[SECURITY] [DLA 1287-1] zziplib security update

2018-02-20 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: zziplib Version: 0.13.56-1.1+deb7u2 CVE ID : CVE-2018-6869 It was discovered that there was a uncontrolled memory allocation issue in zziplib, a ZIP archive library. Remote attackers could leverage this

Re: Extended Long Term Support for Wheezy

2018-02-20 Thread Vincent Bernat
❦ 20 février 2018 22:02 +0100, Markus Koschany  : >>> FWIW, I published a blog post with more details about how it will >>> work from the sponsor's point of view: >>> https://raphaelhertzog.com/2018/02/20/time-to-join-extended-long-term-support-for-debian-7-wheezy/ >> >>

Re: Extended Long Term Support for Wheezy

2018-02-20 Thread Markus Koschany
Am 20.02.2018 um 18:39 schrieb Vincent Bernat: > ❦ 20 février 2018 18:10 +0100, Raphael Hertzog  : > >>> some of the LTS sponsors are looking to extend the support period of >>> Debian 7 Wheezy (from a few months up to a full year).i >> >> FWIW, I published a blog post with

Re: Extended Long Term Support for Wheezy

2018-02-20 Thread Alexander Wirt
On Tue, 20 Feb 2018, Vincent Bernat wrote: > ❦ 20 février 2018 18:10 +0100, Raphael Hertzog  : > > >> some of the LTS sponsors are looking to extend the support period of > >> Debian 7 Wheezy (from a few months up to a full year).i > > > > FWIW, I published a blog post with

Re: Extended Long Term Support for Wheezy

2018-02-20 Thread Vincent Bernat
❦ 20 février 2018 18:10 +0100, Raphael Hertzog  : >> some of the LTS sponsors are looking to extend the support period of >> Debian 7 Wheezy (from a few months up to a full year).i > > FWIW, I published a blog post with more details about how it will > work from the sponsor's

Re: Extended Long Term Support for Wheezy

2018-02-20 Thread Markus Koschany
Am 20.02.2018 um 18:10 schrieb Raphael Hertzog: > (this reply on debian-lts, not on debian-devel) > > On Tue, 20 Feb 2018, Raphael Hertzog wrote: >> some of the LTS sponsors are looking to extend the support period of >> Debian 7 Wheezy (from a few months up to a full year).i > > FWIW, I

Re: Extended Long Term Support for Wheezy

2018-02-20 Thread Raphael Hertzog
(this reply on debian-lts, not on debian-devel) On Tue, 20 Feb 2018, Raphael Hertzog wrote: > some of the LTS sponsors are looking to extend the support period of > Debian 7 Wheezy (from a few months up to a full year).i FWIW, I published a blog post with more details about how it will work from

LTS Report for February 2018 - Abhijith

2018-02-20 Thread Abhijith PA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 My first month as a paid contributor !. I was assigned 8h and I spend all of them on the following. * simplesamlphp: Backport CVE-2017-18122, CVE-2017-18121, CVE-2018-6521, test and release DLA 1273-1[1] * mailman: Backport CVE-2018-5950, test

Re: Fw: Extended Long Term Support for Wheezy

2018-02-20 Thread Raphael Hertzog
Hello Jens, On Tue, 20 Feb 2018, Jens Korte wrote: > How would you organize and call it in the wiki name space, ELTS, > extended LTS, LTS? Would you use the normal LTS name space and make no > difference? LTS is on the one side the name for the support after > oldstable and on the other side the

Fw: Extended Long Term Support for Wheezy

2018-02-20 Thread Jens Korte
Wrong ML before. Beginn der weitergeleiteten Nachricht: Datum: Tue, 20 Feb 2018 16:52:02 +0100 Von: Jens Korte Cc: debian-de...@lists.debian.org Betreff: Re: Extended Long Term Support for Wheezy Hi How would you organize and call it in the wiki name space, ELTS, extended

Extended Long Term Support for Wheezy

2018-02-20 Thread Raphael Hertzog
[ Bcc to ftpmasters, wanna-build team, DSA team, LTS team, security team to catch their attention ] Hello, some of the LTS sponsors are looking to extend the support period of Debian 7 Wheezy (from a few months up to a full year). Some of the LTS sponsors (notably Plat'Home, Toshiba) are also