Re: MySQL 5.5 EOL before Debian 8 LTS ends

2018-12-27 Thread Jan Ingvoldstad
On 2018-12-27 18:51, Lars Tangvald wrote: Upgrading to 5.6 would be less risky than MariaDB 10.1, but it's a similar sort of risk. I don't know what the risk with switching to MariaDB 10.1 would be, but as a general principle, MariaDB lags behind (the already annoyingly delayed) Oracle secur

Re: RFC: proposed fix for CVE-2018-19518 in uw-imap

2018-12-27 Thread Roberto C . Sánchez
Hi Tomas, On Mon, Dec 24, 2018 at 08:47:55PM +, Tomas Bortoli wrote: >Hi Robert, > >Your patch seems not to be definitive against CVE-2018-19518. >This because checking for spaces won't be enough if an attacker uses some >"bash trick" to get a space... >In fact you can get

Re: limits of automatic unclaiming (Re: pdns/pdns-recursor)

2018-12-27 Thread Antoine Beaupré
On 2018-12-27 14:16:22, Holger Levsen wrote: > Hi Abhijith, Antoine, > > I just ran "./bin/review-update-needed --lts --unclaim 1814400 --exclude > linux linux-4.9" today and it unclaimed pdns/pdns-recursor as the last > NOTE entries were more than 3 weeks ago. However Abhijith wrote here: > > On S

Re: MySQL 5.5 EOL before Debian 8 LTS ends

2018-12-27 Thread Lars Tangvald
Hi, On 19.12.2018 17:01, Holger Levsen wrote: Hi Emilio, thanks for bringing up this issue on the LTS list. On Mon, Dec 17, 2018 at 10:49:57AM +0100, Emilio Pozuelo Monfort wrote: MySQL 5.5 should be EOL this month if nothing has changed, although I don't see an announcement on [1] yet. Maybe

Re: limits of automatic unclaiming (Re: pdns/pdns-recursor)

2018-12-27 Thread Holger Levsen
Hi Abhijith, On Thu, Dec 27, 2018 at 09:01:32PM +0530, Abhijith PA wrote: > > Abhijith, thanks for this update! Just please also update the notes for > > these packages in data/dla-needed.txt. > I will. Thank you. > >> time in it as it is not so popular one and it has no-DSA postponed > >> prior

Re: limits of automatic unclaiming (Re: pdns/pdns-recursor)

2018-12-27 Thread Abhijith PA
Hi, Holger.. On Thursday 27 December 2018 07:46 PM, Holger Levsen wrote: > Hi Abhijith, Antoine, > > I just ran "./bin/review-update-needed --lts --unclaim 1814400 --exclude > linux linux-4.9" today and it unclaimed pdns/pdns-recursor as the last > NOTE entries were more than 3 weeks ago. Howev

limits of automatic unclaiming (Re: pdns/pdns-recursor)

2018-12-27 Thread Holger Levsen
Hi Abhijith, Antoine, I just ran "./bin/review-update-needed --lts --unclaim 1814400 --exclude linux linux-4.9" today and it unclaimed pdns/pdns-recursor as the last NOTE entries were more than 3 weeks ago. However Abhijith wrote here: On Sat, Dec 22, 2018 at 01:02:06PM +0530, Abhijith PA wrote: