Re: Gaim remote overflows (12x)

2004-01-27 Thread Adam D. Barratt
On Tue, 2004-01-27 at 19:07, Daniel van Eeden wrote: [r.e. gaim 0.75-2 being uploaded to sid] How about the stable version? No idea, I'm afraid. Your best bet would be to ask the maintainer (yes, I noticed the CC on the first mail) or wait a day or two and see if a DSA appears. Adam -- To

Re: rbl's status?

2004-06-13 Thread Adam D. Barratt
On Sun, 2004-06-13 at 18:11, Dale Amon wrote: On Sun, Jun 13, 2004 at 07:46:15PM +0300, Vassilii Khachaturov wrote: I believe it's very old news, smth like 4-5 years or so. I'd not thought about it because they are still used in the examples all over specs.txt. Perhaps I should email

Re: rbl's status?

2004-06-13 Thread Adam D. Barratt
On Sun, 2004-06-13 at 18:48, Dale Amon wrote: On Sun, Jun 13, 2004 at 06:33:13PM +0100, Adam D. Barratt wrote: I'd guess that was easier than fixing all the references to the RBL[+], RSS and DUL littered through the documentation. Point taken... but then again, who on Earth actually re

Re: chkrootkit and lkm

2003-11-25 Thread Adam D. Barratt
On Tue, 2003-11-25 at 20:18, Johannes Graumann wrote: [...] I was just running 'chkrootkit' and came across this warning: Checking `lkm'... You have 4 process hidden for ps command Warning: Possible LKM Trojan installed [...] I then went ahead and manually checked the output of 'ls -a

Re: Uhm, so, what happened...?

2003-11-26 Thread Adam D. Barratt
Michel Verdier wrote, Wednesday, November 26, 2003 4:39 PM [EMAIL PROTECTED] (John Keimel) a écrit : We've still got many hours of Wednesday left and if the people in charge of this are like many hackers I know, it'll be near the end of the day before anything would be posted. Which

Re: Gaim remote overflows (12x)

2004-01-27 Thread Adam D. Barratt
On Tue, 2004-01-27 at 18:40, Daniel van Eeden wrote: Debian versions of gaim patched? http://security.e-matters.de/advisories/012004.html gaim 0.75-2 was uploaded a couple of hours ago. Changes: gaim (1:0.75-2) unstable; urgency=medium . * Security update to fix 12 possible buffer

Re: Gaim remote overflows (12x)

2004-01-27 Thread Adam D. Barratt
On Tue, 2004-01-27 at 19:07, Daniel van Eeden wrote: [r.e. gaim 0.75-2 being uploaded to sid] How about the stable version? No idea, I'm afraid. Your best bet would be to ask the maintainer (yes, I noticed the CC on the first mail) or wait a day or two and see if a DSA appears. Adam

Re: rbl's status?

2004-06-13 Thread Adam D. Barratt
On Sun, 2004-06-13 at 18:11, Dale Amon wrote: On Sun, Jun 13, 2004 at 07:46:15PM +0300, Vassilii Khachaturov wrote: I believe it's very old news, smth like 4-5 years or so. I'd not thought about it because they are still used in the examples all over specs.txt. Perhaps I should email

Re: rbl's status?

2004-06-13 Thread Adam D. Barratt
On Sun, 2004-06-13 at 18:48, Dale Amon wrote: On Sun, Jun 13, 2004 at 06:33:13PM +0100, Adam D. Barratt wrote: I'd guess that was easier than fixing all the references to the RBL[+], RSS and DUL littered through the documentation. Point taken... but then again, who on Earth actually re

Re: freeRadius 1.0.4

2005-07-19 Thread Adam D. Barratt
On Tuesday, July 19, 2005 2:08 PM, Chey [EMAIL PROTECTED] wrote: Hello, I am wondering when Debian will have freeRadius 1.0.4 available as an upgrade in Sarge. There are security issues in freeRadius versions prior to 1.0.3 for people who use SQL. http://www.freeradius.org/security.html

Re: Unusual incoming traffic detected from klecker.debian.org and source.rfc822.org

