Upstreaming patches (Re: Ask for review)

Raphael Hertzog hertzog at debian.org
Thu Apr 27 07:32:33 UTC 2017


On Wed, 26 Apr 2017, Lukas Schwaighofer wrote:
> Can someone offer advice if we should remove the dependency on libx11-6
> again (and have a non-working webspy binary on systems that do not have
> libx11-6 installed) or if we should remove the notice (my preference)?

Get rid of the notice.

> I still have one more problem. Sometimes I can't access
> dep.alioth.debian.org (or dep.debian.net, both give SRVFAIL) and I think
> a DNSSEC misconfiguration is responsible for that. From the four
> nameservers
[...]
> My guess is that if my unbound picks the faulty nameserver I'm getting
> the SRVFAIL until the cache has expired and it tries again (hopefully
> using one of the others). dnsviz.net also shows the error [1].
> 
> What's the correct place to report that? DSA? I posted it on #alioth on
> irc a few hours ago but noone responded.

#alioth looks good but maybe #debian-admin can help you out on this DNS
issue, I'm not sure if that specific DNS configuration is specific to
alioth or to debian.org in general.

It seems weird to have external non-debian.org DNS servers mentionned but
then I'm not used to DNSSEC so maybe it's normal in that context.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/



More information about the Pkg-security-team mailing list