[SECURITY] [DLA 1348-1] patch security update

/bangpatch/ Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlrUhW0ACgkQHpU+J9Qx HliTjBAAgoZLoN+0FvkHzq+UqaKYHW+Y1Ybi5cFNC63BZiqn8gXyO3E2NeFiixv2 90J4

Re: patch / CVE-2018-1000156

but this descended into far too much code to be aesthetically pleasing or safe. (As I noted -- mostly to myself, alas -- we could potentially use a less-safe version to essentially avoid pulling in many changes, if any.) Regards, -- ,''`. : :' : Chris Lamb `. `'`

Re: ldap-account-manager

rse, avoid any potential missed call sites inside ldap-account-manager itself or anything that happened to call into it or use it as a library somehow. Thank you for checking. :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: ldap-account-manager

Hi Brian, I assume that the get_rdn function cannot universally return with "htmlspecialchars" applied? + * Non-maintainer upload by the LTS. ^ Missing "team" ? :) Regards, -- ,''`. : :' : Chris Lamb `. `'`

Wheezy update of firebird2.5?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of firebird2.5 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Accepted beep 1.3-3+deb7u1 (source amd64) into oldoldstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 03 Apr 2018 07:40:15 +0100 Source: beep Binary: beep beep-udeb Architecture: source amd64 Version: 1.3-3+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Gerfried Fuchs <rho...@debian.org> Changed-By: Chri

[SECURITY] [DLA 1338-1] beep security update

7 "Wheezy", this issue has been fixed in beep version 1.3-3+deb7u1. We recommend that you upgrade your beep packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiE

Re: CVE-2018-1000074: rubygems, jruby & ruby1.9.11

other packages in dla-needed.txt? :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

CVE-2018-1000074: rubygems, jruby & ruby1.9.11

ould — in addition — like to take the same underlying issue in rubygems and jruby as well? If not, no problem, and I will handle all three cases ASAP. Just let me know. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: debsecan bugs about irssi

for CVE-2018-7051 is missing. Very strange as there's an entry in debian/series. Regardless, I have addressed this in DLA-1318-1 / irssi 0.8.15-5+deb7u6. Thank you for the report Matus and thanks to Ben for looking into it. Best wishes, -- ,''`. : :' : Chris Lamb `. `'`

[SECURITY] [DLA 1318-1] irssi security update

i packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlq5FzUACgkQHpU+J9Qx Hlh3PA/+LEFvUexjDjy+9+M0lHU7dpuQFhX9eNMoTuIpCcC/W1ccAO

[SECURITY] [DLA 1317-1] net-snmp security update

information in a network. For Debian 7 "Wheezy", this issue has been fixed in net-snmp version 5.7.2.1+dfsg-1+deb8u1. We recommend that you upgrade your net-snmp packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-

Accepted adminer 3.3.3-1+deb7u1 (source all) into oldoldstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 20 Mar 2018 22:40:06 -0400 Source: adminer Binary: adminer Architecture: source all Version: 3.3.3-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Medhamsh V <m...@medhamsh.org> Changed-By: Chris La

[SECURITY] [DLA 1311-1] adminer security update

d that you upgrade your adminer packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlqzx4IACgkQHpU+J9Qx Hlgqhg/+KfM5/8OKDv99f0F7z

Re: debian-security-support migrated to Salsa

commit/b0cd5ed5b282af6bd7739edb55f3448cb2b3a188 Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted vips 7.28.5-1+deb7u2 (source all amd64) into oldoldstable

Berkenbilt <q...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libvips-dev - image processing system good for very large images (dev) libvips-doc - image processing system good for very large images (doc) libvips-tools - image processing system good for very

[SECURITY] [DLA 1306-1] vips security update

ou upgrade your vips packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlqlbGkACgkQHpU+J9Qx HlhlZg/+JARD0ct7/CwIsXKXI61vTZQUDcH843W4TWoTu9fyQgU4BA

Re: [Pkg-zsh-devel] Wheezy update of zsh?

Chris Lamb wrote: > I'll upload zsh 4.3.17-1+deb7u1 now and — to save delays — announce the > DLA too. :) Uploaded and announced as DLA-1304-1. Thank you. :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1304-1] zsh security update

d in zsh version 4.3.17-1+deb7u1. We recommend that you upgrade your zsh packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlqivesACgkQHpU+J9Q

Re: [Pkg-zsh-devel] Wheezy update of zsh?

release DLA. I'll upload zsh 4.3.17-1+deb7u1 now and — to save delays — announce the DLA too. :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: [Pkg-zsh-devel] Wheezy update of zsh?

