Accepted tryton-server 2.2.4-1+deb7u4 (source all) into oldstable

ain...@debian.tryton.org> Changed-By: Chris Lamb <la...@debian.org> Description: tryton-server - Tryton Application Platform (Server) Changes: tryton-server (2.2.4-1+deb7u4) wheezy-security; urgency=high . * CVE-2017-0360: Sanitize path in file_open against suffix injection attack. Ch

Accepted collectd 5.1.0-3+deb7u3 (source amd64 all) into oldstable

: wheezy-security Urgency: high Maintainer: Sebastian Harl <tok...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: collectd - statistics collection and monitoring daemon collectd-core - statistics collection and monitoring daemon (core system) collectd-dbg

Accepted curl 7.26.0-1+wheezy19 (source amd64) into oldstable

Distribution: wheezy-security Urgency: high Maintainer: Alessandro Ghedini <gh...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavou

[SECURITY] [DLA 883-1] curl security update

hat you upgrade your curl packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAljjfqkACgkQHpU+J9Qx Hlj4QQ/+IwOrFvQYHiPXuZTiSWmqFGXYZ/4XLXJPmeTz

[SECURITY] [DLA 884-1] collectd security update

5.1.0-3+deb7u3. We recommend that you upgrade your collectd packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAljjuocACgkQHpU+J9Qx

Wheezy update of ghostscript?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of ghostscript updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

[SECURITY] [DLA 890-1] ming security update

er behind the bounds of a statically allocated array of structs of type SWF_GRADIENTRECORD. For Debian 7 "Wheezy", this issue has been fixed in ming version 1:0.4.4-1.1+deb7u2. We recommend that you upgrade your ming packages. Regards, - -- ,''`. : :' : Chris Lamb

Accepted ming 1:0.4.4-1.1+deb7u2 (source amd64 all) into oldstable

Distribution: wheezy-security Urgency: high Maintainer: Stuart R. Anderson <ander...@netsweng.com> Changed-By: Chris Lamb <la...@debian.org> Description: libming-dev - Library to generate SWF (Flash) Files (development files) libming-util - Library to generate SWF (Flash) Files - Utiliti

[SECURITY] [DLA 851-1] wget security update

attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL. For Debian 7 "Wheezy", this issue has been fixed in wget version 1.13.4-3+deb7u4. We recommend that you upgrade your wget packages. Regards, - -- ,''`. : :' :

Wheezy update of audiofile?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of audiofile updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Re: Wheezy update of suricata?

in and handled this if you don't get to it within — say — a couple of days? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted freetype 2.4.9-1.1+deb7u4 (source amd64) into oldstable

: Steve Langasek <vor...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: freetype2-demos - FreeType 2 demonstration programs libfreetype6 - FreeType 2 font engine, shared library files libfreetype6-dev - FreeType 2 font engine, development files libfreetype6-udeb

[SECURITY] [DLA 848-1] freetype security update

Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAli+oVcACgkQHpU+J9Qx HlgVGw//XFaJWyDAd38TXQytLzkMN1r5zIYJPHT+o8BMgRezmBd1Zx

Re: Bug#871810: cvs: CVE-2017-12836: CVS and ssh command injection

Hi Thorsten, > […] Thanks for uploading. I'll send the DLA announcement out now… Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1056-1] cvs security update

heezy", this issue has been fixed in cvs version 2:1.12.13+real-9+deb7u1. We recommend that you upgrade your cvs packages. Thanks to Thorsten Glaser <t...@mirbsd.de> for preparing and testing this upload. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@de

Accepted subversion 1.6.17dfsg-4+deb7u12 (source all amd64) into oldoldstable

amd64 Version: 1.6.17dfsg-4+deb7u12 Distribution: wheezy-security Urgency: high Maintainer: Peter Samuelson <pe...@p12n.org> Changed-By: Chris Lamb <la...@debian.org> Description: libapache2-svn - Subversion server modules for Apache libsvn-dev - Development files for Subversion libra

[SECURITY] [DLA 1052-1] subversion security update

quot; URLs in "svn:externals" and "svn:sync-from-url". For Debian 7 "Wheezy", this issue has been fixed in subversion version 1.6.17dfsg-4+deb7u12. We recommend that you upgrade your subversion packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'`

