External check

2013-05-21 Thread Raphael Geissert
CVE-2013-2053: RESERVED CVE-2013-2065: RESERVED CVE-2013-2072: RESERVED -- The output might be a bit terse, but the above ids are known elsewhere, check the references in the tracker. The second part indicates the status of that id in the tracker at the moment the script was run. -- To

Re: security-tracker now on https?

2013-05-21 Thread Stephen Gran
Hi, This one time, at band camp, Florian Weimer said: * Peter Palfrader: The solution I'm favouring right now is to get a single *.debian.org wildcard from the cartell and spread it far and wide. The contract terms usually do not allow this. We could ask StartSSL or some other CA if

Re: CVE-2010-3205 affects textpattern package

2013-05-21 Thread Steven Chamberlain
On 21/05/13 22:09, Moritz Muehlenhoff wrote: Thanks, I've updated the security tracker! Okay, thank you! I couldn't say for sure the exploit given the CVE is real, and there's very little interest in the package any more (orphaned, low popcon, removed); but I thought it is better to mark it as

Re: CVE-2010-3205 affects textpattern package

2013-05-21 Thread Moritz Mühlenhoff
On Tue, May 21, 2013 at 10:16:25PM +0100, Steven Chamberlain wrote: On 21/05/13 22:09, Moritz Muehlenhoff wrote: Thanks, I've updated the security tracker! Okay, thank you! I couldn't say for sure the exploit given the CVE is real, and there's very little interest in the package any more

Re: CVE-2010-3205 affects textpattern package

2013-05-21 Thread Moritz Muehlenhoff
On Mon, May 20, 2013 at 02:58:40PM +0100, Steven Chamberlain wrote: Hi, CVE-2010-3205 in the Textpattern CMS was marked 'NOT-FOR-US', but there is a package of the affected version 4.2.0 in oldstable: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3205 The patch tracker and