Re: CVE-2020-36193 php-pear vs drupal7

2021-03-09 Thread Ola Lundqvist
Hi Gunnar, all See below. On Tue, 9 Mar 2021 at 05:11, Gunnar Wolf wrote: > Hello Ola, Salvatore, Chris et. al.! > > Ola Lundqvist dijo [Mon, Mar 08, 2021 at 11:51:35PM +0100]: > > Hi Salvatore, Gunnar, all > > > > When looking further into this issue I do not think drupal7 is completely > >

Accepted zeromq3 4.2.1-4+deb9u4 (source) into oldstable

2021-03-09 Thread Debian FTP Masters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 09 Mar 2021 19:45:32 +0100 Source: zeromq3 Binary: libzmq5 libzmq3-dev libzmq5-dbg Architecture: source Version: 4.2.1-4+deb9u4 Distribution: stretch-security Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) Changed-By:

Re: privoxy stretch package 3.0.26-3+deb9u2 prepared

2021-03-09 Thread Abhijith PA
On 09/03/21 10:47 AM, Roland Rosenfeld wrote: > Hi Abhijith! > > On Di, 09 Mär 2021, Abhijith PA wrote: > > > Roland, thanks again for the patch. I can see that last LTS update > > (3.0.26-3+deb9u1) done by you. Hope you can upload this time as > > well. If not, let me know. I am happy to help.

[SECURITY] [DLA 2586-1] linux security update

2021-03-09 Thread Ben Hutchings
- Debian LTS Advisory DLA-2586-1debian-...@lists.debian.org https://www.debian.org/lts/security/Ben Hutchings March 08, 2021https://wiki.debian.org/LTS

[SECURITY] [DLA 2587-1] privoxy security update

2021-03-09 Thread Abhijith PA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian LTS Advisory DLA-2587-1debian-...@lists.debian.org https://www.debian.org/lts/security/ Abhijith PA March 09, 2021

Re: CVE-2021-3121 stretch patch review request and request for test help

2021-03-09 Thread Sylvain Beucler
Hi, I'll let the Go packagers answer authoritatively but as I'm currently working on golang fixes I'd like to share a few points: On 08/03/2021 22:48, Ola Lundqvist wrote: I have prepared a patch for CVE-2021-3121 described in: https://security-tracker.debian.org/tracker/CVE-2021-3121 You

Accepted privoxy 3.0.26-3+deb9u2 (source) into oldstable

2021-03-09 Thread Debian FTP Masters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 08 Mar 2021 14:11:04 +0100 Source: privoxy Architecture: source Version: 3.0.26-3+deb9u2 Distribution: stretch-security Urgency: medium Maintainer: Roland Rosenfeld Changed-By: Roland Rosenfeld Changes: privoxy

Re: privoxy stretch package 3.0.26-3+deb9u2 prepared

2021-03-09 Thread Roland Rosenfeld
Hi Abhijith! On Di, 09 Mär 2021, Abhijith PA wrote: > Roland, thanks again for the patch. I can see that last LTS update > (3.0.26-3+deb9u1) done by you. Hope you can upload this time as > well. If not, let me know. I am happy to help. Once uploaded to > archive I will take care of DLA and