Accepted xchat 2.8.8-7.1+deb7u1 (source all amd64) into oldoldstable

org> Changed-By: Chris Lamb <la...@debian.org> Description: xchat - IRC client for X similar to AmIRC xchat-common - Common files for X-Chat Closes: 852275 Changes: xchat (2.8.8-7.1+deb7u1) wheezy-security; urgency=high . * CVE-2016-2087: Prevent a directory traversal vulnera

[SECURITY] [DLA ] xchat security update

or modify arbitrary files via a ".." in the server name. For Debian 7 "Wheezy", this issue has been fixed in xchat version 2.8.8-7.1+deb7u1. We recommend that you upgrade your xchat packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la..

Wheezy update of git?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of git updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Wheezy update of mercurial?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of mercurial updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS

[SECURITY] [DLA 1054-1] libgxps security update

. Specially-crafted input could lead to a remote denial of service attack. For Debian 7 "Wheezy", this issue has been fixed in libgxps version 0.2.2-2+deb7u1. We recommend that you upgrade your libgxps packages. Regards, - -- ,''`. : :' : Chris Lamb `. `

[SECURITY] [DLA 1028-1] apache2 security update

7 "Wheezy", this issue has been fixed in apache2 version 2.2.22-13+deb7u10. We recommend that you upgrade your apache2 packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP

Re: Wheezy update of apache2?

dded anarcat and mejo to CC as they are mentioned in the apache2 2.2.22-13+deb7u8 upload; could one of you take care of it? Best wishes, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

Wheezy update of ncurses?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of ncurses updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Re: unattended upgrades don't work in wheezy

s with a "Version:" field of "0.79.5+wheezy2"? Regards, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1019-1] phpldapadmin security update

for administering LDAP servers. For Debian 7 "Wheezy", this issue has been fixed in phpldapadmin version 1.2.2-5+deb7u1. We recommend that you upgrade your phpldapadmin packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted phpldapadmin 1.2.2-5+deb7u1 (source all) into oldoldstable

hanged-By: Chris Lamb <la...@debian.org> Description: phpldapadmin - web based interface for administering LDAP servers Closes: 867719 Changes: phpldapadmin (1.2.2-5+deb7u1) wheezy-security; urgency=high . * CVE-2016-11107: Fix a cross-site scripting (XSS) vulnerabily in entry_chooser.

Re: Fwd: phpldapadmin_1.2.2-5+deb7u1_amd64.changes REJECTED

3 times ;-) Regards, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Fwd: phpldapadmin_1.2.2-5+deb7u1_amd64.changes REJECTED

ng message: […] FYI for phpldapadmin I worked-around this by building with --build=source,all and re-uploading. Best wishes, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 1017-1] mpg123 security update

by a heap-based buffer over-read in the "convert_latin1" function. For Debian 7 "Wheezy", this issue has been fixed in mpg123 version 1.14.4-1+deb7u2. We recommend that you upgrade your mpg123 packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la..

Re: unattended upgrades don't work in wheezy

Hi Matus, > so, can we expect updated package to appear in wheezy soon? > should I bug someone or is anyone taking a look at it? Is this https://bugs.debian.org/762965 ? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted nginx 1.2.1-2.2+wheezy4+deb7u1 (source all amd64) into oldoldstable

: source all amd64 Version: 1.2.1-2.2+wheezy4+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Kartik Mistry <kar...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: nginx - small, powerful, scalable web/proxy server nginx-common - small, powerful, scalab

[SECURITY] [DLA 1024-1] nginx security update

Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAllnK9YACgkQHpU+J9Qx HliX5A//dPavm2srbLpx/CUhR2fJoy3fOK7+tbVc/5o/fNMCZD2mrHnvBKvxjoDP 6MDpgHdaqwRYh5hX

Re: Wheezy update of nginx?

