On Wed, 2012-01-11 at 20:39 +0100, Thijs Kinkhorst wrote: > I propose attached NMU for backuppc for squeeze. This is meant to address > #654692, a bug where backuppc produces corrupted tarballs. For me this > data corruption is important enough to want to fix it in squeeze. > > The bug was introduced in a Debian-specific patch, and > oldstable/testing/unstable are not affected. > > I've taken the opportunity to include a "no-DSA" XSS fix.
Given that the affected logging code was apparently removed in the upload immediately following that in Squeeze and the other issues are fixed in unstable, I'd be happy for you to go ahead with this upload; thanks. However, the version information for the logging-related bugs, to be candid, sucks. Firstly, please add a fixed version to #654692 (I assume "3.1.0-10" judging from the log). #558431's status is also rather confused. It appears that -10 was never uploaded directly to the archive and the upload including the fix didn't use -v, so the bug was never marked as fixed. I'm also somewhat confused as to why it's tagged "lenny" given that you indicated that oldstable doesn't include the affected code. (As a side note, the "squeeze" tag on #654692 is also redundant. The affected version is only in stable, so BTS version tracking will do the right thing anyway, without the addition of any suite tags.) Regards, Adam -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org