Please merge ircd-hybrid 1:7.2.2.dfsg.2-6.1 (universe) from debian unstable (main)

Bug #595180 reported by Lorenzo De Liso
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ircd-hybrid (Ubuntu)
Won't Fix
Wishlist
Lorenzo De Liso

Bug Description

Binary package hint: ircd-hybrid

ircd-hybrid (1:7.2.2.dfsg.2-6.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix integer underflow, apply patch for DSA-1980-1 by the security team.
    (Closes: #567192)

 -- Stefano Zacchiroli <email address hidden> Wed, 17 Feb 2010 12:40:41 +0100

Tags: patch

CVE References

Lorenzo De Liso (blackz)
Changed in ircd-hybrid (Ubuntu):
importance: Undecided → Wishlist
Revision history for this message
Stefano Rivera (stefanor) wrote :

It doesn't look like there's much here worth merging but it'll be good practice for me :)

Changed in ircd-hybrid (Ubuntu):
assignee: nobody → Stefano Rivera (stefanor)
status: New → In Progress
Revision history for this message
Stefano Rivera (stefanor) wrote :

Lintian error:

E: ircd-hybrid: dir-or-file-in-var-run var/run/ircd/

You left out an important part of the previous Ubuntu diff.

Changed in ircd-hybrid (Ubuntu):
assignee: Stefano Rivera (stefanor) → Lorenzo De Liso (blackz)
status: In Progress → Incomplete
Revision history for this message
Lorenzo De Liso (blackz) wrote :

Should be fixed now.

Changed in ircd-hybrid (Ubuntu):
assignee: Lorenzo De Liso (blackz) → nobody
status: Incomplete → New
Revision history for this message
Stefano Rivera (stefanor) wrote :

Still a fair number of serious (upload-preventing) lintian errors, including the one above. Look at the patch forwarded to debian to see what's missing

Changed in ircd-hybrid (Ubuntu):
assignee: nobody → Lorenzo De Liso (blackz)
status: New → Incomplete
tags: added: patch
Revision history for this message
Matt Arnold (mattarnold5) wrote :

Hello Lorenzo

Sorry for getting in on this so late. I did the last couple uploads on this package, and I'd really rather it not be merged. . There is no reason to do so, especially with the Debian maintainers of this package being unresponsive. Not that I criticize any Debian or Ubuntu contributer for inactivity, I've come back from a year long semi inactive period myself. However that still doesn't change the fact that merging with Debian at this time would have no beneficial effect on the Ubuntu users of this package. There is nothing new in this revision, only a security patch which we already have. Doing it just for the sake of doing it just seems a waste IMHO.
  If you really want to improve the Ubuntu ircd-hybrid package I would suggest packaging the new upstream version 7.2.3 which has been out for nearly a year iirc, it will be tricky the security issue that effects the current version is stll present in 7.2.3 (again iirc), and there is a dfsg repack to do as well as some patches from svn to merge in. This will make Ubuntu better, and give you a whole heck of alot more practice with more development issues then just a simple merge

/Matt

Changed in ircd-hybrid (Ubuntu):
status: Incomplete → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.