Re: Fixing CVE-2016-9839 for mapserver in wheezy

2016-12-07 Thread Chris Lamb
Bas Couwenberg wrote: > If you can do already, please generate and send the DLA. All done. :) Thanks again for uploading. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Fixing CVE-2016-9839 for mapserver in wheezy

2016-12-07 Thread Bas Couwenberg
On 2016-12-07 09:49, Chris Lamb wrote: Sebastiaan Couwenberg wrote: Thanks, the fixed version has been uploaded, but the security-tracker marks it (6.0.1-3.2+deb7u3) as vulnerable which is incorrect. The security-tracker is generated from the files in the secure-testing repository, not from t

Re: Fixing CVE-2016-9839 for mapserver in wheezy

2016-12-07 Thread Chris Lamb
Sebastiaan Couwenberg wrote: > Thanks, the fixed version has been uploaded, but the security-tracker > marks it (6.0.1-3.2+deb7u3) as vulnerable which is incorrect. The security-tracker is generated from the files in the secure-testing repository, not from the archive itself. Can you confirm whe

Wheezy update of roundcube?

2016-12-07 Thread Chris Lamb
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of roundcube: https://security-tracker.debian.org/tracker/source-package/roundcube Would you like to take care of this yourself? If yes, please follow the workflow w