Wheezy update of firebird2.5?

2017-03-25 Thread Ola Lundqvist
Dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of firebird2.5: https://security-tracker.debian.org/tracker/CVE-2017-6369 Would you like to take care of this yourself? If yes, please follow the workflow we have defined

Wheezy update of tiff?

2017-03-25 Thread Ola Lundqvist
Dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of tiff: https://security-tracker.debian.org/tracker/CVE-2016-10266 https://security-tracker.debian.org/tracker/CVE-2016-10267

Wheezy update of apt-cacher?

2017-03-25 Thread Ola Lundqvist
Dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of apt-cacher: https://bugs.debian.org/858739 (no CVE yet) Would you like to take care of this yourself? If yes, please follow the workflow we have defined here:

Wheezy update of apparmor?

2017-03-25 Thread Ola Lundqvist
Dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of apparmor: https://security-tracker.debian.org/tracker/CVE-2017-6507 Would you like to take care of this yourself? If yes, please follow the workflow we have defined

Re: Bug#858230: reproducing the recent PCRE issues

2017-03-25 Thread Salvatore Bonaccorso
Hi Matthew, On Sat, Mar 25, 2017 at 05:00:35PM +, Matthew Vernon wrote: > Hi, > > > I've tried to reproduce the PCRE3 issues from CVE-2017-7186. > > CVE-2017-7244, CVE-2017-7245 and CVE-2017-7246 are similar fuzzing > > attacks so this probably applies to those as well. > > Thanks for

Re: reproducing the recent PCRE issues

2017-03-25 Thread Matthew Vernon
Hi, I've tried to reproduce the PCRE3 issues from CVE-2017-7186. CVE-2017-7244, CVE-2017-7245 and CVE-2017-7246 are similar fuzzing attacks so this probably applies to those as well. Thanks for looking at these. I fixed CVE-2017-7186 with upstream's patch in sid. It's unfortunate that

Re: Wheezy update of ca-certificates?

2017-03-25 Thread Markus Koschany
Am 25.03.2017 um 11:44 schrieb Emilio Pozuelo Monfort: > On 25/03/17 09:32, Paul Wise wrote: >> Hi all, >> >> I note that there have been some CA removals and additions that would >> be nice to have in wheezy, in particular the ISRG Root for LE, thoughts? > > I was just thinking about an update

Re: Wheezy update of ca-certificates?

2017-03-25 Thread Emilio Pozuelo Monfort
On 25/03/17 09:32, Paul Wise wrote: > Hi all, > > I note that there have been some CA removals and additions that would > be nice to have in wheezy, in particular the ISRG Root for LE, thoughts? I was just thinking about an update of ca-certificates on wheezy yesterday, but due to the removal

Accepted python3.2 3.2.3-7+deb7u1 (source all amd64) into oldstable

2017-03-25 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 24 Mar 2017 22:07:33 + Source: python3.2 Binary: python3.2 python3.2-minimal libpython3.2 python3.2-examples python3.2-dev idle-python3.2 python3.2-doc python3.2-dbg Architecture: source all amd64 Version: 3.2.3-7+deb7u1

Wheezy update of ca-certificates?

2017-03-25 Thread Paul Wise
Hi all, I note that there have been some CA removals and additions that would  be nice to have in wheezy, in particular the ISRG Root for LE, thoughts? -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part