2005-09-14 Thread Adam D. Barratt
On Wednesday, September 14, 2005 9:51 AM, Mathieu JANIN [EMAIL PROTECTED] wrote: Hi. I detected some unexpected incoming traffic from klecker.debian.org (ports TCP 4672, 4668) , and source.rfc822.org (port TCP 1794), all coming from port 80 at 12:17 yesterday. I was updating my system at

Re: Clamav CVE-2006-0162

2006-01-18 Thread Adam D. Barratt
On Wednesday, January 18, 2006 1:01 AM, Andrew Perry [EMAIL PROTECTED] wrote: I am wondering what is being done to patch the security vulnerability in Clam-AV that was recently announced. I don't see anything on the security page and Debian is listed as affected at:

Re: DSA 1184 corrections

2006-10-05 Thread Adam D. Barratt
On Thursday, October 05, 2006 9:19 AM, Jens Seidel [EMAIL PROTECTED] wrote: Hi Joey, On Thu, Oct 05, 2006 at 09:06:41AM +0200, Martin Schulze wrote: [...] Please don't change the meaning of security updates without consultation of the security team. Typos and broken wordings and the like

Re: [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

2008-02-11 Thread Adam D. Barratt
On Mon, 2008-02-11 at 18:09 -0500, Simon Valiquette wrote: Florian Weimer un jour écrivit: Package: linux-2.6 Vulnerability : missing access checks Problem type : local Debian-specific: no CVE Id(s) : CVE-2008-0010 CVE-2008-0163 CVE-2008-0600 [...] It seems

snort-stat warnings

2008-07-30 Thread Adam D. Barratt
Hi, We're running snort 2.3.3-11 on etch, and for the past few days the cron.daily job has been generating a number of Warning, file may be incomplete messages. After a little experimentation, it appears that this is due to /var/log/snort/alert containing the header line for a number of

Re: snort-stat warnings

2008-08-03 Thread Adam D. Barratt
On Wed, 2008-07-30 at 15:07 +0200, Bjoern Meier wrote: Hi, well, it's mir first post on this list. So please don't flame me ;-) Ok under the docoments of snort is a file called README.http_inspect , from which I quote: Thanks. I know what the check does though. :-) My concern was why

Re: Upcoming Lenny point release

2009-09-04 Thread Adam D. Barratt
Adam D. Barratt wrote: The next Lenny point release (5.0.3) is scheduled for Saturday, September 5th. The point release has now been moved slightly forward - we'll be aiming to start around 19:00 UTC this evening so the updated packages should start appearing on mirrors overnight (UTC

Re: Upcoming Lenny point release

2009-09-04 Thread Adam D. Barratt
On Fri, 2009-09-04 at 10:25 +0100, Adam D. Barratt wrote: The point release has now been moved slightly forward - we'll be aiming to start around 19:00 UTC this evening so the updated packages should start appearing on mirrors overnight (UTC). The point release has now been... well

Upcoming lenny point release

2010-01-17 Thread Adam D. Barratt
Hi, The next Lenny point release (5.0.4) is scheduled for the evening of Friday, January 29th. Stable NEW will be frozen during the weekend of January 23rd - 24th. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Re: Upcoming Lenny point release; don't panic

2010-01-29 Thread Adam D. Barratt
On Fri, 2010-01-29 at 22:17 +0100, Alexander Reichle-Schmehl wrote: Our stable release managers are working on a new point release (5.0.4 if I'm not mistaken) which should hit the mirrors this weekend. So don't panic if you see updates in stable without security advisory. A proper

Re: [SRM] clamav 0.94.x EOL

2010-04-11 Thread Adam D. Barratt
On Fri, 2010-04-09 at 15:03 +0300, Török Edwin wrote: Is there anything going to be done with the package currently in Lenny? It won't work at all after that date, and I've just seen someone on #clamav who had not clue what debian-volatile is, or that he needs to upgrade. There was a

[volatile] Updated clamav-related packages available for testing

2010-04-14 Thread Adam D. Barratt
[reply-to set to -volatile] Hi, As you may be aware, the clamav project no longer supports the version of clamav available in the current Debian stable distribution, lenny; Debian provides updated packages of newer clamav versions via the volatile.debian.org archive. The clamav project have

