This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Forw/Re: Removal of systemtap from testing


On 07/29/2011 12:17 PM, Lucas Nussbaum wrote:
> Please get in touch with the other systemtap maintainer (Ritesh Raj
> Sarraf <rrs@debian.org>, Cced). He currently has the "lock" on the
> update of 1.6. Help is of course welcomed.

Yes, please. Any help is appreciated. If you'd like to co-maintain,
please respond to this email. I'll add you to uploaders.

The 1.6 packaging is almost done. It runs on my box.

TODO:
* 1.6 stripped down many things. The systemtap-client package is almost
empty. The only worthy file it installs is stap-env. I'm not sure if
that is still required (I use stap only on my local box).

* There were a bunch of CVEs. We need to run through them to check which
all are fixed in the 1.6 release.  If they are not, we need to pull in
those fixes.

* There's also an FTBFS with newer gcc. That needs to be fixed.


Frank, can you please confirm if the following CVEs are fixed in 1.6 ?

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2502
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2503
CVE-2011-1769
CVE-2011-1781

It doesn't talk about the exact systemtap version in the bug report.


-- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System

Attachment: signature.asc
Description: OpenPGP digital signature


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]