Hi Christos, > Chris beat me to it and uploaded 1.2.1-2.2+wheezy4+deb7u1, thanks! Whoops, sorry for not replying to the -lts mail! I hope we didn't duplicate any work. Best wishes, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / ch

Accepted sqlite3 3.7.13-1+deb7u4 (source all amd64) into oldoldstable

Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <g...@debian.hu> Changed-By: Chris Lamb <la...@debian.org> Description: lemon - LALR(1) Parser Generator for C or C++ libsqlite3-0 - SQLite 3 shared library libsqlite3-0-dbg - SQLite 3 debugging symbols libsqlite3-dev - SQLite 3

Wheezy update of tcpdump?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of tcpdump updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of vim?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of vim updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

[SECURITY] [DLA 1018-1] sqlite3 security update

. The getNodeSize function in ext/rtree/rtree.c mishandled undersized RTree blobs in a specially-crafted database, For Debian 7 "Wheezy", this issue has been fixed in sqlite3 version 3.7.13-1+deb7u4. We recommend that you upgrade your sqlite3 packages. Regards, - -- ,''`. : :' :

[SECURITY] [DLA 1033-1] memcached security update

-8705. For Debian 7 "Wheezy", this issue has been fixed in memcached version 1.4.13-0.2+deb7u3. We recommend that you upgrade your memcached packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP

Wheezy update of libclamunrar?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of libclamunrar updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

[SECURITY] [DLA 1015-1] libgcrypt11 security update

leak <https://eprint.iacr.org/2017/627> For Debian 7 "Wheezy", this issue has been fixed in libgcrypt11 version 1.5.0-5+deb7u6. We recommend that you upgrade your libgcrypt11 packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@de

Accepted libgcrypt11 1.5.0-5+deb7u6 (source all amd64) into oldoldstable

: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-ma...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libgcrypt11 - LGPL Crypto library - runtime library libgcrypt11-dbg - LGPL Crypto library - debugger files libgcrypt11-dev - LGPL Cr

[SECURITY] [DLA 1014-1] libclamunrar security update

eb7u2. We recommend that you upgrade your libclamunrar packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlldWl8ACgkQHpU+J9Qx HliqUBAAruZEl0SjpIAjr

Wheezy update of giflib?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of giflib updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Wheezy update of cacti?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of cacti updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Wheezy update of curl?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of curl updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Wheezy update of minidjvu?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of minidjvu updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Re: Debconf 2017 LTS BoF Summary

. The other thing in this is that regressions, whilst obviously breaking people's setups and that's bad in itself (!), they have an additional embarrassment component given the funding model. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Wheezy update of libvorbis?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of libvorbis updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS

[SECURITY] [DLA 1049-1] libsndfile security update

Regards, - -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlmIXQYACgkQHpU+J9Qx HljHoA/9GbDPSfYQdHt4ely6z6CwEwpM0giq+ixPecIlQxq9qVsPxBkbz2DEmEIT K4ZqR

Re: Wheezy update of libvorbis?

3 https://security-tracker.debian.org/tracker/CVE-2017-11735 Regards, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted libsndfile 1.0.25-9.1+deb7u4 (source amd64) into oldoldstable

Lopo <er...@mega-nerd.com> Changed-By: Chris Lamb <la...@debian.org> Description: libsndfile1 - Library for reading/writing audio files libsndfile1-dev - Development files for libsndfile; a library for reading/writing a sndfile-programs - Sample programs that use libsndfile Closes: 86

Re: LTS team Bof at Debconf

Hi Guido, > Would there be interest in a BoF discussing LTS and security team > workflow questions? Interest here... (if only for us to ensure we all meet IRL!) Best wishes, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted strongswan 4.5.2-1.5+deb7u10 (source all amd64) into oldoldstable

Distribution: wheezy-security Urgency: high Maintainer: Rene Mayrhofer <rm...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libstrongswan - strongSwan utility and crypto library strongswan - IPsec VPN solution metapackage strongswan-dbg - strongSwan library

[SECURITY] [DLA 1059-1] strongswan security update

wan-vulnerability-(cve-2017-11185).html> For Debian 7 "Wheezy", this issue has been fixed in strongswan version 4.5.2-1.5+deb7u10. We recommend that you upgrade your strongswan packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org /

Wheezy update of openvpn?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of openvpn updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Accepted lxterminal 0.1.11-4+deb7u1 (source amd64) into oldstable

deb...@lists.lxde.org> Changed-By: Chris Lamb <la...@debian.org> Description: lxterminal - LXDE terminal emulator lxterminal-dbg - LXDE terminal emulator (debug) Closes: 862098 Changes: lxterminal (0.1.11-4+deb7u1) wheezy-security; urgency=high . * CVE-2016-10369: Prevent local users t

