[Webmin-maintainers] working on webmin

[Jamie Cameron]

On 11/May/2006 16:29 Patrick Winnertz wrote ..
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Jamie Cameron schrieb:
> > Hi Patrick,
> > I would recommend packaging Webmin 1.270, as version 1.250 had a remotely-exploitable
> security hole (the Perl syslog bug).
> 
> 
> Of course we can do this. (I know that 1.250 has this bug, but there are
> some other benefits if we package 1.250:
> 
> I just started to package it in January and it it almost ready. (So, if
> we use this version we can upload in 1-2 weeks, I guess.
> 
> But if we started absolutely new with 1.270 it will last longer and
> there is one problem:
> 
> The Debian etch pool will be frozen in June or July (I don't know
> exaktly when, but I want to include webmin into this release.
> And before a package can be uploaded into this pool it has to be 10 days
> without ANY reported bugs (except the bugs, which are already known) in
> the sid pool.... and if we package the newest 1.270 we could have the
> problem that the etch pool is frozen and that there is a Debian release
> without an webmin in it.

OK .. it sounds like 1.250 is the way to go then, as long as you backport
the bugfix from 1.270 (or even the whole of miniserv.pl)

> (Of course will we work after a commit on 1.270 too ;-) But it is for me
> important to get webmin into debian etch ;-) )
> 
> mfg
> Patrick
> 
> 
> ps: Please cc the next time the list, okay? :) And send my (this ) email
> to the list, too. I don't want to send your text without asking to the
> list. ;-)

Will do .. I just hit reply assuming that the list's reply-to: header would
have been set :)

 - Jamie

> > -----Original Message-----
> > 
> > From:  Patrick Winnertz <patrick.winnertz at skolelinux.org>
> > Subj:  [Webmin-maintainers] working on webmin
> > Date:  Thu 11 May 2006 8:49 am
> > Size:  903 bytes
> > To:  webmin-maintainers at lists.alioth.debian.org
> > 
> > Okay, my final exams are over now.
> > 
> > Now I want to upload webmin as fast as possible to debian, but there
> are
> > still several problems:
> > 
> > 1.) Who on this list, is willing to work on the deb- packet? ( And who
> > has the know-how to do this / how is willing to learn it?)
> > 
> > 2.) Should we packet 1.250 ( which i started to package), or should we
> > copy the debian-dir to a new 1.260 source?
> > 
> > 
> > Okay, i think this is enough for the first mail i think ;-)
> > 
> > have a nice day!
> > 
> > 
> > yours
> > Patrick
> 
> 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.3 (GNU/Linux)
> 
> iD8DBQFEY6yczgm26bkTFDoRAjGLAKCrASPr/eueFQJ0wXIzyndP4OdWRgCgrSDE
> KhzTrdmEj5JxTwgToP3IhqE=
> =0H5/
> -----END PGP SIGNATURE-----