Hi Abhijith, > I prepared an update[1] for zsh. Debdiff attached along with the mail. > It would be great if you do some testing. Works for me... :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Wheezy update of graphicsmagick?

to review and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of graphicsmagick updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS

[SECURITY] [DLA 1299-1] libjgraphx-java security update

for Java applications. For Debian 7 "Wheezy", this issue has been fixed in libjgraphx-java version 1.4.1.0-3+deb7u1. We recommend that you upgrade your libjgraphx-java packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-

Re: upload golang

9.html Thank you! Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1294-1] golang security update

lang packages. The Debian LTS team would like to thank Abhijith PA for preparing this update. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlqS3

Accepted imagemagick 8:6.7.7.10-5+deb7u21 (source amd64 all) into oldoldstable

libmagick++-dev perlmagick Architecture: source amd64 all Version: 8:6.7.7.10-5+deb7u21 Distribution: wheezy-security Urgency: high Maintainer: ImageMagick Packaging Team <pkg-gmagick-im-t...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: imagema

[SECURITY] [DLA 1293-1] imagemagick security update

- crafted TIFF file. For Debian 7 "Wheezy", this issue has been fixed in imagemagick version 8:6.7.7.10-5+deb7u21. We recommend that you upgrade your imagemagick packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-

Re: Wheezy update of irssi?

eb7u3 & 0.8.15-5+deb7u4. They should apply cleanly to the 'wheezy' branch of git://git.deb.at/pkg/irssi.git. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- From cd3e047c59d3fe8c679efc4f648f0b85d09d7744 Mon Sep 17 00:00:00 2

[SECURITY] [DLA 1289-1] irssi security update

occur due to another NULL pointer dereference. For Debian 7 "Wheezy", these issues have been fixed in irssi version 0.8.15-5+deb7u5. We recommend that you upgrade your irssi packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.or

[SECURITY] [DLA 1288-1] cups security update

to the CUPS daemon in conjunction with DNS rebinding. This was caused by a whitelisted "localhost.localdomain" entry. For Debian 7 "Wheezy", this issue has been fixed in cups version 1.5.3-5+deb7u7. We recommend that you upgrade your cups packages. Regards, - -- ,''`.

Accepted cups 1.5.3-5+deb7u7 (source all amd64) into oldoldstable

libcupsppdc1-dev cups-bsd cups-common cups-ppdc cups-dbg cupsddk Architecture: source all amd64 Version: 1.5.3-5+deb7u7 Distribution: wheezy-security Urgency: high Maintainer: Debian Printing Team <debian-print...@lists.debian.org> Changed-By: Chris Lamb <la...@debian.org> Descrip

Re: Wheezy update of irssi?

old off for whateverreason. :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1287-1] zziplib security update

this vulnerability to cause a denial of service via a specially-crafted file. For Debian 7 "Wheezy", this issue has been fixed in zziplib version 0.13.56-1.1+deb7u2. We recommend that you upgrade your zziplib packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@

Re: forgot frontdesk - apologies and solutions?

ding.) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted librsvg 2.36.1-2+deb7u3 (source all amd64) into oldoldstable

-security Urgency: high Maintainer: Josselin Mouette <j...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: gir1.2-rsvg-2.0 - gir files for renderer library for SVG files librsvg2-2 - SAX-based renderer library for SVG files (runtime) librsvg2-bin - command-line a

[SECURITY] [DLA 1278-1] librsvg security update

attackers via a specially-crafted file. For Debian 7 "Wheezy", this issue has been fixed in librsvg version 2.36.1-2+deb7u3. We recommend that you upgrade your librsvg packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-

Accepted dokuwiki 0.0.20120125b-2+deb7u2 (source all) into oldoldstable

hanged-By: Chris Lamb <la...@debian.org> Description: dokuwiki - standards compliant simple to use wiki Closes: 889281 Changes: dokuwiki (0.0.20120125b-2+deb7u2) wheezy-security; urgency=high . * CVE-2017-18123: An XHR/AJAX call did not properly encode user input, resulting in a re

[SECURITY] [DLA 1269-1] dokuwiki security update

s resulted in a reflected file download vulnerability. For Debian 7 "Wheezy", this issue has been fixed in dokuwiki version 0.0.20120125b-2+deb7u2. We recommend that you upgrade your dokuwiki packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.or

[SECURITY] [DLA 1249-2] smarty3 regression update

Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlpy2f4ACgkQHpU+J9Qx HlgC7w/7BC5agzUTF1sYIgcaXtzsYIjZFKrhrg2xfT2ptPzy5FwNc

Accepted smarty3 3.1.10-2+deb7u2 (source all) into oldoldstable

hanged-By: Chris Lamb <la...@debian.org> Description: smarty3- Template engine for PHP Closes: 886460 Changes: smarty3 (3.1.10-2+deb7u2) wheezy-security; urgency=high . * CVE-2017-1000480: Fix a code-injection vulnerability via specially-crafted filenames in comments. Thanks to

Re: Wheezy update of smarty3?

