Re: maintenance for security-tracker.d.o today 1800Z to 2000Z (i.e. now)

2017-10-10 Thread Salvatore Bonaccorso
Hi Julien,

On Tue, Oct 10, 2017 at 09:23:10PM +0200, Julien Cristau wrote:
> On Tue, Oct 10, 2017 at 20:02:07 +0200, Julien Cristau wrote:
> 
> > Hi all,
> > 
> > I'll be upgrading soriano.d.o, the host behind the security tracker,
> > starting in a few minutes.  Please expect some outage.  Sorry for the
> > inconvenience and late notice.
> > 
> All done.

Thanks, all went smooth and I have found no problem on tracker side so
far.

Regards,
Salvatore



Re: maintenance for security-tracker.d.o today 1800Z to 2000Z (i.e. now)

2017-10-10 Thread Moritz Mühlenhoff
On Tue, Oct 10, 2017 at 09:23:10PM +0200, Julien Cristau wrote:
> On Tue, Oct 10, 2017 at 20:02:07 +0200, Julien Cristau wrote:
> 
> > Hi all,
> > 
> > I'll be upgrading soriano.d.o, the host behind the security tracker,
> > starting in a few minutes.  Please expect some outage.  Sorry for the
> > inconvenience and late notice.
> > 
> All done.

Thanks, all working fine from my quick tests.

Cheers,
Moritz



Re: maintenance for security-tracker.d.o today 1800Z to 2000Z (i.e. now)

2017-10-10 Thread Julien Cristau
On Tue, Oct 10, 2017 at 20:02:07 +0200, Julien Cristau wrote:

> Hi all,
> 
> I'll be upgrading soriano.d.o, the host behind the security tracker,
> starting in a few minutes.  Please expect some outage.  Sorry for the
> inconvenience and late notice.
> 
All done.

Cheers,
Julien



maintenance for security-tracker.d.o today 1800Z to 2000Z (i.e. now)

2017-10-10 Thread Julien Cristau
Hi all,

I'll be upgrading soriano.d.o, the host behind the security tracker,
starting in a few minutes.  Please expect some outage.  Sorry for the
inconvenience and late notice.

Cheers,
Julien



DSA candidates

2017-10-10 Thread Raphael Geissert
botan1.10
--
bzr
--
cacti
--
exiv2
--
jackson-databind
--
jasperreports
--
lame
--
libidn
--
liblouis
--
libofx
--
libraw
--
libvorbis
--
opencv
--
openexr
--
otrs2
--
rtpproxy
--
sssd
--
tomcat8
--
unrar-free
--
golang-1.7/stable
--
golang-1.8/stable
--
koji/stable
--
ruby2.3/stable
--
yadifa/stable
--
chromium-browser/oldstable
--
golang/oldstable
--
mp3splt/oldstable
--
php-horde-crypt/oldstable
--
ruby-http/oldstable
--
ruby2.1/oldstable
--
sam2p/oldstable
--
tomcat7/oldstable
--
--
The above is a list of DSA candidates based on the tracker's information.
One should evaluate the candidates and either add them to dsa-needed.txt
or consider tagging them no-dsa.



External check

2017-10-10 Thread Raphael Geissert
CVE-2014-8184: RESERVED
--
The output might be a bit terse, but the above ids are known elsewhere,
check the references in the tracker. The second part indicates the status
of that id in the tracker at the moment the script was run.