Processed: Re: Bug#882258: busybox: CVE-2017-16544: lineedit: do not tab-complete any strings which have control characters

2017-11-20 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 882258 1:1.20.0-7 Bug #882258 [src:busybox] busybox: CVE-2017-16544: lineedit: do not tab-complete any strings which have control characters Marked as found in versions busybox/1:1.20.0-7. > found 882258 1:1.22.0-9+deb8u1 Bug #882258

Bug#882258: busybox: CVE-2017-16544: lineedit: do not tab-complete any strings which have control characters

2017-11-20 Thread Christoph Biedl
found 882258 1:1.20.0-7 found 882258 1:1.22.0-9+deb8u1 found 882258 1:1.22.0-19 found 882258 1:1.27.2-1 thanks Salvatore Bonaccorso wrote... > Please adjust the affected versions in the BTS as needed, only > unstable checked so far. Can help with that: All versions back to and including wheezy

Processed: severity of 882258 is important, tagging 882258

2017-11-20 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 882258 important Bug #882258 [src:busybox] busybox: CVE-2017-16544: lineedit: do not tab-complete any strings which have control characters Severity set to 'important' from 'grave' > tags 882258 + upstream fixed-upstream Bug #882258

Bug#882258: busybox: CVE-2017-16544: lineedit: do not tab-complete any strings which have control characters

2017-11-20 Thread Salvatore Bonaccorso
Source: busybox Version: 1:1.27.2-1 Severity: grave Tags: security Hi, the following vulnerability was published for busybox. I realize you know of the issue already but just filling to have a tracking bug as well in the BTS. CVE-2017-16544[0]: | In the add_match function in libbb/lineedit.c in

Re: Easier installer?

2017-11-20 Thread Thomas Lange
> On Mon, 20 Nov 2017 10:30:06 -0500, lsore...@csclub.uwaterloo.ca (Lennart > Sorensen) said: > On Sun, Nov 19, 2017 at 12:26:58PM +0100, Thomas Lange wrote: >> > On Sun, 19 Nov 2017 11:56:35 +0100, Thomas Lange said: >> >> > JFTR, I

Re: Easier installer?

2017-11-20 Thread Samuel Thibault
Lennart Sorensen, on lun. 20 nov. 2017 10:24:35 -0500, wrote: > On Sat, Nov 18, 2017 at 09:20:36PM +, Ben Hutchings wrote: > > Implementing locale selection using a map also runs the risk of getting > > your software banned in countries that disagree with where you put the > > borders. > >

Re: Easier installer?

2017-11-20 Thread Lennart Sorensen
On Sun, Nov 19, 2017 at 12:26:58PM +0100, Thomas Lange wrote: > > On Sun, 19 Nov 2017 11:56:35 +0100, Thomas Lange > > said: > > > JFTR, I just look at an openSuse Tumbleweed installation. They are > > using a world map for selecting the timezone.

Re: Easier installer?

2017-11-20 Thread Lennart Sorensen
On Sat, Nov 18, 2017 at 09:20:36PM +, Ben Hutchings wrote: > Implementing locale selection using a map also runs the risk of getting > your software banned in countries that disagree with where you put the > borders. Also tricky in the non-gui installer, which at least some systems have to

Re: Easier installer?

2017-11-20 Thread Philip Hands
On Sat, 18 Nov 2017, "Jonathan Carter (highvoltage)" wrote: > Hi Samuel > > On 18/11/2017 02:15, Samuel Thibault wrote: >> Put another way: I *don't* think we want to change this set of >> questions, we'd just lose users. Thus the other proposal, proposed right >> from the start

getting on the boot list

2017-11-20 Thread Gregory A. Lewis
how do I subscribe to this list?