debian.user


Contents

  Asterisk security update Rob van der Putten <rob@sput.nl> - 2017-10-04 17:30 +0200
    Re: Asterisk security update Roberto C. Sánchez <roberto@debian.org> - 2017-10-04 17:40 +0200
      Re: Asterisk security update Rob van der Putten <rob@sput.nl> - 2017-10-04 18:20 +0200
        Re: Asterisk security update Roberto C. Sánchez <roberto@debian.org> - 2017-10-04 18:30 +0200
    Re: Asterisk security update Don Armstrong <don@debian.org> - 2017-10-04 20:20 +0200
      Re: Asterisk security update Rob van der Putten <rob@sput.nl> - 2017-10-06 02:40 +0200

#187554 — Asterisk security update

FromRob van der Putten <rob@sput.nl>
Date2017-10-04 17:30 +0200
SubjectAsterisk security update
Message-ID<uwTMt-82N-13@gated-at.bofh.it>
Hi there


The Asterisk security update seems to exclude amd64; I can't find a 
13.14.1~dfsg-2+deb9u2_amd64.deb in pool.


Regards,
Rob

[toc] | [next] | [standalone]


#187555

FromRoberto C. Sánchez <roberto@debian.org>
Date2017-10-04 17:40 +0200
Message-ID<uwTW9-85v-3@gated-at.bofh.it>
In reply to#187554
On Wed, Oct 04, 2017 at 05:24:21PM +0200, Rob van der Putten wrote:
> Hi there
> 
> 
> The Asterisk security update seems to exclude amd64; I can't find a
> 13.14.1~dfsg-2+deb9u2_amd64.deb in pool.
> 
> 
> Regards,
> Rob
> 

That is quite strange.  There have been reports of uploads disappearing
from the ftp-master host some days ago as a result of an outage:

https://lists.debian.org/debian-devel/2017/09/msg00385.html
https://lists.debian.org/debian-devel/2017/10/msg00006.html

Those threads may shed some light on the matter.

Regards,

-Roberto
-- 
Roberto C. Sánchez

[toc] | [prev] | [next] | [standalone]


#187556

FromRob van der Putten <rob@sput.nl>
Date2017-10-04 18:20 +0200
Message-ID<uwUyS-5I-11@gated-at.bofh.it>
In reply to#187555
Hi there


On 04/10/17 17:33, Roberto C. Sánchez wrote:

> On Wed, Oct 04, 2017 at 05:24:21PM +0200, Rob van der Putten wrote:
>>
>> The Asterisk security update seems to exclude amd64; I can't find a
>> 13.14.1~dfsg-2+deb9u2_amd64.deb in pool.
> 
> That is quite strange.  There have been reports of uploads disappearing
> from the ftp-master host some days ago as a result of an outage:
> 
> https://lists.debian.org/debian-devel/2017/09/msg00385.html
> https://lists.debian.org/debian-devel/2017/10/msg00006.html
> 
> Those threads may shed some light on the matter.

According to https://packages.debian.org/stretch/asterisk there is no 
13.14.1~dfsg-2+deb9u2_amd64.deb. Which is a bit confusing when one 
expects an update.


Regards,
Rob

[toc] | [prev] | [next] | [standalone]


#187557

FromRoberto C. Sánchez <roberto@debian.org>
Date2017-10-04 18:30 +0200
Message-ID<uwUIx-8F-3@gated-at.bofh.it>
In reply to#187556
On Wed, Oct 04, 2017 at 06:19:04PM +0200, Rob van der Putten wrote:
> Hi there
> 
> 
> On 04/10/17 17:33, Roberto C. Sánchez wrote:
> 
> >On Wed, Oct 04, 2017 at 05:24:21PM +0200, Rob van der Putten wrote:
> >>
> >>The Asterisk security update seems to exclude amd64; I can't find a
> >>13.14.1~dfsg-2+deb9u2_amd64.deb in pool.
> >
> >That is quite strange.  There have been reports of uploads disappearing
> >from the ftp-master host some days ago as a result of an outage:
> >
> >https://lists.debian.org/debian-devel/2017/09/msg00385.html
> >https://lists.debian.org/debian-devel/2017/10/msg00006.html
> >
> >Those threads may shed some light on the matter.
> 
> According to https://packages.debian.org/stretch/asterisk there is no
> 13.14.1~dfsg-2+deb9u2_amd64.deb. Which is a bit confusing when one expects
> an update.
> 
I understand.  It is made more puzzling by the fact that the PTS does
not report an upload of 13.14.1~dfsg-2+deb9u2 taking place and the
buildd logs do not seem to be available for the stretch-security suite
to even see how the packages were built for the other architectures.

I suspect the maintainer built the package on amd64 and uploaded it, it
was built for the other architectures from the source package, but the
binary amd64 packages were lost.  However, that is nothing more than
speculation.

Regards,

-Roberto

-- 
Roberto C. Sánchez

[toc] | [prev] | [next] | [standalone]


#187565

FromDon Armstrong <don@debian.org>
Date2017-10-04 20:20 +0200
Message-ID<uwWr0-1f7-17@gated-at.bofh.it>
In reply to#187554
On Wed, 04 Oct 2017, Rob van der Putten wrote:
> The Asterisk security update seems to exclude amd64; I can't find a
> 13.14.1~dfsg-2+deb9u2_amd64.deb in pool.

It's in stable-new:

% rmadison asterisk|grep 9u2
asterisk   | 1:13.14.1~dfsg-2+deb9u2   | stable-new             | source, arm64, armel, armhf, i386, mips,
mips64el, mipsel, ppc64el, s390x


and it will (likely) get accepted into proposed-updates for stable as
soon as the amd64 build is present:

https://release.debian.org/proposed-updates/stable.html
https://release.debian.org/proposed-updates/stable_missing.html

I'm not sure why the amd64 buildd hasn't yet built that package, though.


-- 
Don Armstrong                      https://www.donarmstrong.com

No matter how many instances of white swans we may have observed, this
does not justify the conclusion that all swans are white.
 -- Sir Karl Popper _Logic of Scientific Discovery_

[toc] | [prev] | [next] | [standalone]


#187600

FromRob van der Putten <rob@sput.nl>
Date2017-10-06 02:40 +0200
Message-ID<uxoQh-2bK-7@gated-at.bofh.it>
In reply to#187565
Hi there


On 04/10/17 20:10, Don Armstrong wrote:

> On Wed, 04 Oct 2017, Rob van der Putten wrote:
>> The Asterisk security update seems to exclude amd64; I can't find a
>> 13.14.1~dfsg-2+deb9u2_amd64.deb in pool.
> 
> It's in stable-new:
> 
> % rmadison asterisk|grep 9u2
> asterisk   | 1:13.14.1~dfsg-2+deb9u2   | stable-new             | source, arm64, armel, armhf, i386, mips,
> mips64el, mipsel, ppc64el, s390x
> 
> 
> and it will (likely) get accepted into proposed-updates for stable as
> soon as the amd64 build is present:
> 
> https://release.debian.org/proposed-updates/stable.html
> https://release.debian.org/proposed-updates/stable_missing.html
> 
> I'm not sure why the amd64 buildd hasn't yet built that package, though.

Apparently it's a dak bug.


Regards,
Rob

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web