Re: ftp.debian.org: remove armel from forky and unstable

2025-09-27 Thread Sylvain Beucler
e it would make more sense to switch to that? Cheers! Sylvain

Re: BerkeleyDB CVEs

2025-09-26 Thread Sylvain Beucler
uot;Unspecified vulnerability ... via unknown vectors ..." Contact Oracle, or BlackDuck since they appear to have information we don't :) Cheers! Sylvain

Re: Testmail

2025-03-22 Thread sylvain
Ok Le 22 mars 2025 10:07:15 GMT+01:00, h...@tutamail.com a écrit : >Just for a check. Anyone who can reply by "ok"?

Re: Recording for my DebConf talk about CVEs

2024-08-30 Thread Sylvain Beucler
ng. In practice I find the opposite: I often spend little DLA time backporting (especially if the change was already identified, backports are most often trivial), and the vast majority of my time actually testing the changes, including manual tests targeting each CVE-impacted area :) Cheers! Sylvain Beucler Debian LTS Team

Re: Handle jq CVE-2023-49355, which is equal to CVE-2023-50246

2023-12-19 Thread Sylvain Beucler
? [0] https://security-tracker.debian.org/tracker/source-package/jq [1] https://github.com/jqlang/jq/issues/2986 [2] https://bugs.debian.org/1058763 Ideally you can contact MITRE through https://cveform.mitre.org/ to mark CVE-2023-49355 as a duplicate. Cheers! Sylvain Beucler Debian LTS Team

Re: Debian Security Tracker - `no-dsa` Clarification

2022-11-21 Thread Sylvain Beucler
e the triage is meant to guide the Debian Security / LTS Teams' actions only, and is not particularly fine-grained. Cheers! Sylvain Beucler Debian LTS Team On 21/11/2022 11:01, Hadas Bloom wrote: My name is Hadas, I'm in the Snyk Security Group. I've been in contact with you a whil

Re: What is the best free HIDS for Debian

2022-05-16 Thread Sylvain
root 644 Greetings, Sylvain

Re: Fwd: Re: Fwd: What is the best free HIDS for Debian

2022-05-14 Thread Sylvain
Hello, Le 13/05/2022 à 20:30, Elmar Stellnberger a écrit : From what Sylvain has answered me, she didn´t do that. As said the mail header I got also did not show anything like that. I must precise that I'm a man. "Sylvain" is for boys and "Sylvie" for girls. :)

Re: What is the best free HIDS for Debian

2022-05-13 Thread Sylvain
very good. I'm french and I do really have problems learning over languages. So sorry if I'm not very clear and if I use words in an unusual way... Best regards, Sylvain

Re: What is the best free HIDS for Debian

2022-05-08 Thread Sylvain
"crontab" in a safe place and then reinstall the package cron. The new "crontab" file seems to be the same as the previous since the md5 are equal, but debcheckroot still throws an error for it... Regards Sylvain Le 06/05/2022 à 16:20, Elmar Stellnberger a écrit : Dear Sy

Re: What is the best free HIDS for Debian

2022-05-04 Thread Sylvain
I'll try to fix them. Best regards, Sylvain

Re: What is the best free HIDS for Debian

2022-05-03 Thread Sylvain
Thank you for your responses! Tripwire: - - It throws a segfault error while scaning on one PC. No errors mentioned in log files. - on another machine tripwire worked fine for a long time but now I have this error while scaning: *** Fatal exception: basic_string::_M_create

What is the best free HIDS for Debian

2022-05-02 Thread Sylvain
Hello everyone ! I unsuccessfully tried Tripwire, Aide, Integrit and now OSSEC and OSSEC+. All these softs throw errors while running or compiling on my Debian 11.3... So can you tell me if there is another free HostBase Intrusion Detection System. Sylvain

Re: FYI php disable_function bypass bug

2021-10-09 Thread Sylvain Beucler
y release a new fixed version themselves. Thanks for the info. Cheers! Sylvain Beucler Debian LTS Team

Re: no-dsa for Samba CVEs in Debian.

2021-05-19 Thread Sylvain Beucler
n LTS there is focus on developing automated testing, e.g. https://salsa.debian.org/lts-team/lts-extra-tasks/-/issues/1 so I believe we can contribute some man-power on improving Debian Samba testing, not just in LTS but generally, if there's interest. Cheers! Sylvain

Re: Is this the right place to discuss no-dsa choices?

