Re: Accepted tla 1.3.5+dfsg-5 (source sparc all)

[Sylvain Beucler-2]

Hi Clint,

Afaik tla only works with neon24, which is why it is integrated in the
tla package.

Unless I'm mistaken, using neon26 is very likely to break the WebDAV
access.

Check http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=395877#msg35

--
Sylvain

On Sat, Dec 02, 2006 at 07:17:02PM +0000, Clint Adams wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Format: 1.7
> Date: Sat,  2 Dec 2006 02:20:25 -0500
> Source: tla
> Binary: tla-doc tla
> Architecture: source sparc all
> Version: 1.3.5+dfsg-5
> Distribution: unstable
> Urgency: low
> Maintainer: Debian QA Group <packages@...>
> Changed-By: Clint Adams <schizo@...>
> Description:
>  tla        - GNU arch revision control system
>  tla-doc    - GNU arch revision control system (documentaiton)
> Changes:
>  tla (1.3.5+dfsg-5) unstable; urgency=low
>  .
>    * QA upload.
>    * Build-depend on libneon26-gnutls-dev.
> Files:
>  611142e52469f647fc42ae40aaab401d 636 devel optional tla_1.3.5+dfsg-5.dsc
>  3c3adc4ff4bf57a4c5aece62fad3eb65 30504 devel optional tla_1.3.5+dfsg-5.diff.gz
>  82e08698bd534b9c6e236d73bc02d4c7 49876 doc optional tla-doc_1.3.5+dfsg-5_all.deb
>  73bc69fd6d663ff83bd29e5327e97508 319652 devel optional tla_1.3.5+dfsg-5_sparc.deb
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
> Comment: Debian!
>
> iD8DBQFFcdA45m0u66uWM3ARApadAJ49vlOXRI2E+nCMk6MjAL1RZ+l8dQCffzKM
> XLw6OF5pwOkftuLvtAl2cnA=
> =9bYU
> -----END PGP SIGNATURE-----
>
>
> Accepted:
> tla-doc_1.3.5+dfsg-5_all.deb
>   to pool/main/t/tla/tla-doc_1.3.5+dfsg-5_all.deb
> tla_1.3.5+dfsg-5.diff.gz
>   to pool/main/t/tla/tla_1.3.5+dfsg-5.diff.gz
> tla_1.3.5+dfsg-5.dsc
>   to pool/main/t/tla/tla_1.3.5+dfsg-5.dsc
> tla_1.3.5+dfsg-5_sparc.deb
>   to pool/main/t/tla/tla_1.3.5+dfsg-5_sparc.deb

_______________________________________________
Gnu-arch-users mailing list
Gnu-arch-users@...
http://lists.gnu.org/mailman/listinfo/gnu-arch-users

GNU arch home page:
http://savannah.gnu.org/projects/gnu-arch/

[Sylvain Beucler-2]

On Sat, Dec 02, 2006 at 04:50:51PM -0500, Clint Adams wrote:
> > Afaik tla only works with neon24, which is why it is integrated in the
> > tla package.
> >
> > Unless I'm mistaken, using neon26 is very likely to break the WebDAV
> > access.
>
> Is the only problem the use of ne_path_escape in escape_location?

That's the first I saw :)
I didn't investigate further than that.

--
Sylvain




_______________________________________________
Gnu-arch-users mailing list
Gnu-arch-users@...
http://lists.gnu.org/mailman/listinfo/gnu-arch-users

GNU arch home page:
http://savannah.gnu.org/projects/gnu-arch/

[Sylvain Beucler-2]

On Sat, Dec 02, 2006 at 05:11:59PM -0500, Clint Adams wrote:
> > That's the first I saw :)
> > I didn't investigate further than that.
>
> I'll upload a patched version shortly.

Hi,

Are you sure this is a good idea?  I mean, the official tla release
was always tested with the builtin neon24, not with any other
version. Now there's a Debian-specific version of tla which uses
neon26-gnutls plus a patch to include some neon24 bits of code.

Since we are pretty close to Etch's release, if there's a bug, we may
get a broken tla for the next couple year's Debian stable :/

--
Sylvain


_______________________________________________
Gnu-arch-users mailing list
Gnu-arch-users@...
http://lists.gnu.org/mailman/listinfo/gnu-arch-users

GNU arch home page:
http://savannah.gnu.org/projects/gnu-arch/

[Sylvain Beucler-2]

On Sun, Dec 03, 2006 at 12:01:30PM -0500, Clint Adams wrote:

> > Are you sure this is a good idea?  I mean, the official tla release
> > was always tested with the builtin neon24, not with any other
> > version. Now there's a Debian-specific version of tla which uses
> > neon26-gnutls plus a patch to include some neon24 bits of code.
>
> No, I'm not sure, but it has the advantage of making the security team
> happier and providing https support.
>
> > Since we are pretty close to Etch's release, if there's a bug, we may
> > get a broken tla for the next couple year's Debian stable :/
>
> Given the state of the package's bug list, I'd say that that's going to
> happen regardless.

That's FUD! :)

Most of the bugs are quite old (1-2 years) and don't apply to the
current release. The 2 important one are the one you're dealing with
(embedded neon), and another marked as unproducible.

Some people also find it convenient to post their wishlist to the BTS
instead of this mailing list.

I currently use my backported version of the package
(http://dl.sv.gnu.org/releases/arch4debian/sarge-backports/) and I
don't have issues, including with WebDAV - admittedly on i386.


Anyway, since you're fully aware of the situation, I trust you and the
security team for taking the right decisions (+ DP 4.3 :)).

--
Sylvain


_______________________________________________
Gnu-arch-users mailing list
Gnu-arch-users@...
http://lists.gnu.org/mailman/listinfo/gnu-arch-users

GNU arch home page:
http://savannah.gnu.org/projects/gnu-arch/