Wheezy update of jbig2dec?

2017-01-05 Thread Chris Lamb
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of jbig2dec: https://security-tracker.debian.org/tracker/source-package/jbig2dec Would you like to take care of this yourself? If yes, please follow the workflow we

Re: ipv6 routing memory leak

2017-01-05 Thread Ben Hutchings
On Wed, 2017-01-04 at 14:49 +, Ton Wittenberg wrote: [...] > and on several machines debian 7 ipv6 stops  working after a while so > i started to investigate the issue. > > > wc -l /proc/net/ipv6_route > ?25329 /proc/net/ipv6_route and its still growing every minute. > once i reboot the machi

Re: Wheezy update of rabbitmq-server?

2017-01-05 Thread Bálint Réczey
Hi, 2017-01-04 21:08 GMT+01:00 Bálint Réczey : > Hi Zigo, > > 2017-01-04 16:28 GMT+01:00 Thomas Goirand : >> Hi, >> >> I don't think any of the maintainers of RabbitMQ cares about Wheezy >> anymore, so it'd be very nice if someone from the LTS team was taking >> care of it. > > OK, I'll take care

RFC: fixing ming vulnerabilities them marking ming as not supported

2017-01-05 Thread Bálint Réczey
Dear LTS Team, Since ming is still being used on many systems [1] of I have prepared fixes for the known vulnerabilities [2] and upstreamed them. While preparing the fixes I could not avoid noticing the lack of proper input checking at numerous other places which could be exploited for various kin

LTS report for December

2017-01-05 Thread Emilio Pozuelo Monfort
Hi, In this month I was allocated 13.5h. I spent 11h doing the following: - DLA-735-1: gst-plugins-base0.10 update - DLA-736-1: gst-plugins-bad0.10 update - DLA-743-1: firefox-esr update - DLA-750-1: game-music-emu update - DLA-685-2: libxi regression update - imagemagick: fixed a wrongly fixed s

LTS report for December

2017-01-05 Thread Balint Reczey
This month I was allocated 13.5 hours. I used 11 hours in which I worked on the following: * [DLA 755-1] dcmtk security update I also tested the fix on Jessie and the patch I prepared was also used to update dcmtk in jessie-security. * [DLA 758-1] libgd2 security update * [DLA 767-1] cur

Re: [pkg-php-pear] Wheezy update of zendframework?

2017-01-05 Thread Markus Frosch
On 05.01.2017 10:32, Chris Lamb wrote: > the Debian LTS team would like to fix the security issues which are > currently open in the Wheezy version of zendframework: > https://security-tracker.debian.org/tracker/source-package/zendframework > > Would you like to take care of this yourself? Hey Ch

Re: [pkg-php-pear] Wheezy update of zendframework?

2017-01-05 Thread Chris Lamb
Hi Markus, > zendframework < 2 *should* not be affected at all. Ah, not sure how I didn't see that! Many thanks. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Wheezy update of icoutils?

2017-01-05 Thread Chris Lamb
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of icoutils: https://security-tracker.debian.org/tracker/source-package/icoutils Would you like to take care of this yourself? If yes, please follow the workflow we

Wheezy update of ghostscript?

2017-01-05 Thread Chris Lamb
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of ghostscript: https://security-tracker.debian.org/tracker/source-package/ghostscript Would you like to take care of this yourself? If yes, please follow the workfl

Wheezy update of zendframework?

2017-01-05 Thread Chris Lamb
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of zendframework: https://security-tracker.debian.org/tracker/source-package/zendframework Would you like to take care of this yourself? If yes, please follow the wo