Bug#780398: 1024 bit DH in Wheezy's Apache is Insecure

2015-05-20 Thread Andrew Ayer
tags 780398 + security severity 780398 important thanks New research was released yesterday that estimates the cost of breaking a commonly-used 1024 bit Diffie-Hellman group to be alarmingly low, and within the reach of state-level adversaries[1]. Specifically, an adversary can do

Re: dak decruft / NBS ? NMUs?

2015-05-20 Thread Stefan Fritsch
On Wednesday 20 May 2015 19:13:47, Jean-Michel Vourgère wrote: apache2.4 is still not moving to testing, because of packages having dependencies on removed transitionnal packages. The daily cruft-repport [1] lists the problems: Thanks for the bug reports. * ikiwiki-hosting-web depends on

Bug#785740: marked as done (apache2-suexec-custom always reads www-data config)

2015-05-20 Thread Debian Bug Tracking System
Your message dated Wed, 20 May 2015 20:46:41 +0200 with message-id 6541761.DvnIUohJ5m@k and subject line Re: Bug#785740: apache2-suexec-custom always reads www-data config has caused the Debian Bug report #785740, regarding apache2-suexec-custom always reads www-data config to be marked as done.

dak decruft / NBS ? NMUs?

2015-05-20 Thread Jean-Michel Vourgère
Hi apache2.4 is still not moving to testing, because of packages having dependencies on removed transitionnal packages. The daily cruft-repport [1] lists the problems: * 389-admin Build-Depends on apache2-mpm-worker - Filled #785706 * webgui depends on apache2-mpm-prefork or apache2-mpm-worker