Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-10-01 Thread Michael Gilbert
On Mon, Oct 1, 2012 at 12:34 PM, Arne Wichmann wrote: > Hi, > > First: Could somebody perhaps enlighten me why all these issues show up > as unimportant in [2] but up to medium in the separate pages (e.g. [3]) That seems to be a tracker bug (possibly involving [squeeze],etc release-specific tags).

Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-10-01 Thread Arne Wichmann
Hi, First: Could somebody perhaps enlighten me why all these issues show up as unimportant in [2] but up to medium in the separate pages (e.g. [3]) begin quotation from Michael Gilbert (in ): > On Mon, Sep 24, 2012 at 4:27 AM, Arne Wichmann wrote: > > begin quotation from Michael Gilbert (in

Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-09-24 Thread Adam D. Barratt
On Mon, 2012-09-24 at 12:39 -0400, Michael Gilbert wrote: > the distribution should be stable-proposed-updates rather than stable, "stable"'s fine. (As would be "proposed-updates" and "squeeze".) Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subjec

Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-09-24 Thread Michael Gilbert
On Mon, Sep 24, 2012 at 4:27 AM, Arne Wichmann wrote: > begin quotation from Michael Gilbert (in ): >> On Fri, Sep 21, 2012 at 11:40 AM, Arne Wichmann wrote: >> > Ok, I just created one more fixed version of python2.6 for my own use. >> > Whoever is interested can find it at [1] for the time bei

Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-09-24 Thread Arne Wichmann
begin quotation from Michael Gilbert (in ): > On Fri, Sep 21, 2012 at 11:40 AM, Arne Wichmann wrote: > > Ok, I just created one more fixed version of python2.6 for my own use. > > Whoever is interested can find it at [1] for the time being. If anybody has > > comments or improvements I am also in

Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-09-21 Thread Michael Gilbert
On Fri, Sep 21, 2012 at 11:40 AM, Arne Wichmann wrote: > Ok, I just created one more fixed version of python2.6 for my own use. > Whoever is interested can find it at [1] for the time being. If anybody has > comments or improvements I am also interested. Would you mind attaching a debdiff so we ca

CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-09-21 Thread Arne Wichmann
Ok, I just created one more fixed version of python2.6 for my own use. Whoever is interested can find it at [1] for the time being. If anybody has comments or improvements I am also interested. [1] http://www.saar.de/~aw/debian/python2.6_2.6.6-8.aw2.dsc http://www.saar.de/~aw/debian/python2.6_