[debian-mysql] Bug#811428: Bug#811428: Bug#811428: mysql-5.5: Multiple security fixes from the January 2016 CPU

[Salvatore Bonaccorso]

Hi Robie,

On Wed, Jan 27, 2016 at 05:10:58PM +0000, Robie Basak wrote:
> Hi Salvatore,
> 
> On Tue, Jan 26, 2016 at 08:17:30PM +0100, Salvatore Bonaccorso wrote:
> > On Tue, Jan 26, 2016 at 06:36:06PM +0000, Robie Basak wrote:
> > > Hi Salvatore,
> > > 
> > > On Tue, Jan 26, 2016 at 01:19:26PM +0100, Salvatore Bonaccorso wrote:
> > > > Thank you looks good to me.
> > > > 
> > > > I haven't seen the same for jessie, but assuming it is basically the
> > > > same and matching what you showed me initially from git, let's go
> > > > ahead with an upload.
> > > 
> > > FYI, we're still working on this. I've hit some kind of issue with my
> > > build chroot that I created from scratch for this task, so I think it
> > > may be a bug in sid somewhere. I'm investigating. I'd prefer to
> > > understand the root cause so that I can be sure that we don't upload bad
> > > binaries.
> > 
> > Thanks for the status-update!
> 
> Now uploaded. I took care to follow your instructions and the ones
> listed at
> https://www.debian.org/doc/manuals/developers-reference/ch05.en.html#bug-security
> carefully. I expected email confirmations back but haven't received
> anything. Can you check if it worked, please?

Yes the dak mails for security-master are only sent to the security
team. I can confirm that

mysql-5.5_5.5.47-0+deb8u1_amd64.changes ACCEPTED into stable->embargoed

and

mysql-5.5_5.5.47-0+deb7u1_amd64.changes ACCEPTED into oldstable->embargoed

The buildd have picked up the work and builds are coming in.

> If anyone's interested, the reason for the delay was that debootstrap
> 1.0.76 regresses chroots created with mk-sbuild, so the chroots I
> created to build were broken and causing build failures. I filed
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812811 and reverted
> the offending commit locally to work around this.
> 
> A second issue is that parallel builds are broken in the packaging in
> wheezy and jessie. These is fixed in testing. I thought it would be
> quicker to work around for now by not parallel building rather than
> delay further by attempting to cherry-pick the fix.

Thanks for this additional information.

Regards,
Salvatore
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20160127/e6ce5548/attachment-0001.sig>