Merge Opportunities Report - 2020-08-03

[Bryce Harrington]

On Mon, Aug 03, 2020 at 10:44:21AM -0700, Bryce Harrington wrote:
> On Mon, Aug 03, 2020 at 08:59:18AM -0700, Bryce Harrington wrote:
> > New Version in Debian Unstable
> > --------------------------------------------------------------------------------------------------
> > high  nut                       2.7.4-12                  2.7.4-11ubuntu4          
> > high  openipmi                  2.0.29-0.1                2.0.27-0ubuntu2          
> > high  spamassassin              3.4.5~pre1-1              3.4.4-1ubuntu1           
> 
> I'm keeping an eye on this; I want to see if 3.4.5 gets released before
> FF, but will probably give it only another week or two.  There is also a
> svn snapshot in experimental, but I don't want to pull that.
> 
> > high  squid                     4.12-1                    4.11-5ubuntu3            
> > high  tftp-hpa                  5.2+20150808-1.1          5.2+20150808-1ubuntu4    
> > low   autofs                    5.1.6-3                   5.1.6-2ubuntu1           
> > low   dnsmasq                   2.82-1                    2.81-4build1             
> > low   exim4                     4.94-7                    4.94-2ubuntu1            
> 
> Lots of cherrypick fixes between -2 and -7, and exim4 is an easy merge.
> I'll take this on my list to do before FF.
> 
> > low   libtommath                1.2.0-5                   1.2.0-4ubuntu1           
> > low   libvirt                   6.5.0-1                   6.0.0-0ubuntu10          
> > low   net-snmp                  5.8+dfsg-5                5.8+dfsg-2ubuntu3        
> > low   nginx                     1.18.0-5                  1.18.0-3ubuntu2          
> 
> The -5 has a CVE fix so I will try and scoop up this merge.
> 
> > low   nss                       2:3.55-1                  2:3.53.1-1ubuntu1        
> > low   pmdk                      1.9-1                     1.8-1ubuntu1             
> > low   python-django             2:2.2.14-1                2:2.2.12-1ubuntu1        
> > low   python-rtslib-fb          2.1.71-2                  2.1.71-0ubuntu1          
> > low   qemu                      1:5.0-14                  1:5.0-5ubuntu3           
> > low   rabbitmq-server           3.8.5-1                   3.8.3-0ubuntu1           
> > low   rsync                     3.2.2-2                   3.2.1-1ubuntu2           
> > low   runc                      1.0.0~rc10+dfsg2-1        1.0.0~rc10-0ubuntu1      
> > low   ssh-import-id             5.10-1                    5.10-0ubuntu1            
> > 
> > 
> > New Version in Experimental
> > --------------------------------------------------------------------------------------------------
> > high  tmux                      3.2~rc2-1                 3.1b-1                   
> > low   containerd                1.4.0~beta2~ds1-1         1.3.6-0ubuntu1           
> > low   haproxy                   2.2.2-1                   2.0.17-1                 
> > low   http-parser               2.9.3-1                   2.9.2-2                  
> > 
> > 
> > New Upstream not in Debian
> > --------------------------------------------------------------------------------------------------
> > high  at                        UNKNOWN                   3.1.23-1ubuntu2          
> > high  bcache-tools              UNKNOWN                   1.0.8-4ubuntu1           
> > high  checksecurity             UNKNOWN                   2.0.16+nmu1ubuntu1       
> > high  drbd-utils                UNKNOWN                   9.11.0-1build1           
> > high  libapache2-mod-auth-plain UNKNOWN                   2.0.52                   
> > high  logwatch                  7.5.4/logwatch-7.5.4      7.5.2-1ubuntu2           
> 
> 7.5.4 is not a worthwhile merge, but there is a newer upstream release.

Ah, what I said here is completely incorrect.  What I should have said
is 7.5.4 is not in Debian, however there has been a lot more work
upstream post-7.5.4 that is also likely worth pulling in.  So I'm
working on looking at pulling in a snapshot newer than 7.5.4.  I haven't
heard from the Debian maintainer about their plans.

> I've started at pulling in the upstream release and going ahead of
> debian here.

> > high  numactl                   2.0.13                    2.0.12-1build1           
> > high  procmail                  UNKNOWN                   3.22-26                  
> > high  setserial                 UNKNOWN                   2.17-52                  
> > high  sysstat                   12.4.0                    12.3.3-1                 
> > high  wakeonlan                 UNKNOWN                   0.41-12                  
> > high  whois                     UNKNOWN                   5.5.6                    
> > (Low priority upstream releases skipped)
> > 
> > high == Packages seeded for Ubuntu-Server
> > low == Non-seeded packages Server team is subscribed to
> 
> Bryce