Re: [volatile] Updated clamav-related packages available for testing

2010-04-15 Thread Adam D. Barratt
On Thu, 2010-04-15 at 20:58 +0200, Kurt Roeckx wrote: On Wed, Apr 14, 2010 at 10:35:41PM +0100, Adam D. Barratt wrote: The clamav project have announced that they will be publishing a specially formed virus signature which disables older versions of the software, including the version

Upcoming etch point release

2010-05-13 Thread Adam D. Barratt
Hi, The next point release for the etch oldstable distribution, 4.0r9, is scheduled for Saturday, 22nd May. This will be the final point release for etch, which will be moved to archive.debian.org in the near future. Regards, Adam -- To UNSUBSCRIBE, email to

Re: Upcoming etch point release

2010-05-14 Thread Adam D. Barratt
On Fri, May 14, 2010 09:34, Johannes Wiedersich wrote: Adam D. Barratt wrote: The next point release for the etch oldstable distribution, 4.0r9, is scheduled for Saturday, 22nd May. I guess this is rather a plain formality than an endorsement by the project that this release is an up-to-date

Re: Upcoming etch point release

2010-05-22 Thread Adam D. Barratt
On Thu, 2010-05-13 at 19:26 +0100, Adam D. Barratt wrote: The next point release for the etch oldstable distribution, 4.0r9, is scheduled for Saturday, 22nd May. The archive side of the point release has now finished. A slightly later than usual scheduled archive update is now running, after

Re: fixing CVE-2010-0395 for testing

2010-06-06 Thread Adam D. Barratt
[ -release readers: the original, including the diff, can be found at http://lists.debian.org/debian-security/2010/06/msg1.html ] On Sun, 2010-06-06 at 12:48 +, Rene Engelhard wrote: I could have uploaded 1:3.2.1-11 to sid just it won't go into testing due to

Upcoming Lenny point release

2010-06-16 Thread Adam D. Barratt
Hi, The next Lenny point release (5.0.5) is scheduled for Saturday, June 26th. Stable NEW will be frozen during the weekend of June 19th - 20th. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: Upcoming Lenny point release

2010-06-26 Thread Adam D. Barratt
Hi, On Wed, 2010-06-16 at 21:39 +0100, Adam D. Barratt wrote: The next Lenny point release (5.0.5) is scheduled for Saturday, June 26th. Stable NEW will be frozen during the weekend of June 19th - 20th. The archive side of the point release has now finished. The next scheduled archive

Upcoming lenny point release

2010-08-24 Thread Adam D. Barratt
Hi, The next Lenny point release (5.0.6) is scheduled for Saturday, September 4th. Stable NEW will be frozen during the weekend of August 28th - 29th. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: Upcoming lenny point release

2010-09-04 Thread Adam D. Barratt
On Tue, 2010-08-24 at 21:04 +0100, Adam D. Barratt wrote: The next Lenny point release (5.0.6) is scheduled for Saturday, September 4th. The archive side of the point release has now finished. An extra mirror push is currently running, so the updates should start appearing on mirrors within

Re: ProFTPD IAC Remote Root Exploit

2010-11-15 Thread Adam D. Barratt
On Mon, November 15, 2010 16:15, Adrian Minta wrote: Any debian reaction on this ? http://seclists.org/fulldisclosure/2010/Nov/49 This is CVE-2010-4221. It's been fixed in unstable and testing since before the post you reference was made, and doesn't affect stable. Regards, Adam -- To

Re: Bind security announce

2010-12-30 Thread Adam D. Barratt
On Tue, 2010-12-28 at 18:34 -0800, Account for Debian group mail wrote: Well I waited to see if someone came our with a solution to this problem, none seen. So I'm updating another machine, here is what dselect is showing me: What that output doesn't include, which it should, is that there

Re: Bind security announce

2010-12-30 Thread Adam D. Barratt
On Thu, 2010-12-30 at 14:07 -0500, Jim Popovitch wrote: I used dselect to do the bind libs updates. The dependency mismatch was handled by dselect, and I had to approve what appeared a downgrade to libisc/dns. I'm guessing this was the package name change from libisc52 to libisc50; largely,

