Re: Handling of "malware" in Debian

From	Holger Levsen <holger@layer-acht.org>
Newsgroups	linux.debian.security
Subject	Re: Handling of "malware" in Debian
Date	2016-11-09 19:50 +0100
Message-ID	<sBG6C-2AD-29@gated-at.bofh.it> (permalink)
References	(2 earlier) <sBCPn-Bf-19@gated-at.bofh.it> <sBDBL-18k-21@gated-at.bofh.it> <sBE4N-1kU-11@gated-at.bofh.it> <sBEet-1on-11@gated-at.bofh.it> <sBFDA-2qo-21@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Wed, Nov 09, 2016 at 07:14:45PM +0100, W. Martin Borgert wrote:
> If users of testing or unstable have the malware installed now and
> the package gets removed from the archive, users are left with the
> malware, right?

yes

> That's why I thought about uploading an empty package to unstable,

yes, of course.

> it should be released with stretch, but can be safely removed later.

i'm not sure about the releasing with stretch part. Maybe it would be
better to have the updated, empty package in stretch in 5plusX days and
then remove it before the release, say on January 1st.

-- 
cheers,
	Holger

Thread

Re: Handling of "malware" in Debian Paul Wise <pabs@debian.org> - 2016-11-09 16:00 +0100
  Re: Handling of "malware" in Debian "W. Martin Borgert" <debacle@debian.org> - 2016-11-09 16:20 +0100
    Re: Handling of "malware" in Debian Holger Levsen <holger@layer-acht.org> - 2016-11-09 17:10 +0100
      Re: Handling of "malware" in Debian "W. Martin Borgert" <debacle@debian.org> - 2016-11-09 17:40 +0100
        Re: Handling of "malware" in Debian Holger Levsen <holger@layer-acht.org> - 2016-11-09 17:50 +0100
          Re: Handling of "malware" in Debian "W. Martin Borgert" <debacle@debian.org> - 2016-11-09 19:20 +0100
            Re: Handling of "malware" in Debian Holger Levsen <holger@layer-acht.org> - 2016-11-09 19:50 +0100
              Re: Handling of "malware" in Debian "W. Martin Borgert" <debacle@debian.org> - 2016-11-09 20:40 +0100
      Re: [Pkg-mozext-maintainers] Handling of "malware" in Debian Ximin Luo <infinity0@debian.org> - 2016-11-09 21:10 +0100
        Re: [Pkg-mozext-maintainers] Handling of "malware" in Debian "W. Martin Borgert" <debacle@debian.org> - 2016-11-09 21:20 +0100
          Re: [Pkg-mozext-maintainers] Handling of "malware" in Debian Ximin Luo <infinity0@debian.org> - 2016-11-10 00:10 +0100
    Re: Handling of "malware" in Debian Paul Wise <pabs@debian.org> - 2016-11-10 02:50 +0100
      Re: Handling of "malware" in Debian "W. Martin Borgert" <debacle@debian.org> - 2016-11-10 11:20 +0100
  Re: Handling of "malware" in Debian Vladislav Kurz <vladislav.kurz@webstep.net> - 2016-11-09 16:30 +0100

csiph-web