Bug#584911: bind9: hard-coded dependency on "/usr/lib/ssl/openssl.cnf" might cause trouble

2010-06-09 Thread Gebauer, Mirko (FRA-MRM)
Thanks Florian, for your prompt responses. And please excuse the ugly e-mail style without proper line wrappings that Outlook (company...) causes in Debian's BTS. I'm still curious why the bug we've stumbled upon in OpenSSL was no issue in previous versions of bind9 in lenny? Best regards, Mir

Bug#584911: bind9: hard-coded dependency on "/usr/lib/ssl/openssl.cnf" might cause trouble

2010-06-08 Thread Gebauer, Mirko (FRA-MRM)
> BIND uses the NULL argument, as far as I can tell. So this might be > an OpenSSL bug. Well, all I can say is that bind9 as provided by the package version "1:9.5.1.dfsg.P3-1+lenny1" doesn't show the reported behavior, and that both "1:9.5.1.dfsg.P3-1+lenny1" and the current "1:9.6.ESV.R1+dfsg

Bug#584911: bind9: hard-coded dependency on "/usr/lib/ssl/openssl.cnf" might cause trouble

2010-06-07 Thread Gebauer, Mirko (FRA-MRM)
Package: bind9 Version: 1:9.6.ESV.R1+dfsg-0+lenny1 Severity: serious (This also seems to affect newer versions of bind9; also tested with 1:9.7.0.dfsg.P1-1~bpo50+1 from backports.) I had to invest quite some time today in figuring out why the recent security update for bind9 worked fine on all

Bug#578361: fixed in sun-java6 6.20-dlj-1

2010-04-20 Thread Gebauer, Mirko (FRA-MRM)
Thank you very much! Mirko This message contains information which may be confidential and privileged.Unless you are the intended recipient (or authorized to receive this message for the intended recipient), you may not use, copy, disseminate or disclose to anyone the message or any informati

Bug#578361: sun-java6-jdk (amd64): outdated version with security vulnerabilities

2010-04-19 Thread Gebauer, Mirko (FRA-MRM)
Package: sun-java6-jdk Version: 6-17-1 Severity: serious Tags: security Package sun-java6-jdk on sid/amd64 lags behind sid/i386 quite a bit now. That's a pity, since the current version of Sun Java has quite a list of security fixes compared to the package in sid/amd64. I'm tracking sun-java6-j