Wheezy update of rzip?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of rzip updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might start

Wheezy update of binutils?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of binutils updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of eglibc?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of eglibc updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Accepted sane-backends 1.0.22-7.4+deb7u1 (source amd64) into oldstable

: Julien BLACHE <jbla...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libsane- API library for scanners libsane-common - API library for scanners -- documentation and support files libsane-dbg - API development library for scanners [debug symbols] libsa

Wheezy update of libxml2?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of libxml2 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

[SECURITY] [DLA 940-1] sane-backends security update

sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet. For Debian 7 "Wheezy", this issue has been fixed in sane-backends version 1.0.22-7.4+deb7u1. We recommend that you upgrade your sane-backends packages. Regards, - -- ,''`. : :' :

[SECURITY] [DLA 943-1] deluge security update

heezy", this issue has been fixed in deluge version 1.3.3-2+nmu1+deb7u2. We recommend that you upgrade your deluge packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP

Accepted deluge 1.3.3-2+nmu1+deb7u2 (source all) into oldstable

-security Urgency: high Maintainer: Cristian Greco <crist...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: deluge - bittorrent client written in Python/PyGTK deluge-common - bittorrent client written in Python/PyGTK (common files) deluge-console - bittorrent cl

[SECURITY] [DLA 935-1] lxterminal security update

environment. This was caused by an insecure use of temporary files for a socket file. For Debian 7 "Wheezy", this issue has been fixed in lxterminal version 0.1.11-4+deb7u1. We recommend that you upgrade your lxterminal packages. Regards, - -- ,''`. : :' :

Re: Claimed issues in data/dla-needed.txt (bind9, icu, jasper)

ad claimed since April 17th. :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of openvpn?

egards, -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 999-1] openvpn security update

eb7u5. We recommend that you upgrade your openvpn packages. Regards, - -- ,''`. : :' : Chris Lamb, Debian Project Leader `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAllMLksACgkQHpU+J

Swapping two

Dear Ola, I hope this finds you well. ``org/lts-frontdesk.2017.txt`` has: From 02-10 to 08-10:Ola Lundqvist <o...@debian.org> From 09-10 to 15-10:Chris Lamb <ch...@chris-lamb.co.uk> I was wondering if we could swap these two weeks? No worries if not…

[SECURITY] [DLA 959-1] libical security update

attackers could cause a denial of service and possibly read heap memory via a specially crafted .ICS file. For Debian 7 "Wheezy", this issue has been fixed in libical version 0.48-2+deb7u1. We recommend that you upgrade your libical packages. Regards, - -- ,''`. : :' :

Accepted libical 0.48-2+deb7u1 (source amd64) into oldstable

org> Changed-By: Chris Lamb <la...@debian.org> Description: libical-dbg - debugging symbols for libical libical-dev - iCalendar library implementation in C (development) libical0 - iCalendar library implementation in C (runtime) Closes: 852034 860451 Changes: libical (0.48-2+deb7u1) whe

Re: Swapping two

Ola Lundqvist wrote: > Sure. No problem. Please update the file. I have updated my calendar. Done; many thanks :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 949-1] miniupnpc security update

a denial of service attack. For Debian 7 "Wheezy", this issue has been fixed in miniupnpc version 1.5-2+deb7u2. We recommend that you upgrade your miniupnpc packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: heads-up: stretch release and changes to security-tracker

Salvatore Bonaccorso wrote: > I plan to work on the relvant changes to the security tracker for once > stretch is released. Can you briefly explain what changes you are refering to? Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: heads-up: stretch release and changes to security-tracker

ng the Makefile and last but not > least the bin/gen-{DSA,DLA} changes, which need to be done once there > is a new stable release. Thanks for the explanation; pretty much what I was thinking but good to have it confirmed :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: CVE-2015-9059 (Accepted picocom 1.7-1+deb7u1 (source amd64) into oldstable)

split.[ch]. Some of the run_cmd callsites were also different in the 1.7 version so it's not identical. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: CVE-2015-9059 (Accepted picocom 1.7-1+deb7u1 (source amd64) into oldstable)

Chris Lamb wrote: > No :) As in, there are no other changes. (Sorry, removed too much of the quote context...) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: CVE-2015-9059 (Accepted picocom 1.7-1+deb7u1 (source amd64) into oldstable)

Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Re: Wheezy update of ca-certificates?

