Re: Handle jq CVE-2023-49355, which is equal to CVE-2023-50246

2023-12-19 Thread Sylvain Beucler
? [0] https://security-tracker.debian.org/tracker/source-package/jq [1] https://github.com/jqlang/jq/issues/2986 [2] https://bugs.debian.org/1058763 Ideally you can contact MITRE through https://cveform.mitre.org/ to mark CVE-2023-49355 as a duplicate. Cheers! Sylvain Beucler Debian LTS Team

Re: Debian Security Tracker - `no-dsa` Clarification

2022-11-21 Thread Sylvain Beucler
the triage is meant to guide the Debian Security / LTS Teams' actions only, and is not particularly fine-grained. Cheers! Sylvain Beucler Debian LTS Team On 21/11/2022 11:01, Hadas Bloom wrote: My name is Hadas, I'm in the Snyk Security Group. I've been in contact with you a while back regarding

Re: What is the best free HIDS for Debian

2022-05-16 Thread Sylvain
Greetings, Sylvain

Re: Fwd: Re: Fwd: What is the best free HIDS for Debian

2022-05-14 Thread Sylvain
Hello, Le 13/05/2022 à 20:30, Elmar Stellnberger a écrit : From what Sylvain has answered me, she didn´t do that. As said the mail header I got also did not show anything like that. I must precise that I'm a man. "Sylvain" is for boys and "Sylvie" for girls. :)

Re: What is the best free HIDS for Debian

2022-05-13 Thread Sylvain
. I'm french and I do really have problems learning over languages. So sorry if I'm not very clear and if I use words in an unusual way... Best regards, Sylvain

Re: What is the best free HIDS for Debian

2022-05-08 Thread Sylvain
ontab" in a safe place and then reinstall the package cron. The new "crontab" file seems to be the same as the previous since the md5 are equal, but debcheckroot still throws an error for it... Regards Sylvain Le 06/05/2022 à 16:20, Elmar Stellnberger a écrit : Dear Sylvain The n

Re: What is the best free HIDS for Debian

2022-05-04 Thread Sylvain
them. Best regards, Sylvain

Re: What is the best free HIDS for Debian

2022-05-03 Thread Sylvain
Thank you for your responses! Tripwire: - - It throws a segfault error while scaning on one PC. No errors mentioned in log files. - on another machine tripwire worked fine for a long time but now I have this error while scaning: *** Fatal exception: basic_string::_M_create

What is the best free HIDS for Debian

2022-05-02 Thread Sylvain
Hello everyone ! I unsuccessfully tried Tripwire, Aide, Integrit and now OSSEC and OSSEC+. All these softs throw errors while running or compiling on my Debian 11.3... So can you tell me if there is another free HostBase Intrusion Detection System. Sylvain

Re: FYI php disable_function bypass bug

2021-10-09 Thread Sylvain Beucler
. Thanks for the info. Cheers! Sylvain Beucler Debian LTS Team

Re: no-dsa for Samba CVEs in Debian.

2021-05-19 Thread Sylvain Beucler
e is focus on developing automated testing, e.g. https://salsa.debian.org/lts-team/lts-extra-tasks/-/issues/1 so I believe we can contribute some man-power on improving Debian Samba testing, not just in LTS but generally, if there's interest. Cheers! Sylvain

Re: Is this the right place to discuss no-dsa choices?

2021-05-17 Thread Sylvain Beucler
specifically, which is extended support and is usually performed by the LTS team without involving the package maintainers, you may want to reach debian-...@lists.debian.org. Cheers! Sylvain Beucler Debian LTS Team On Wed, May 12, 2021 at 07:34:56PM +1200, Andrew Bartlett wrote: > On Wed, 2021-05-12