Upcoming Lenny point release

2011-01-13 Thread Adam D. Barratt
Hi, The next Lenny point release (5.0.8) is scheduled for Saturday, January 22nd. Stable NEW will be frozen during Monday 17th. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Re: Upcoming Lenny point release

2011-01-22 Thread Adam D. Barratt
On Thu, January 13, 2011 13:21, Adam D. Barratt wrote: The next Lenny point release (5.0.8) is scheduled for Saturday, January 22nd. and indeed it happened this afternoon. Updated packages should have hit all mirrors by now. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ

Re: [SECURITY] [DSA 2151-1] New OpenOffice.org packages fix several vulnerabilities

2011-01-26 Thread Adam D. Barratt
On Wed, 2011-01-26 at 19:06 +0100, Kurt Roeckx wrote: On Wed, Jan 26, 2011 at 05:18:12PM +0100, Martin Schulze wrote: For the upcoming stable distribution (squeeze) these problems have been fixed in version 3.2.1-11+squeeze1. For the unstable distribution (sid) these problems have

Upcoming squeeze point release

2011-03-08 Thread Adam D. Barratt
Hi, The first Squeeze point release (6.0.1) is scheduled for Saturday, March 19th. Stable NEW will be frozen during the weekend of the 12/13th. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: Upcoming squeeze point release

2011-03-19 Thread Adam D. Barratt
On Tue, 2011-03-08 at 20:11 +, Adam D. Barratt wrote: The first Squeeze point release (6.0.1) is scheduled for Saturday, March 19th. The archive side of the point release has now finished. The next scheduled archive update is in around half an hour, after which the updates will start

Re: Upcoming Squeeze point release 6.0.2

2011-06-25 Thread Adam D. Barratt
Hi, On Thu, 2011-06-09 at 00:09 +0200, Philipp Kern wrote: the second Squeeze point release (6.0.2) is now scheduled for Saturday, June 25th. The archive side of the point release has now finished. The next scheduled archive update begins in a couple of hours time, after which updated

Re: Upcoming Squeeze point release 6.0.2

2011-06-26 Thread Adam D. Barratt
[I'm not subscribed to -bsd; please Cc me on any replies originating from there, if relevant] On Sat, 2011-06-25 at 12:55 +0100, Adam D. Barratt wrote: On Thu, 2011-06-09 at 00:09 +0200, Philipp Kern wrote: the second Squeeze point release (6.0.2) is now scheduled for Saturday, June 25th

Re: Upcoming Squeeze point release 6.0.2

2011-06-26 Thread Adam D. Barratt
On Sun, 2011-06-26 at 23:32 +1000, Andrew McGlashan wrote: Adam D. Barratt wrote: That issue has been corrected, and the point release is being re-published this morning as 6.0.2.1. There are no changes in package content; the only difference from the original 6.0.2 (aside from

Re: Regression on [DSA 2276-1]?

2011-07-10 Thread Adam D. Barratt
[CCed as I'm guessing you're not subscribed to -security; if you are, apologies for the duplicate] On Sun, 2011-07-10 at 20:37 +0200, Jan Joris Vereijken wrote: I applied DSA 2276-1 to my Lenny/i386 system, and asterisk suddenly wouldn't start anymore. [...] Could this be a regression? Do

Re: security updates using ftp

2011-08-30 Thread Adam D. Barratt
On Tue, 2011-08-30 at 13:56 -0500, Nelson Last wrote: I have a system that does not have http access, due to firewall restrictions. I do, however, have ftp access. I apparently am able to update aptitude with no problem, but I can never get security updates. I always get an error about not

Re: security updates using ftp

2011-08-30 Thread Adam D. Barratt
On Tue, 2011-08-30 at 20:15 +0100, Adam D. Barratt wrote: Err ftp://security.debian.org squeeze/updates/main i386 Packages Unable to fetch file, server said 'Failed to open file. ' [IP: 130.89.149.226 21] [...] If you drop the forced proxy configuration, what happens? After a little

RE: security updates using ftp

2011-08-30 Thread Adam D. Barratt
On Tue, 2011-08-30 at 15:06 -0500, Nelson Last wrote: Thanks for the replies. I changed the source to deb ftp://security.debian.org/debian-security/ squeeze/updates main with no difference, other than the error message now says: Failed to fetch

