Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
Hi,
node-handlebars is vulnearable to prototype pollution (CVE-2019-19919).
This patch is exactly the one of upstream.
Cheers,
Xavier
diff --git a/debian/changelog
Processing changes file: gnutls28_3.6.7-4+deb10u1_armhf.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_arm64.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_armel.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_armhf.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_all.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_amd64.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_i386.changes
ACCEPT
Processing changes file: linux-latest_105+deb10u2_s390x.changes
ACCEPT
On Mon, 2019-12-30 at 00:06 +0100, Salvatore Bonaccorso wrote:
> Hi Adam,
>
> On Sun, Dec 29, 2019 at 11:43:48AM +, Adam D Barratt wrote:
> > package release.debian.org
> > tags 947254 = buster pending
> > thanks
> >
> > Hi,
> >
> > The upload referenced by this bug report has been flagged
Hi Adam,
On Sun, Dec 29, 2019 at 11:43:48AM +, Adam D Barratt wrote:
> package release.debian.org
> tags 947254 = buster pending
> thanks
>
> Hi,
>
> The upload referenced by this bug report has been flagged for acceptance into
> the proposed-updates queue for Debian buster.
>
> Thanks
Processing changes file: linux-latest_105+deb10u2_source.changes
ACCEPT
On Tue, Dec 03, 2019 at 11:30:44AM +0300, Dmitry Shachnev wrote:
> Dear Release team,
>
> On Fri, Nov 29, 2019 at 11:10:16PM +0300, Dmitry Shachnev wrote:
> > This update fixes bug #919504 that is also known as #929286, #931860,
> > #933278 and #945147.
> >
> > The debdiff is attached. Please see
Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu
Hi
Attached is the proposed debdiff for an sssd upload for stretch
(originally it was planned to release a DSA for it, but in meanwhile
it has passed enough time that it does not
Processing changes file: x2goclient_4.0.5.2-2+deb9u1_mips.changes
ACCEPT
Processing changes file: x2goclient_4.0.5.2-2+deb9u1_mips64el.changes
ACCEPT
Processing changes file: x2goclient_4.0.5.2-2+deb9u1_mipsel.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb9u1_amd64.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb9u1_arm64.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb9u1_armel.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb9u1_armhf.changes
ACCEPT
Processing
Processing changes file: tightvnc_1.3.9-9+deb9u1_i386.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb9u1_s390x.changes
ACCEPT
Processing changes file: x2goclient_4.0.5.2-2+deb9u1_all.changes
ACCEPT
Processing changes file: x2goclient_4.0.5.2-2+deb9u1_s390x.changes
ACCEPT
Paul Gevers writes:
> On 21-11-2019 13:59, Paul Gevers wrote:
>> [Disclaimer: the words below are as a member of the release team, but
>> not necessarily those of the team. We haven't discussed this yet.]
> We have had a discussion, and there were no objections against my vision
> below.
>> I
Processing changes file: x2goclient_4.1.2.1-2+deb10u1_mipsel.changes
ACCEPT
Processing changes file: x2goclient_4.1.2.1-2+deb10u1_mips.changes
ACCEPT
Processing changes file: x2goclient_4.1.2.1-2+deb10u1_mips64el.changes
ACCEPT
Processing changes file: x2goclient_4.1.2.1-2+deb10u1_armel.changes
ACCEPT
Processing changes file: openjpeg2_2.3.0-2+deb10u1_mipsel.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb10u1_armel.changes
ACCEPT
Processing changes file: tightvnc_1.3.9-9+deb10u1_armhf.changes
ACCEPT
Processing changes file: x2goclient_4.1.2.1-2+deb10u1_i386.changes
ACCEPT
Processing changes file: openjpeg2_2.3.0-2+deb10u1_arm64.changes
ACCEPT
Processing changes file: openjpeg2_2.3.0-2+deb10u1_armel.changes
ACCEPT
Processing changes file: openjpeg2_2.3.0-2+deb10u1_armhf.changes
ACCEPT
Processing changes file: openjpeg2_2.3.0-2+deb10u1_i386.changes
ACCEPT
Processing changes file: debian-lan-config_0.23+deb9u1_amd64.changes
ACCEPT
Processing changes file: freeimage_3.17.0+ds1-5+deb9u1_amd64.changes
ACCEPT
Processing changes file: freeimage_3.17.0+ds1-5+deb9u1_arm64.changes
ACCEPT
Processing changes file:
Processing commands for cont...@bugs.debian.org:
> package release.debian.org
Limiting to bugs with field 'package' containing at least one of
'release.debian.org'
Limit currently set to 'package':'release.debian.org'
> tags 947204 = stretch pending
Bug #947204 [release.debian.org] stretch-pu:
package release.debian.org
tags 947204 = stretch pending
thanks
Hi,
The upload referenced by this bug report has been flagged for acceptance into
the proposed-updates queue for Debian stretch.