.org/news/846121 Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

[SECURITY] [DLA 974-1] picocom security update

heezy", this issue has been fixed in picocom version 1.7-1+deb7u1. We recommend that you upgrade your picocom packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP

Accepted yodl 3.00.0-6+deb7u1 (source amd64 all) into oldstable

hanged-By: Chris Lamb <la...@debian.org> Description: yodl - Your Own Document Language (Yodl) is a pre-document language yodl-doc - Documenation for Your Own Document Language (Yodl) Changes: yodl (3.00.0-6+deb7u1) wheezy-security; urgency=high . * CVE-2016-10375: Correct buf

[SECURITY] [DLA 976-1] yodl security update

7 "Wheezy", this issue has been fixed in yodl version 3.00.0-6+deb7u1. We recommend that you upgrade your yodl packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiE

[SECURITY] [DLA 972-1] openldap security update

to search the directory could crash slapd by issuing a search requesting a "Paged Results" value set to zero. For Debian 7 "Wheezy", this issue has been fixed in openldap version 2.4.31-2+deb7u3. We recommend that you upgrade your openldap packages. Regards, - -- ,''

[SECURITY] [DLA 985-1] libsndfile security update

AIFF ("Audio Interchange File Format") file could result in an out-of-bounds memory read. For Debian 7 "Wheezy", this issue has been fixed in libsndfile version 1.0.25-9.1+deb7u3. We recommend that you upgrade your libsndfile packages. Regards, - -- ,''`. :

Accepted libsndfile 1.0.25-9.1+deb7u3 (source amd64) into oldstable

Lopo <er...@mega-nerd.com> Changed-By: Chris Lamb <la...@debian.org> Description: libsndfile1 - Library for reading/writing audio files libsndfile1-dev - Development files for libsndfile; a library for reading/writing a sndfile-programs - Sample programs that use libsndfile Closes: 86

Accepted expat 2.1.0-1+deb7u5 (source amd64) into oldoldstable

Maintainer: Laszlo Boszormenyi (GCS) <g...@debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: expat - XML parsing C library - example application lib64expat1 - XML parsing C library - runtime library (64bit) lib64expat1-dev - XML parsing C library - development kit (64bit

Wheezy update of jetty?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of jetty updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

[SECURITY] [DLA 990-1] expat security update

"Wheezy", this issue has been fixed in expat version 2.1.0-1+deb7u5. We recommend that you upgrade your expat packages. Regards, - -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- -BEGIN PGP

Wheezy update of jetty8?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of jetty8 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Wheezy update of kdepim?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of kdepim updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team might

Wheezy update of libquicktime?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of libquicktime updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Wheezy update of libsndfile?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of libsndfile updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Accepted libxstream-java 1.4.2-1+deb7u2 (source all) into oldstable

ain...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libxstream-java - Java library to serialize objects to XML and back again Closes: 861521 Changes: libxstream-java (1.4.2-1+deb7u2) wheezy-security; urgency=high . * CVE-2016-7957: Prevent a remote

Wheezy update of mp3gain?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of mp3gain updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

Wheezy update of trafficserver?

and/or test the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of trafficserver updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member

Re: [SECURITY] [DLA 1096-1] wordpress-shibboleth security update

right thing using the PHP CLI. Alas, I did not setup a complete wheezy Wordpress installation with a Shibboleth integration to test this, so this would be only "gap" if there was one. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Accepted wordpress-shibboleth 1.4-2+deb7u1 (source all) into oldoldstable

.li> Changed-By: Chris Lamb <la...@debian.org> Description: wordpress-shibboleth - Shibboleth plugin for WordPress Closes: 874416 Changes: wordpress-shibboleth (1.4-2+deb7u1) wheezy-security; urgency=high . * CVE-2017-14313: Fix an XSS vulnerability due to improper use of a

Wheezy update of emacs23?

the updated package before it gets released. You can also opt-out from receiving future similar emails in your answer and then the LTS Team will take care of emacs23 updates for the LTS releases. Thank you very much. Chris Lamb, on behalf of the Debian LTS team. PS: A member of the LTS team

<    1   2   3   4   5   6   7   8   9   10   >