Re: Upcoming Point Releases

2011-10-01 Thread Adam D. Barratt
On Wed, 2011-09-07 at 21:30 +0200, Philipp Kern wrote: we finally got target dates for the next point releases of both Lenny and Squeeze. Lenny should get 5.0.9 on October 1st; Squeeze will follow on October 8th with 6.0.3. The archive side of the Lenny point release has now finished. The

Re: Upcoming Point Releases

2011-10-08 Thread Adam D. Barratt
On Wed, 2011-09-07 at 21:30 +0200, Philipp Kern wrote: we finally got target dates for the next point releases of both Lenny and Squeeze. Lenny should get 5.0.9 on October 1st; Squeeze will follow on October 8th with 6.0.3. The archive side of the Squeeze point release has finished, and a

Re: AW: Vulnerable PHP version according to nessus

2011-12-28 Thread Adam D. Barratt
On 28.12.2011 07:56, Patrick Geschke wrote: Hey, @Maintainers: Whats the overall Status of the package? According to php.net 5.3.8 is stable. 5.3.8 is in both testing and unstable - see http://packages.qa.debian.org/p/php5.html Debian stable doesn't generally get new upstream versions of

Upcoming stable point release

2012-01-11 Thread Adam D. Barratt
Hi, The next point release for squeeze (6.0.4) is scheduled for Saturday January 28th. Stable NEW will be frozen during the preceeding weekend (21st/22nd). As usual, base-files can be uploaded at any point before the freeze. If there is a further kernel update planned for inclusion in the

Re: Upcoming stable point release

2012-01-28 Thread Adam D. Barratt
On Wed, 2012-01-11 at 13:12 +, Adam D. Barratt wrote: The next point release for squeeze (6.0.4) is scheduled for Saturday January 28th. Stable NEW will be frozen during the preceeding weekend (21st/22nd). The archive side of the point release has finished, and a mirror push

Upcoming oldstable point release

2012-02-28 Thread Adam D. Barratt
Hi, The next - and final - point release for lenny (5.0.10) is scheduled for Saturday March 10th. Oldstable NEW will be frozen during the coming weekend (3rd/4th). As this will be the last point release for lenny, it will be moved to archive.debian.org in the near future (most likely on or

Re: Upcoming oldstable point release

2012-03-10 Thread Adam D. Barratt
On Wed, 2012-02-29 at 07:05 +, Adam D. Barratt wrote: The next - and final - point release for lenny (5.0.10) is scheduled for Saturday March 10th. Oldstable NEW will be frozen during the coming weekend (3rd/4th). The archive side of the point release has finished, and a mirror push

Upcoming stable point release (6.0.5)

2012-04-30 Thread Adam D. Barratt
Hi, The next point release for squeeze (6.0.5) is scheduled for Saturday May 12th. Stable NEW will be frozen during the preceding weekend (5/6th). As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Re: Upcoming stable point release (6.0.5)

2012-05-12 Thread Adam D. Barratt
On 30.04.2012 22:19, Adam D. Barratt wrote: The next point release for squeeze (6.0.5) is scheduled for Saturday May 12th. Stable NEW will be frozen during the preceding weekend (5/6th). The archive side of the point release has finished, and a scheduled archive run is currently running

Re: CVE-2011-1521 and CVE-2011-3389 - fixed packet

2012-09-24 Thread Adam D. Barratt
On Mon, 2012-09-24 at 12:39 -0400, Michael Gilbert wrote: the distribution should be stable-proposed-updates rather than stable, stable's fine. (As would be proposed-updates and squeeze.) Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of

Squeeze point release (6.0.6)

2012-09-29 Thread Adam D. Barratt
Hi, There was a point release of the stable distribution (squeeze) this morning. The list of packages included (aside from those already released via security.debian.org and a late ia32-libs upload) can be found at https://lists.debian.org/debian-stable-announce/2012/09/msg0.html The

Upcoming stable point release (6.0.7)

2013-02-13 Thread Adam D. Barratt
Hi, The next point release for squeeze (6.0.7) is scheduled for Saturday February 23rd. Stable NEW will be frozen during the preceding Monday (18th). As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Re: Upcoming stable point release (6.0.7)

