Secure testing team - Oct 2009 - embedded code copies: hg-git, gamera

Hello,

Please apply the attached patch to the embedded-code-copies file.

References:
http://packages.debian.org/changelogs/pool/main/h/hg-git/hg-git_0.1.0-1/changelog
http://packages.debian.org/changelogs/pool/main/g/gamera/gamera_3.2.3-1/changelog
http://svn.debian.org/viewsvn/python-modules/packages/gamera/tags/3.2.3-1/debian/rules

I will address embedded code copies of Python modules in a separate 
mail.

-- 
Jakub Wilk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecc-gamera+hg-git.diff
Type: text/x-diff
Size: 1080 bytes
Desc: not available
URL:
<http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20091028/14f65dbc/attachment-0001.diff>

Hi Jakub,

On Wed, Oct 28, 2009 at 08:15:29PM +0100, Jakub Wilk
wrote:
> Please apply the attached patch to the embedded-code-copies file.
Thanks!  Applied.

-Kees

-- 
Kees Cook                                            @debian.org

On Wed, 28 Oct 2009 20:15:29 +0100, Jakub Wilk wrote:
> Hello,
> 
> Please apply the attached patch to the embedded-code-copies file.
> 
> References:
>
http://packages.debian.org/changelogs/pool/main/h/hg-git/hg-git_0.1.0-1/changelog
>
http://packages.debian.org/changelogs/pool/main/g/gamera/gamera_3.2.3-1/changelog
>
http://svn.debian.org/viewsvn/python-modules/packages/gamera/tags/3.2.3-1/debian/rules
> 
> I will address embedded code copies of Python modules in a separate 
> mail.
thanks a lot for tracking these code copies down.  since you have
made a lot of recent contributions, would you like to join the
secure-testing team so you can commit future updates on your own?  if
you have an alioth account you can ''request to join'' at [0].

mike

[0] http://alioth.debian.org/projects/secure-testing

On Wed, Oct 28, 2009 at 04:07:04PM -0400, Michael Gilbert
wrote:
> On Wed, 28 Oct 2009 20:15:29 +0100, Jakub Wilk wrote:
> > Hello,
> > 
> > Please apply the attached patch to the embedded-code-copies file.
> > 
> > References:
> >
http://packages.debian.org/changelogs/pool/main/h/hg-git/hg-git_0.1.0-1/changelog
> >
http://packages.debian.org/changelogs/pool/main/g/gamera/gamera_3.2.3-1/changelog
> >
http://svn.debian.org/viewsvn/python-modules/packages/gamera/tags/3.2.3-1/debian/rules
> > 
> > I will address embedded code copies of Python modules in a separate 
> > mail.
> 
> thanks a lot for tracking these code copies down.  since you have
> made a lot of recent contributions, would you like to join the
> secure-testing team so you can commit future updates on your own?  if
> you have an alioth account you can ''request to join'' at
[0].
Stop confusing people with the name of the SVN repo.

The Security Tracker has nothing to do with Testing Security, the data of
is only residing in the SVN repo for historical reasons.

Cheers,
        Moritz

On Wed, 28 Oct 2009 21:17:11 +0100, Moritz Muehlenhoff
wrote:
> On Wed, Oct 28, 2009 at 04:07:04PM -0400, Michael Gilbert wrote:
> > On Wed, 28 Oct 2009 20:15:29 +0100, Jakub Wilk wrote:
> > > Hello,
> > > 
> > > Please apply the attached patch to the embedded-code-copies file.
> > > 
> > > References:
> > >
http://packages.debian.org/changelogs/pool/main/h/hg-git/hg-git_0.1.0-1/changelog
> > >
http://packages.debian.org/changelogs/pool/main/g/gamera/gamera_3.2.3-1/changelog
> > >
http://svn.debian.org/viewsvn/python-modules/packages/gamera/tags/3.2.3-1/debian/rules
> > > 
> > > I will address embedded code copies of Python modules in a
separate
> > > mail.
> > 
> > thanks a lot for tracking these code copies down.  since you have
> > made a lot of recent contributions, would you like to join the
> > secure-testing team so you can commit future updates on your own?  if
> > you have an alioth account you can ''request to join''
at [0].
> 
> Stop confusing people with the name of the SVN repo.
how should i refer to it other than by the name that it has?  i was
only trying to be helpful.
 
