Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #911017

Bug#905332: debdiff

Show all headers | View raw

Hi Ferenc,

On Fri, Aug 03, 2018 at 11:59:08AM +0200, Ferenc Wágner wrote:
> The proposed source debdiff for stretch-security:
> 
> I tested the resulting package, it fixed the bug and didn't cause any
> breakage for me.

Ok, sounds good.

> There is a header file change affecting inline function bodies, but
> according to codesearch.debian.net those functions aren't used outside
> of xml-security-c, so there's no need to rebuild anything in the archive
> after this update.  The DSA should probably include a corresponding
> warning, though.
> 
> Dear Security Team, please let me know how to proceed.  (Do you need the
> Cc, or was the security tag enough to get you in the loop?)

We definitely need a CC, we don't have a good mechanism to monitor bug
changes tagged security (and quite frankly there's lot of broken uses
of the security tag).

Please build with -sa (as the tarball is new in stretch-security) and
upload to security-master.

> And jessie is handled by the LTS team now, isn't it?

It is.

Cheers,
        Moritz

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#905332: src:xml-security-c: Default KeyInfo resolver doesn't check for empty element content Ferenc Wágner <wferi@debian.org> - 2018-08-03 10:30 +0200
  Bug#905332: debdiff wferi@niif.hu (Ferenc Wágner) - 2018-08-03 12:10 +0200
    Bug#905332: debdiff Moritz Mühlenhoff <jmm@inutil.org> - 2018-08-03 13:10 +0200
      Bug#905332: debdiff wferi@niif.hu (Ferenc Wágner) - 2018-08-03 14:50 +0200

csiph-web