Hi Mike, > […] please go ahead with a Debian LTS upload. Announced as DLA-1249-1. Thanks for your help. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted rsync 3.0.9-4+deb7u2 (source amd64) into oldoldstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 19 Jan 2018 15:22:37 +1100 Source: rsync Binary: rsync Architecture: source amd64 Version: 3.0.9-4+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Paul Slootman <p...@debian.org> Changed-By: Chris La

Accepted libgd2 2.0.36~rc1~dfsg-6.1+deb7u11 (source amd64) into oldoldstable

Maintainer: GD team <pkg-gd-de...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libgd-tools - GD command line tools and example code libgd2-noxpm - GD Graphics Library version 2 (without XPM support) libgd2-noxpm-dev - GD Graphics Library version 2

[SECURITY] [DLA 1248-1] libgd2 security update

exploited a signedness confusion leading to an infinite loop. For Debian 7 "Wheezy", this issue has been fixed in libgd2 version 2.0.36~rc1~dfsg-6.1+deb7u11. We recommend that you upgrade your libgd2 packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@

Re: Wheezy update of smarty3?

wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of smarty3?

Hi Mike, > > Hey, how are you getting on? :) Can we help? > > Thanks for the reminder. Next item on my list now. Friendly ping on this? :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of smarty3?

Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of poco?

le while to update.) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of poco?

nd handle that and the changes to the security-tracker - it can be a little fiddly. :) You would also remove the entry in data/dla-needed.txt Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Bug#886721: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of poco?

what you need from us. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

Hi Emilio, > If you don't have the time now I can take a look at this later today. Please, although it's more that my IEEE 754 is pretty rusty… :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: [SECURITY] [DLA 1234-1] gdk-pixbuf security update

check. Indeed. Does anyone have one handy? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of poco?

this? :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted gdk-pixbuf 2.26.1-1+deb7u7 (source all amd64) into oldoldstable

: 2.26.1-1+deb7u7 Distribution: wheezy-security Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintain...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: gir1.2-gdkpixbuf-2.0 - GDK Pixbuf library - GObject-Introspection libgdk-pixbuf2.0-0

[SECURITY] [DLA 1234-1] gdk-pixbuf security update

led to memory corruption and potential code execution. For Debian 7 "Wheezy", this issue has been fixed in gdk-pixbuf version 2.26.1-1+deb7u7. We recommend that you upgrade your gdk-pixbuf packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.o

Re: Wheezy update of gifsicle?

Hi Herbert, > Hope that helps. The files are at: Thank you for this. I have uploaded it and announced it in DLA 1233-1. :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: awstats / CVE-2017-1000501 / #885835

Hi Brian, > Here is my proposed patch against the wheezy version. The upstream > patches applied with no problem Looks good to me :) > except for a single hunk that makes a single white space change. Oh dear :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'

Re: Wheezy update of poco?

nd run with that if that helps. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Wheezy update of wildmidi?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of wildmidi updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of smarty3?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of smarty3 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of imagemagick?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of imagemagick updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Wheezy update of plexus-utils & plexus-utils2?

releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start working on this update at any point in time. You can verify whether someone is registered on this update in this file: https://salsa.debian.org/security-tracker-team/security-tracker

Wheezy update of gifsicle?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of gifsicle updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of gdk-pixbuf?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of gdk-pixbuf updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Wheezy update of poco?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of poco updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Accepted imagemagick 8:6.7.7.10-5+deb7u20 (source amd64 all) into oldoldstable

libmagick++-dev perlmagick Architecture: source amd64 all Version: 8:6.7.7.10-5+deb7u20 Distribution: wheezy-security Urgency: high Maintainer: ImageMagick Packaging Team <pkg-gmagick-im-t...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: imagema

Accepted poppler 0.18.4-6+deb7u5 (source amd64) into oldoldstable

-cpp-dev poppler-utils poppler-dbg Architecture: source amd64 Version: 0.18.4-6+deb7u5 Distribution: wheezy-security Urgency: high Maintainer: Loic Minier <l...@dooz.org> Changed-By: Chris Lamb <la...@debian.org> Description: gir1.2-poppler-0.18 - GObject introspection data for

Wheezy update of exiv2?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of exiv2 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Wheezy update of libhibernate-validator-java?

whether you would like to review and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of libhibernate-validator-java updates for the LTS releases. Thank you very much. Chris Lamb

Wheezy update of awstats?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of awstats updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of mupdf?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of mupdf updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Wheezy update of nasm?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of nasm updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Wheezy update of irssi?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of irssi updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Re: To be removed from wheezy as well

ideas? Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of kildclient?

