Re: squeeze update of fuse?

2015-06-02 Thread GCS
On Tue, Jun 2, 2015 at 2:21 PM, Santiago Ruano Rincón wrote: > El 01/06/15 a las 20:12, Mike Gabriel escribió: >> I can look at the debdiff tomorrow, but maybe Santiago has time tonight for >> a quick review. > I have build it and the package seems ok. > Please, let me know if you some additional

Re: squeeze update of fuse?

2015-06-02 Thread Santiago Ruano Rincón
El 01/06/15 a las 20:12, Mike Gabriel escribió: > Hi Laszlo, > > - Original message - > > On Mon, Jun 1, 2015 at 3:36 PM, Mike Gabriel > > wrote: > > > On  Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: > > > > I consider this my fault - I had the assumption that Thorsten

Re: squeeze update of fuse?

2015-06-01 Thread Mike Gabriel
Hi Laszlo, - Original message - > On Mon, Jun 1, 2015 at 3:36 PM, Mike Gabriel > wrote: > > On  Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: > > > I consider this my fault - I had the assumption that Thorsten will or > > > already did this. As he did with the ntfs-3g upd

Re: squeeze update of fuse?

2015-06-01 Thread GCS
On Mon, Jun 1, 2015 at 3:36 PM, Mike Gabriel wrote: > On Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: >> I consider this my fault - I had the assumption that Thorsten will or >> already did this. As he did with the ntfs-3g update for >> squeeze-lts[1]. I guess it's now handled o

Re: squeeze update of fuse?

2015-06-01 Thread Mike Gabriel
Hi Santiago, hi László On Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: Hi all, On Mon, Jun 1, 2015 at 11:17 AM, Santiago Ruano Rincón wrote: I didn't put my name since I László wanted to upload the package by himself, and dla-needed.txt had a link to his message in the list

Re: squeeze update of fuse?

2015-06-01 Thread Mike Gabriel
Hi László, On Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: On Mon, Jun 1, 2015 at 11:17 AM, Santiago Ruano Rincón wrote: I didn't put my name since I László wanted to upload the package by himself, and dla-needed.txt had a link to his message in the list. But I'll do it next

Re: squeeze update of fuse?

2015-06-01 Thread GCS
Hi all, On Mon, Jun 1, 2015 at 11:17 AM, Santiago Ruano Rincón wrote: > I didn't put my name since I László wanted to upload the package by > himself, and dla-needed.txt had a link to his message in the list. But > I'll do it next time, sorry. I consider this my fault - I had the assumption that

Re: squeeze update of fuse?

2015-06-01 Thread Santiago Ruano Rincón
El 30/05/15 a las 14:37, Mike Gabriel escribió: ... > @Santiago: please put your name in data/dla-needed.txt when starting to work > on an LTS package update. I put my name in for fuse yesterday and realized > just now, that you already started working on fuse for squeeze-lts (which is > great!!!)

Re: squeeze update of fuse?

2015-05-30 Thread Mike Gabriel
Hi László, hi Santiago, On Di 26 Mai 2015 21:33:01 CEST, László Böszörményi (GCS) wrote: Hi Santiago, On Tue, May 26, 2015 at 6:42 PM, Santiago Ruano Rincón wrote: Please find the attached dpatch to prevent CVE-2015-3202 in squeeze. It makes lib/mount_util.c use execle instead of execl to r

Re: squeeze update of fuse?

2015-05-27 Thread Raphael Hertzog
On Tue, 26 May 2015, László Böszörményi (GCS) wrote: > I can do it myself, I've the build system for Squeeze as well. My > only question if it should be an NMU or am I allowed to change the > maintainer? At least the former would be a bit strange for me as I'm > the actual maintainer, why should I

Re: squeeze update of fuse?

2015-05-26 Thread GCS
Hi Santiago, On Tue, May 26, 2015 at 6:42 PM, Santiago Ruano Rincón wrote: > Please find the attached dpatch to prevent CVE-2015-3202 in squeeze. It > makes lib/mount_util.c use execle instead of execl to run external > helpers. > > Please, let me know if you want me to upload a patched package,

Re: squeeze update of fuse?

2015-05-26 Thread Santiago Ruano Rincón
Hi Laszlo, Please find the attached dpatch to prevent CVE-2015-3202 in squeeze. It makes lib/mount_util.c use execle instead of execl to run external helpers. Please, let me know if you want me to upload a patched package, or if you want to do it by yourself. Cheers, Santiago #! /bin/sh /usr/sh

squeeze update of fuse?

2015-05-22 Thread Raphael Hertzog
Control: found -1 2.8.4-1.1 Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of fuse: https://security-tracker.debian.org/tracker/CVE-2015-3202 Would you like to take care of this yourself? We are still understaff