Bug#908678: Update on the security-tracker git discussion

2020-10-02 Thread Sylvain Beucler
ge b/conf/post-merge new file mode 100755 index 00..a9991c1cc9 --- /dev/null +++ b/conf/post-merge @@ -0,0 +1,3 @@ +#!/bin/sh +echo "post-merge" +[ -f data/CVE/1999.list ] && cat data/CVE/*.list > data/CVE/list diff --git a/conf/pre-commit b/conf/pre-commit index 767e478e36..12e781e97d 100755 --- a/conf/pre-commit +++ b/conf/pre-commit @@ -5,3 +5,4 @@ set -e exec 1>&2 make check-syntax +bin/split-by-year.py ? Cheers! Sylvain

Re: Revert "CVE-2019-15690/libvncserver: reference embedded copies in italc/ssvnc/tightvnc/veyon/vncsnapshot"

2020-03-18 Thread Sylvain Beucler
ase). Last I marked the version of veyon that is already fixed in unstable. This clearly isn't simply "copying over" the packages from embedded-code-copies (which I had incidentally just updated as it was incomplete). Let me know if there's something I missed. Cheers! Sylvain

Re: Status of php-mbstring vs. libonig

2019-11-26 Thread Sylvain Beucler
Hi, On 25/11/2019 15:20, Salvatore Bonaccorso wrote: > On Mon, Nov 25, 2019 at 11:50:00AM +0100, Sylvain Beucler wrote: >> On 22/11/2019 21:23, Sylvain Beucler wrote: >>> I see in 'embedded-code-copies': >>> >>>   libonig >>>       - php5 5.3.2-

Re: Status of php-mbstring vs. libonig

2019-11-25 Thread Sylvain Beucler
Hi, On 22/11/2019 21:23, Sylvain Beucler wrote: > I see in 'embedded-code-copies': > >   libonig >       - php5 5.3.2-1 (embed) > > (i.e. from 2010) > > Jessie seems to properly link to libonig (dependency of e.g. > libapache2-mod-php5). > > Stretch and Buste

Status of php-mbstring vs. libonig

2019-11-22 Thread Sylvain Beucler
). Do you know what the current situation is supposed to be? Cheers! Sylvain

Re: Verified Boot, Secure Boot, dm-verity, debcheckroot

2019-11-16 Thread Sylvain Beucler
course build dependencies. For the compiler it is recommended to set SOURCE_DATE_EPOCH to trigger deterministic behavior. https://reproducible-builds.org/docs/ has a lot more on this :) Cheers! Sylvain

Re: handling private keys

2005-06-28 Thread Sylvain Soliman
related stuff could be done on the chip without any software access (even from root) until someone gets the admin password of the chip. Best, Sylvain. -- Sylvain Soliman [EMAIL PROTECTED] GnuPG Public Key: 0x0F53AF99 Secretaire adjoint Fede. Francaise de Go http

Re: Crypto File System-Problems Creating One

2005-06-06 Thread Sylvain Soliman
, Sylvain. -- Sylvain Soliman [EMAIL PROTECTED] GnuPG Public Key: 0x0F53AF99 Secretaire adjoint Fede. Francaise de Go http://ffg.jeudego.org/ Co-mainteneur de PilotGOne http://minas.ithil.org/pilotgone/ Page personellehttp://contraintes.inria.fr

unsubscribe

2004-05-12 Thread Sylvain Viollat
-- [EMAIL PROTECTED] Support Professionnel Claranet France

Re: Have I been hacked?

2003-05-07 Thread Sylvain Soliman
blue99.ex.ac.uk Wed May 7 13:21 - 13:57 (00:35) I have run chkrootkit but nothing was found. I have never had this before. Am I being paranoid or is someone trying to cover up their tracks? logrotate? Sylvain. -- Sylvain Soliman [EMAIL PROTECTED]GnuPG Public Key

Re: Attachment handling in Mutt

2002-08-08 Thread Sylvain Soliman
of the alternatives (isn't that your case?). The choice of which alternative is shown is made with the use of the alternative_order variable, but I don't know of any way to force the display of ALL alternatives. However, I'm not sure what kind of risk there is in not showing an attachment... Sylvain