Bug#873088: git-annex security issue backports

2017-10-26 Thread Sébastien Delafond
On Oct/26, Antoine Beaupré wrote: > Right, how does that look then? > > https://gitlab.com/anarcat/git-annex/commit/b21ccd25ecd4cad0efcc8f4f0c94ad99ce32cd04 Nah, +deb8u1 ;) > Then I can just upload this to security-master? Yep. Cheers, --Seb

Bug#873088: git-annex security issue backports

2017-10-26 Thread Antoine Beaupré
On 2017-10-26 11:14:34, Sébastien Delafond wrote: > On Oct/26, Antoine Beaupré wrote: >> I have also backported joey's patch to jessie. It was simpler than >> wheezy because the code is much more similar. The resulting patch is >> available here: >> >> https://gitlab.com/anarcat/git-annex/commit/5

Bug#873088: git-annex security issue backports

2017-10-26 Thread Sébastien Delafond
On Oct/26, Antoine Beaupré wrote: > I have also backported joey's patch to jessie. It was simpler than > wheezy because the code is much more similar. The resulting patch is > available here: > > https://gitlab.com/anarcat/git-annex/commit/58daf6cbe4c1ea1cf71f3a538a0e27b5075c7265 > > As expected,

Bug#873088: git-annex security issue backports

2017-10-26 Thread Antoine Beaupré
On 2017-10-23 09:26:28, Antoine Beaupré wrote: >> What's the status? > > I'm resuming work on this now, and I'll see how I can backport this to > wheezy, which should helpfully give some help/nudge to the jessie > version as well. Hi, I have pushed DLA-1144-1 for git-annex in wheezy after summary

Bug#873088: git-annex security issue backports

2017-10-23 Thread Antoine Beaupré
On 2017-10-12 20:53:13, Moritz Mühlenhoff wrote: > On Fri, Sep 29, 2017 at 06:56:32PM +0200, Salvatore Bonaccorso wrote: >> Hi Antoine, >> >> On Thu, Sep 28, 2017 at 01:53:06PM -0400, Antoine Beaupré wrote: >> > Hi again, >> > >> > I reached out to joeyh to see how we could backport git-annex sec

Bug#873088: git-annex security issue backports

2017-10-12 Thread Moritz Mühlenhoff
On Fri, Sep 29, 2017 at 06:56:32PM +0200, Salvatore Bonaccorso wrote: > Hi Antoine, > > On Thu, Sep 28, 2017 at 01:53:06PM -0400, Antoine Beaupré wrote: > > Hi again, > > > > I reached out to joeyh to see how we could backport git-annex security > > patches to wheezy. He responded by sharing the

Bug#873088: git-annex security issue backports

2017-09-29 Thread Salvatore Bonaccorso
Hi Antoine, On Thu, Sep 28, 2017 at 01:53:06PM -0400, Antoine Beaupré wrote: > Hi again, > > I reached out to joeyh to see how we could backport git-annex security > patches to wheezy. He responded by sharing the attached patch he sent to > the git-annex maintainer that backports the fixes to str

Bug#873088: git-annex security issue backports

2017-09-28 Thread Antoine Beaupré
Hi again, I reached out to joeyh to see how we could backport git-annex security patches to wheezy. He responded by sharing the attached patch he sent to the git-annex maintainer that backports the fixes to stretch. I figured it would be useful for the core secteam to have visibilty on this... He