Hi Eduardo, > Unfortunately those packages FTBS due to a missing build dependency. Damn, my wheezy chroot has Python installed by default so I didn't catch this myself. Uploading now... Thanks :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / ch

[SECURITY] [DLA 1210-1] kildclient security update

7 "Wheezy", this issue has been fixed in kildclient version 2.11.1-1+deb7u1. Thanks to Eduardo M Kalinowski for help in preparing this update. We recommend that you upgrade your kildclient packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.or

Re: Wheezy update of kildclient?

wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of kildclient?

quot;assigned" to me" in the internal LTS tool, so if when you have a patch ready, please just send it over and I will upload it to wheezy. Alternatively, I can work on a patch.. Just let me know. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: wheezy/lts - segfault in xrdp after upgrade to 0.5.0-2+deb7u2

Hi Lucas, > I will apply your patch, run another round of tests and upload the > fixed version. Any update on this? :) Feels bad (and bad "publicity" of sorts) to have known regressions in Debian LTS...! Best wishes, -- ,''`. : :' : Chris Lamb

Re: wheezy/lts - segfault in xrdp after upgrade to 0.5.0-2+deb7u2

Hi, > You can't see the CVE-2017-16927.patch? I do not have my laptop with me > right now, but I will check the patch and investigate the issue ASAP. Great stuff. (I can see it now — it must have caught me pre-coffee...!) Regards, -- ,''`. : :' : Chri

Re: wheezy/lts - segfault in xrdp after upgrade to 0.5.0-2+deb7u2

hes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1204-1] evince security update

to run commands as the current user when "printing" to PDF. For Debian 7 "Wheezy", this issue has been fixed in evince version 3.4.0-3.1+deb7u2. We recommend that you upgrade your evince packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la..

Wheezy update of tor?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of tor updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Re: [PATCH 1/3] report-vuln: Use spaces instead of tabs

Hi Guido, > report-vuln has a mixture of tabs and spaces which made changing it hard > so I changed everyting to spaces. O.k. to apply? Python files with tabs? I *insist* you apply! Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Request for testing: python2.6/python2.7

Hi Roberto, > I thought it wise to announce the packages here and request some > testing. I've just run the Django testsuite against the Python 2.7 packages with no issues. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted lynx-cur 2.8.8dev.12-2+deb7u2 (source all amd64) into oldoldstable

;ko...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: lynx - Text-mode WWW Browser (transitional package) lynx-cur - Text-mode WWW Browser with NLS support (development version) lynx-cur-wrapper - Wrapper for lynx-cur (transitional package) Changes: lynx-cur (2

Accepted procmail 3.22-20+deb7u2 (source amd64) into oldoldstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 18 Nov 2017 10:06:37 +0900 Source: procmail Binary: procmail Architecture: source amd64 Version: 3.22-20+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Santiago Vila <sanv...@debian.org> Changed-By: Chri

python2.6 in wheezy

Hi Roberto, I see you claimed python2.7. Would you be able to take care of python2.6 too? The change will be identical AFAICT and thus it makes more sense to handle them both in parallel. If not, just let me know. :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la

Wheezy update of lynx-cur?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of lynx-cur updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of shibboleth-sp2?

to review and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of shibboleth-sp2 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS

Wheezy update of opensaml2?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of opensaml2 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS

Wheezy update of konversation?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of konversation updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Wheezy update of swftools?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of swftools updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of python2.7?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of python2.7 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS

Wheezy update of optipng?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of optipng updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of ldns?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of ldns updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Re: RFC: Peculiar dependency change in graphicsmagick

the last security upload on amd64 Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1163-1] apr-util security update

Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAloA1nQACgkQHpU+J9Qx Hlgn0A/+NAg5jHgkNf5CFfXWNyy0NqQjXAP9/hhwv5AqMHqOcu3dHLy0pzxZ/cFf 6i0tZyFTeqURL2D/H77PiAQ

[SECURITY] [DLA 1162-1] apr security update

in program termination. For Debian 7 "Wheezy", this issue has been fixed in apr version 1.4.6-3+deb7u2. We recommend that you upgrade your apr packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

<    1   2   3   4   5   6   7   8   9   10   >