2013-02-23 Thread Adam D. Barratt
On Wed, 2013-02-13 at 19:32 +, Adam D. Barratt wrote: The next point release for squeeze (6.0.7) is scheduled for Saturday February 23rd. Stable NEW will be frozen during the preceding Monday (18th). The archive side of the point release has finished, and an early mirror update

Upcoming stable point release (7.1)

2013-05-15 Thread Adam D. Barratt
Hi, The first point release for wheezy (7.1) is scheduled for Saturday June 15th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org

Re: Upcoming stable point release (7.1)

2013-06-15 Thread Adam D. Barratt
On Thu, 2013-05-16 at 06:20 +0100, Adam D. Barratt wrote: The first point release for wheezy (7.1) is scheduled for Saturday June 15th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has finished, and a mirror push is running; the update should

Re: [SECURITY] [DSA 2736-1] putty security update

2013-08-11 Thread Adam D. Barratt
On Sun, 2013-08-11 at 14:55 -0500, Robert Wolfe wrote: Has Simon Tatham been advised of this, One would have hoped the answer to that would have been obvious (yes), but if not then a quick look at http://www.chiark.greenend.org.uk/~sgtatham/putty/ would lead to: quote 2013-08-06 PuTTY 0.63

Upcoming stable point release (7.2)

2013-09-22 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.2) is scheduled for Saturday October 12th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Upcoming oldstable point release (6.0.8)

2013-09-22 Thread Adam D. Barratt
Hi, The next point release for squeeze (6.0.8) is scheduled for Saturday October 19th. Oldstable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Re: Upcoming stable point release (7.2)

2013-10-12 Thread Adam D. Barratt
On Sun, 2013-09-22 at 20:11 +0100, Adam D. Barratt wrote: The next point release for wheezy (7.2) is scheduled for Saturday October 12th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and an extra mirror update has been

Re: Upcoming oldstable point release (6.0.8)

2013-10-19 Thread Adam D. Barratt
On Sun, 2013-09-22 at 20:11 +0100, Adam D. Barratt wrote: The next point release for squeeze (6.0.8) is scheduled for Saturday October 19th. Oldstable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and an extra mirror update has been

Upcoming stable point release (7.3)

2013-12-03 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.3) is scheduled for Saturday December 14th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Re: Upcoming stable point release (7.3)

2013-12-14 Thread Adam D. Barratt
On Tue, 2013-12-03 at 20:30 +, Adam D. Barratt wrote: The next point release for wheezy (7.3) is scheduled for Saturday December 14th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has finished and an early mirror push is running, so

Upcoming stable point release (7.4)

2014-01-23 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.4) is scheduled for Saturday February 8th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Upcoming oldstable point release (6.0.9)

2014-01-23 Thread Adam D. Barratt
Hi, The next point release for squeeze (6.0.9) is scheduled for Saturday February 15th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Re: Upcoming stable point release (7.4)

2014-02-08 Thread Adam D. Barratt
On Thu, 2014-01-23 at 20:08 +, Adam D. Barratt wrote: The next point release for wheezy (7.4) is scheduled for Saturday February 8th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and an extra mirror update has been

Re: Upcoming oldstable point release (6.0.9)

2014-02-15 Thread Adam D. Barratt
On Thu, 2014-01-23 at 20:09 +, Adam D. Barratt wrote: The next point release for squeeze (6.0.9) is scheduled for Saturday February 15th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and an extra mirror update has been

Upcoming stable point release (7.5)

2014-03-23 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.5) is scheduled for Saturday, April 26th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org

Re: debcheckroot v1.0 released

2014-04-05 Thread Adam D. Barratt
On Sat, 2014-04-05 at 16:52 +, Elmar Stellnberger wrote: Am 05.04.2014 15:23, schrieb Patrick Schleizer: As Debian package headers do not use to be signed I think you are mistaken here or maybe I misunderstand. When you have a Debian medium you trust (such as a Live DVD from a trusted

Re: Upcoming stable point release (7.5)

2014-04-26 Thread Adam D. Barratt
On Sun, 2014-03-23 at 21:20 +, Adam D. Barratt wrote: The next point release for wheezy (7.5) is scheduled for Saturday, April 26th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has finished and a mirror update has been triggered, so

