Re: qemu - CVE-2018-19665: bt subsystem mishandles negative length variables

2019-01-27 Thread Adrian Zaugg
On 1/12/19 5:52 PM, Hugo Lefeuvre wrote: the subsystem doesn't seem to be very actively maintained and that the user base is quite small, it is maybe better to mark this no-dsa in stretch and Please don't forget thet Debian has derivates that do not get summed up in popcon.d.o. So the user

A huge thank you!

2018-05-31 Thread Adrian Zaugg
Dear LTS Team Your work is greatly appreciated! I would like to thank you all for your effort. Without the LTS of wheezy it would have been a big pain for me. Thanks a lot for helping that much. Best regards, Adrian.

"highly critical" DRUPAL-PSA-2018-001

2018-03-27 Thread Adrian Zaugg
Dear LTS Team The Drupal Security Team announced a patch for Drupal 7 and 8 for March, 28th. The security hole is classified as "highly critical" [1]. They state that "because exploits might be developed within hours or days" one should update on March 28th 2018 between 18:00 - 19:30 UTC. I

[SOLVED] Re: exim4 & libgnutls26: "A TLS packet with unexpected length was received."

2017-04-13 Thread Adrian Zaugg
Hi Antoine After some investigation I found that the count for the mentioned error was not slowly evolving, it was appearing at beginning of March a lot more than before. So I checked for changes on my side and found I had prolonged delays for hosts that are dns blacklisted too much (I set a

Re: exim4 & libgnutls26: "A TLS packet with unexpected length was received."

2017-03-30 Thread Adrian Zaugg
Hi Antoine On 29.03.17 22:21, Antoine Beaupré wrote: > On 2017-03-29 19:32:33, Adrian Zaugg wrote: > Litterally, "backporting" would mean uploading to wheezy-backports, and > there is already a backport there: I saw that one, but I think it is missing some security f

Re: exim4 & libgnutls26: "A TLS packet with unexpected length was received."

2017-03-29 Thread Adrian Zaugg
? Regards, Adrian. [1] comment #3 under https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/882 -- .~.. _ //__ \°___/~~~ Adrian Zaugg Zweierstrasse 56 CH-8004 Zürich 044 291 02 38 _ (This eMail gets best displayed using a monospace font.)

exim4 & libgnutls26: "A TLS packet with unexpected length was received."

2017-03-29 Thread Adrian Zaugg
in the net. Any advice is highly appreciated - I want to keep encrypted connections as the first option for connecting hosts. Thank you for your help! Best regards, Adrian Zaugg.

Re: Security update of openssh for wheezy

2016-07-30 Thread Adrian Zaugg
Is the security breech also present in openssh of wheezy-backports (openssh-server 1:6.6p1-4~bpo70+1, I guess yes because 1.6.0 and 1.6.7 are affected)? Is wheezy-backports in generally supported or not by the LTS Team? Thank you for your quick answer! Regards, Adrian. On 26.07.16 23:24, Ola

Re: Re: Wheezy update of roundcube?

2016-05-04 Thread Adrian Zaugg
> On Tue, 03 May 2016 at 10:47:31 -0400, Antoine Beaupré wrote: >> I agree, however I suspect most people using roundcube in production are >> probably using the backport... There's even a dangling backport in >> wheezy right now (0.9)... a little messy. > Am 03.05.2016 um 17:49 schrieb Guilhem