2021-05-17 Thread Sylvain Beucler
LTS (stretch/oldstable) specifically, which is extended support and is usually performed by the LTS team without involving the package maintainers, you may want to reach debian-...@lists.debian.org. Cheers! Sylvain Beucler Debian LTS Team On Wed, May 12, 2021 at 07:34:56PM +1200, Andrew Bartlett w

Re: Revert "CVE-2019-15690/libvncserver: reference embedded copies in italc/ssvnc/tightvnc/veyon/vncsnapshot"

2020-03-18 Thread Sylvain Beucler
lVNC codebase). Last I marked the version of veyon that is already fixed in unstable. This clearly isn't simply "copying over" the packages from embedded-code-copies (which I had incidentally just updated as it was incomplete). Let me know if there's something I missed. Cheers! Sylvain

Re: Status of php-mbstring vs. libonig

2019-11-26 Thread Sylvain Beucler
Hi, On 25/11/2019 15:20, Salvatore Bonaccorso wrote: > On Mon, Nov 25, 2019 at 11:50:00AM +0100, Sylvain Beucler wrote: >> On 22/11/2019 21:23, Sylvain Beucler wrote: >>> I see in 'embedded-code-copies': >>> >>>   libonig >>>       - p

Re: Status of php-mbstring vs. libonig

2019-11-25 Thread Sylvain Beucler
Hi, On 22/11/2019 21:23, Sylvain Beucler wrote: > I see in 'embedded-code-copies': > >   libonig >       - php5 5.3.2-1 (embed) > > (i.e. from 2010) > > Jessie seems to properly link to libonig (dependency of e.g. > libapache2-mod-php5). > > Stretch

Status of php-mbstring vs. libonig

2019-11-22 Thread Sylvain Beucler
requested a CVE). Do you know what the current situation is supposed to be? Cheers! Sylvain

Re: Verified Boot, Secure Boot, dm-verity, debcheckroot

2019-11-16 Thread Sylvain Beucler
course build dependencies. For the compiler it is recommended to set SOURCE_DATE_EPOCH to trigger deterministic behavior. https://reproducible-builds.org/docs/ has a lot more on this :) Cheers! Sylvain

gnutls/nettle (CVE-2018-16868/CVE-2018-16869)

2019-03-04 Thread Sylvain Beucler
ternatively we could upgrade nettle (libnettle4->libnettle6) which doesn't break gnutls28's test suite, though it's likely to introduce other issues (e.g. #789119). Thoughts? Cheers! Sylvain

Re: handling private keys

2005-06-28 Thread Sylvain Soliman
If you have such hardware, all the crypto related stuff could be done on the chip without any software access (even from root) until someone gets the admin password of the chip. Best, Sylvain. -- Sylvain Soliman <[EMAIL PROTECTED]> GnuPG Public Key: 0x0F53AF99 Secr

Re: Crypto File System-Problems Creating One

2005-06-06 Thread Sylvain Soliman
with other cypers? Best, Sylvain. -- Sylvain Soliman <[EMAIL PROTECTED]> GnuPG Public Key: 0x0F53AF99 Secretaire adjoint Fede. Francaise de Go http://ffg.jeudego.org/ Co-mainteneur de PilotGOne http://minas.ithil.org/pilotgone/ Page personelle

unsubscribe

2004-05-12 Thread Sylvain Viollat
-- [EMAIL PROTECTED] Support Professionnel Claranet France

unsubscribe

2004-05-12 Thread Sylvain Viollat
-- [EMAIL PROTECTED] Support Professionnel Claranet France -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Have I been hacked?

2003-05-07 Thread Sylvain Soliman
n > team1pts/0blue99.ex.ac.uk Wed May 7 13:21 - 13:57 (00:35) > > I have run chkrootkit but nothing was found. > > I have never had this before. Am I being paranoid or is someone trying to > cover up their tracks? logrotate? Sylvain. -- Sylvain Soliman <

Re: Attachment handling in Mutt

2002-08-08 Thread Sylvain Soliman
owever, I'm not sure what kind of risk there is in not showing an attachment... Sylvain. -- Sylvain Soliman <[EMAIL PROTECTED]>GnuPG Public Key: 0x0F53AF99 Secretaire adjoint - Fede. Francaise de Go http://ffg.jeudego.org/ffg-f.html Co-mainteneur de PilotGOnehttp:/