Re: Debian mirrors and MITM

2014-05-30 Thread Adam D. Barratt
On 2014-05-30 13:43, Alfie John wrote: On Fri, May 30, 2014, at 10:24 PM, Michael Stone wrote: On Fri, May 30, 2014 at 10:15:01PM +1000, Alfie John wrote: The public Debian mirrors seem like an obvious target for governments to MITM. I know that the MD5s are also published, but unless you're

Re: [SECURITY] [DSA 2950-1] openssl security update

2014-06-05 Thread Adam D. Barratt
On 2014-06-05 15:46, Florian Zumbiehl wrote: Hi, Package: openssl CVE ID : CVE-2014-0195 CVE-2014-0221 CVE-2014-0224 CVE-2014-3470 is it intentional that you didn't fix CVE-2014-0198 That was fixed last month - https://www.debian.org/security/2014/dsa-2931 and

Upcoming stable point release (7.6)

2014-06-11 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.6) is scheduled for Saturday, July 12th. Stable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org

Upcoming oldstable point release (6.0.10)

2014-06-11 Thread Adam D. Barratt
Hi, The next (and final) point release for squeeze (6.0.10) is scheduled for Saturday, July 19th. Oldstable NEW will be frozen during the preceding weekend. As usual, base-files can be uploaded at any point before the freeze. Regards, Adam -- To UNSUBSCRIBE, email to

Re: RFC: fail2ban wheezy security update

2014-07-08 Thread Adam D. Barratt
On 2014-07-08 8:13, Tomasz Ciolek wrote: Perhaps the best way is to sumbmit these patches to the Debian fail2ban maintainer? You mean the person who started this thread? :) Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe.

Re: Upcoming stable point release (7.6)

2014-07-12 Thread Adam D. Barratt
On Wed, 2014-06-11 at 20:07 +0100, Adam D. Barratt wrote: The next point release for wheezy (7.6) is scheduled for Saturday, July 12th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished and packages should start appearing on mirrors

Re: Torrent tracker problem

2014-07-14 Thread Adam D. Barratt
On Mon, 2014-07-14 at 14:15 -0600, Kitty Cat wrote: These torrents are not working with the Debian tracker. http://cdimage.debian.org/debian-cd/7.6.0/source/bt-cd/debian-update-7.6.0-source-CD-1.iso.torrent

Re: Upcoming oldstable point release (6.0.10)

2014-07-19 Thread Adam D. Barratt
Hi, On Wed, 2014-06-11 at 20:09 +0100, Adam D. Barratt wrote: The next (and final) point release for squeeze (6.0.10) is scheduled for Saturday, July 19th. Oldstable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and a mirror update

Upcoming stable point release (7.7)

2014-09-24 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.7) is scheduled for Saturday, October 18th. Stable NEW will be frozen during the preceding weekend. Regards, Adam -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: Upcoming stable point release (7.7)

2014-10-18 Thread Adam D. Barratt
On Wed, 2014-09-24 at 20:12 +0100, Adam D. Barratt wrote: The next point release for wheezy (7.7) is scheduled for Saturday, October 18th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and a mirror update is running, so packages

Re: please keep checksums of installation images at cdimage.debian.org online for a long time

2014-12-05 Thread Adam D. Barratt
On Fri, 2014-12-05 at 19:18 +0100, Elmar Stellnberger wrote: In times of Debian 6.x and 7.1.x images from elder versions of Debian (like f.i. 7.0.x) were kept online for a long time. Today I had a look at http://cdimage.debian.org/debian-cd/ but could only find images of the latest versions

Re: Bug#772487: SSL 3.0 and older ciphers selected in applications

2014-12-08 Thread Adam D. Barratt
On Mon, 2014-12-08 at 09:16 +0100, Daniel Pocock wrote: [...] If it will help the release team, is there anybody from the security team who could review the changes in my debdiff? Note that debian-security@lists.debian.org is not a contact address for the security team. (Also I don't see

Upcoming stable point release (7.8)

2014-12-27 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.8) is scheduled for Saturday, January 10th. Stable NEW will be frozen during the preceding weekend. Regards, Adam signature.asc Description: This is a digitally signed message part