Thanks for your contribution!
Upload details
==
Package: x2goclient
Version:
package release.debian.org
tags 947255 = stretch pending
thanks
Hi,
The upload referenced by this bug report has been flagged for acceptance into
the proposed-updates queue for Debian stretch.
Thanks for your contribution!
Upload details
==
Package: tightvnc
Version:
Processing commands for cont...@bugs.debian.org:
> package release.debian.org
Limiting to bugs with field 'package' containing at least one of
'release.debian.org'
Limit currently set to 'package':'release.debian.org'
> tags 947255 = stretch pending
Bug #947255 [release.debian.org] stretch-pu:
Your message dated Sun, 29 Dec 2019 13:34:57 +0100
with message-id
and subject line Re: Bug#947676: RM: qt4-x11/4:4.8.7+dfsg-19
has caused the Debian Bug report #947676,
regarding RM: qt4-x11/4:4.8.7+dfsg-19
to be marked as done.
This means that you claim that the problem has been dealt with.
If
Hi!
El dom., 29 dic. 2019 08:40, Moritz Mühlenhoff escribió:
> On Sun, Dec 29, 2019 at 12:17:11PM +0100, Paul Gevers wrote:
> > Hi Lisandro, Moritz,
> >
> > On 29-12-2019 11:26, Moritz Mühlenhoff wrote:
> > >> Hi! As you know we are doing an effort to remove qt4-x11 from the
> archive. The
> >
Processing changes file: debian-lan-config_0.25+deb10u1_amd64.changes
ACCEPT
Processing changes file: freeimage_3.18.0+ds2-1+deb10u1_amd64.changes
ACCEPT
Processing changes file: freeimage_3.18.0+ds2-1+deb10u1_arm64.changes
ACCEPT
Processing changes file:
Processing commands for cont...@bugs.debian.org:
> package release.debian.org
Limiting to bugs with field 'package' containing at least one of
'release.debian.org'
Limit currently set to 'package':'release.debian.org'
> tags 947254 = buster pending
Bug #947254 [release.debian.org] buster-pu:
Processing commands for cont...@bugs.debian.org:
> package release.debian.org
Limiting to bugs with field 'package' containing at least one of
'release.debian.org'
Limit currently set to 'package':'release.debian.org'
> tags 947201 = buster pending
Bug #947201 [release.debian.org] buster-pu:
package release.debian.org
tags 947254 = buster pending
thanks
Hi,
The upload referenced by this bug report has been flagged for acceptance into
the proposed-updates queue for Debian buster.
Thanks for your contribution!
Upload details
==
Package: tightvnc
Version:
package release.debian.org
tags 947201 = buster pending
thanks
Hi,
The upload referenced by this bug report has been flagged for acceptance into
the proposed-updates queue for Debian buster.
Thanks for your contribution!
Upload details
==
Package: x2goclient
Version:
package release.debian.org
tags 942575 = buster pending
thanks
Hi,
The upload referenced by this bug report has been flagged for acceptance into
the proposed-updates queue for Debian buster.
Thanks for your contribution!
Upload details
==
Package: openjpeg2
Version:
Processing commands for cont...@bugs.debian.org:
> package release.debian.org
Limiting to bugs with field 'package' containing at least one of
'release.debian.org'
Limit currently set to 'package':'release.debian.org'
> tags 942575 = buster pending
Bug #942575 [release.debian.org] buster-pu:
On Mon, 2019-12-23 at 21:58 +0100, Sebastian Andrzej Siewior wrote:
> On 2019-12-10 23:46:47 [+0100], To sub...@bugs.debian.org wrote:
> > It is unstable for 10 days now. It did not migrate to testing due
> > to a
> > debci regression in pg-snakeoil. I opened a bug against pg-
> > snakeoil, I
> >
On Sun, Dec 29, 2019 at 12:17:11PM +0100, Paul Gevers wrote:
> Hi Lisandro, Moritz,
>
> On 29-12-2019 11:26, Moritz Mühlenhoff wrote:
> >> Hi! As you know we are doing an effort to remove qt4-x11 from the archive.
> >> The
> >> next big step is removing it from testing.
> >>
> >> If my data is
Hi Lisandro, Moritz,
On 29-12-2019 11:26, Moritz Mühlenhoff wrote:
>> Hi! As you know we are doing an effort to remove qt4-x11 from the archive.
>> The
>> next big step is removing it from testing.
>>
>> If my data is accurate the only package holding qt4-x11 in testing is scim,
>> which I have
On Sat, Dec 28, 2019 at 08:59:45PM -0300, Lisandro Damián Nicanor Pérez Meyer
wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: rm
>
> Hi! As you know we are doing an effort to remove qt4-x11 from the archive. The
> next big step
35 matches
Mail list logo