> The Security Tracker has nothing to do with Testing Security, the data of
> is only residing in the SVN repo for historical reasons.
i am well aware that this is true.  this fact, i would say, is the
root cause of any and all confusion, so if you would like to end the
confusion, i suggest ending the historical ties and splitting the
tracker from the secure-testing repo.

mike

On Wed, Oct 28, 2009 at 04:34:34PM -0400, Michael Gilbert
wrote:
> On Wed, 28 Oct 2009 21:17:11 +0100, Moritz Muehlenhoff wrote:
> > On Wed, Oct 28, 2009 at 04:07:04PM -0400, Michael Gilbert wrote:
> > > On Wed, 28 Oct 2009 20:15:29 +0100, Jakub Wilk wrote:
> > > > Hello,
> > > > 
> > > > Please apply the attached patch to the embedded-code-copies
file.
> > > > 
> > > > References:
> > > >
http://packages.debian.org/changelogs/pool/main/h/hg-git/hg-git_0.1.0-1/changelog
> > > >
http://packages.debian.org/changelogs/pool/main/g/gamera/gamera_3.2.3-1/changelog
> > > >
http://svn.debian.org/viewsvn/python-modules/packages/gamera/tags/3.2.3-1/debian/rules
> > > > 
> > > > I will address embedded code copies of Python modules in a
separate
> > > > mail.
> > > 
> > > thanks a lot for tracking these code copies down.  since you have
> > > made a lot of recent contributions, would you like to join the
> > > secure-testing team so you can commit future updates on your own?
if
> > > you have an alioth account you can ''request to
join'' at [0].
> > 
> > Stop confusing people with the name of the SVN repo.
> 
> how should i refer to it other than by the name that it has?  i was
> only trying to be helpful.
I didn''t mean to attack you, just an advise:
Invite people to work on the Debian Security Tracker and to the respective
mailing list debian-security-tracker at lists.debian.org.
> > The Security Tracker has nothing to do with Testing Security, the data
of
> > is only residing in the SVN repo for historical reasons.
> 
> i am well aware that this is true.  this fact, i would say, is the
> root cause of any and all confusion, so if you would like to end the
> confusion, i suggest ending the historical ties and splitting the
> tracker from the secure-testing repo.
For starters I''ve fixed the information in the docs directory. 

Cheers,
        Moritz

On Wed, 28 Oct 2009 21:36:52 +0100, Moritz Muehlenhoff
wrote:
> On Wed, Oct 28, 2009 at 04:34:34PM -0400, Michael Gilbert wrote:
> > On Wed, 28 Oct 2009 21:17:11 +0100, Moritz Muehlenhoff wrote:
> > > On Wed, Oct 28, 2009 at 04:07:04PM -0400, Michael Gilbert wrote:
> > > > On Wed, 28 Oct 2009 20:15:29 +0100, Jakub Wilk wrote:
> > > > > Hello,
> > > > > 
> > > > > Please apply the attached patch to the
embedded-code-copies file.
> > > > > 
> > > > > References:
> > > > >
http://packages.debian.org/changelogs/pool/main/h/hg-git/hg-git_0.1.0-1/changelog
> > > > >
http://packages.debian.org/changelogs/pool/main/g/gamera/gamera_3.2.3-1/changelog
> > > > >
http://svn.debian.org/viewsvn/python-modules/packages/gamera/tags/3.2.3-1/debian/rules
> > > > > 
> > > > > I will address embedded code copies of Python modules
in a separate
> > > > > mail.
> > > > 
> > > > thanks a lot for tracking these code copies down.  since you
have
> > > > made a lot of recent contributions, would you like to join
the
> > > > secure-testing team so you can commit future updates on your
own?  if
> > > > you have an alioth account you can ''request to
join'' at [0].
> > > 
> > > Stop confusing people with the name of the SVN repo.
> > 
> > how should i refer to it other than by the name that it has?  i was
> > only trying to be helpful.
> 
> I didn''t mean to attack you, just an advise:
ok, thanks.
> Invite people to work on the Debian Security Tracker and to the respective
> mailing list debian-security-tracker at lists.debian.org.
alioth''s secure-testing group is currently the one that people need to
join for write access.  perhaps that project should be renamed to
debian-security-tracker to further reduce confusion?

mike