Hi, ----- car...@debian.org wrote:
> Hi Lars, > > On Wed, Apr 20, 2016 at 08:20:56AM +0200, Salvatore Bonaccorso wrote: > > Hi Lars, > > > > On Tue, Apr 19, 2016 at 12:27:51PM -0700, Lars Tangvald wrote: > > > We've prepared MySQL 5.5.49 packages for Debian Wheezy and Jessie > > > with fixes for the CVEs listed in Oracle's April CPU. > > > The packages are built and tested and should be ready for upload, > > > and I've attached the debdiff output for review. > > > Of note is that due to upstream source changes we needed to remake > a > > > patch that was added for 5.5.46 to fix arm and powerpc build > > > failures. New patch is larger, but should have the same behavior. > > > > Okay. > > > > Assuming some additional tests apart the testsuite have been done, > > please proceed with the update (but with the following small > change). > > > > Use 5.5.49-0+deb7u1 instead of 5.5.49-0+deb7u1.1 for the version, > > respectively 5.5.49-0+deb8u1 instead of 5.5.49-0+deb8u1.1. > > > > Please remember to build the first upload for security master with > -sa > > to include the original source, then the second one without > -sa.[*]. > > > > I (or someone else of the team) will release the DSA once the > builds > > are available. > > > > Thanks already for your work on this update, > > > > Regards, > > Salvatore > > > > [*] since you (your sponsor) will not get a dak accepted mail, > please > > either wait ~15 Minutes for the second upload to wait the first > one > > is correctly processed or drop in in #debian-security to shortly > > confirm (or via mail is as well fine). > > Do you have any status-update for this for us? > > Regards, > Salvatore I fixed the version string, and the source is ready in our git repo, but there aren't many on our team with upload rights for 5.5, and they've been a bit swamped in work the last few days. Sorry for the delay, but we're hoping to get the upload done soon. -- Lars