Re: Upcoming stable point release (7.8)

2015-01-10 Thread Adam D. Barratt
On Sat, 2014-12-27 at 14:53 +, Adam D. Barratt wrote: The next point release for wheezy (7.8) is scheduled for Saturday, January 10th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and a mirror update is running, so packages

Re: Jessie Release Date: 2015-04-25

2015-04-25 Thread Adam D. Barratt
On Tue, 2015-03-31 at 20:58 +0200, Niels Thykier wrote: We now have a target release date of Saturday the 25th of April. We have checked with core teams, and this seems to be acceptable for everyone. This means we are able to begin the final preparations for a release of Debian 8 - Jessie.

Re: Contradictory statements on the security vulnerability of cURL in Debian Wheezy

2015-05-01 Thread Adam D. Barratt
On 2015-05-01 20:24, Jonathan Wiltshire wrote: On Fri, May 01, 2015 at 11:23:49AM -0700, Theodore Alcapotaxis wrote: I would appreciate it if you could update the site backports.debian.org at your earliest convenience. Well, you probably want to contact the backports team then. Sending

Re: Upcoming stable point release (8.1)

2015-06-06 Thread Adam D. Barratt
On Sun, 2015-05-24 at 16:55 +0100, Adam D. Barratt wrote: Hi, The first point release for jessie (8.1) is scheduled for Saturday, June 6th. Stable NEW will be frozen during the preceding weekend. The archive side of the point release has now finished, and a mirror update is running, so

Re: Some perl packages not available in mirrors.

2015-07-01 Thread Adam D. Barratt
On 2015-07-01 2:10, Marco Galicia wrote: While trying to build some lxc from debian I noticed that some perl related packages failed to download. I tried changing mirrors and then verifying manually and i can say that some perl packages are missing in all the debian mirrors. Please don't post

Upcoming stable point release (8.1)

2015-05-24 Thread Adam D. Barratt
Hi, The first point release for jessie (8.1) is scheduled for Saturday, June 6th. Stable NEW will be frozen during the preceding weekend. Regards, Adam signature.asc Description: This is a digitally signed message part

Re: Upcoming stable point release (8.2)

2015-09-05 Thread Adam D. Barratt
On Tue, 2015-08-25 at 22:04 +0100, Adam D. Barratt wrote: > Hi, > > The next point release for "jessie" (8.2) is scheduled for Saturday, > September 5th. Processing of new uploads into jessie-proposed-updates > will be frozen during the preceding weekend. The archive

Re: Upcoming oldstable point release (7.9)

2015-09-05 Thread Adam D. Barratt
On Tue, 2015-08-25 at 22:04 +0100, Adam D. Barratt wrote: > Hi, > > The next point release for "wheezy" (7.9) is scheduled for Saturday, > September 5th. Processing of new uploads into wheezy-proposed-updates > will be frozen during the preceding weekend. The archive

Upcoming stable point release (8.2)

2015-08-25 Thread Adam D. Barratt
Hi, The next point release for jessie (8.2) is scheduled for Saturday, September 5th. Processing of new uploads into jessie-proposed-updates will be frozen during the preceding weekend. Regards, Adam signature.asc Description: This is a digitally signed message part

Upcoming oldstable point release (7.9)

2015-08-25 Thread Adam D. Barratt
Hi, The next point release for wheezy (7.9) is scheduled for Saturday, September 5th. Processing of new uploads into wheezy-proposed-updates will be frozen during the preceding weekend. Regards, Adam signature.asc Description: This is a digitally signed message part

Upcoming stable point release (8.3)

2015-12-17 Thread Adam D. Barratt
Hi, The next point release for "jessie" (8.3) is scheduled for Saturday, January 23rd. Processing of new uploads into jessie-proposed-updates will be frozen during the preceding weekend. Regards, Adam

Re: Upcoming oldstable point release (7.11)

2016-06-04 Thread Adam D. Barratt
On Sat, 2016-05-21 at 15:17 +0200, Julien Cristau wrote: > The next (and last) point release for "wheezy" (7.11) is scheduled for > Saturday, June 4th. Processing of new uploads into > wheezy-proposed-updates will be frozen during the preceding weekend. The archive side of the point release has

  1   2   3   >