Re: squeeze update of fuse?

2015-06-02 Thread Santiago Ruano Rincón
El 01/06/15 a las 20:12, Mike Gabriel escribió: Hi Laszlo, - Original message - On Mon, Jun 1, 2015 at 3:36 PM, Mike Gabriel mike.gabr...@das-netzwerkteam.de wrote: On  Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: I consider this my fault - I had the

Re: squeeze update of fuse?

2015-06-02 Thread GCS
On Tue, Jun 2, 2015 at 2:21 PM, Santiago Ruano Rincón santiag...@riseup.net wrote: El 01/06/15 a las 20:12, Mike Gabriel escribió: I can look at the debdiff tomorrow, but maybe Santiago has time tonight for a quick review. I have build it and the package seems ok. Please, let me know if you

Re: squeeze update of fuse?

2015-06-01 Thread Santiago Ruano Rincón
El 30/05/15 a las 14:37, Mike Gabriel escribió: ... @Santiago: please put your name in data/dla-needed.txt when starting to work on an LTS package update. I put my name in for fuse yesterday and realized just now, that you already started working on fuse for squeeze-lts (which is great!!!).

Re: squeeze update of fuse?

2015-06-01 Thread GCS
Hi all, On Mon, Jun 1, 2015 at 11:17 AM, Santiago Ruano Rincón santiag...@riseup.net wrote: I didn't put my name since I László wanted to upload the package by himself, and dla-needed.txt had a link to his message in the list. But I'll do it next time, sorry. I consider this my fault - I had

Re: squeeze update of fuse?

2015-06-01 Thread GCS
On Mon, Jun 1, 2015 at 3:36 PM, Mike Gabriel mike.gabr...@das-netzwerkteam.de wrote: On Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: I consider this my fault - I had the assumption that Thorsten will or already did this. As he did with the ntfs-3g update for squeeze-lts[1].

Re: squeeze update of fuse?

2015-06-01 Thread Mike Gabriel
Hi Laszlo, - Original message - On Mon, Jun 1, 2015 at 3:36 PM, Mike Gabriel mike.gabr...@das-netzwerkteam.de wrote: On  Mo 01 Jun 2015 11:44:27 CEST, László Böszörményi (GCS) wrote: I consider this my fault - I had the assumption that Thorsten will or already did this. As he

Re: squeeze update of fuse?

2015-05-30 Thread Mike Gabriel
Hi László, hi Santiago, On Di 26 Mai 2015 21:33:01 CEST, László Böszörményi (GCS) wrote: Hi Santiago, On Tue, May 26, 2015 at 6:42 PM, Santiago Ruano Rincón santiag...@riseup.net wrote: Please find the attached dpatch to prevent CVE-2015-3202 in squeeze. It makes lib/mount_util.c use execle

Re: squeeze update of fuse?

2015-05-27 Thread Raphael Hertzog
On Tue, 26 May 2015, László Böszörményi (GCS) wrote: I can do it myself, I've the build system for Squeeze as well. My only question if it should be an NMU or am I allowed to change the maintainer? At least the former would be a bit strange for me as I'm the actual maintainer, why should I

Re: squeeze update of fuse?

2015-05-26 Thread Santiago Ruano Rincón
Hi Laszlo, Please find the attached dpatch to prevent CVE-2015-3202 in squeeze. It makes lib/mount_util.c use execle instead of execl to run external helpers. Please, let me know if you want me to upload a patched package, or if you want to do it by yourself. Cheers, Santiago #! /bin/sh

Re: squeeze update of fuse?

2015-05-26 Thread GCS
Hi Santiago, On Tue, May 26, 2015 at 6:42 PM, Santiago Ruano Rincón santiag...@riseup.net wrote: Please find the attached dpatch to prevent CVE-2015-3202 in squeeze. It makes lib/mount_util.c use execle instead of execl to run external helpers. Please, let me know if you want me to upload a

squeeze update of fuse?

2015-05-22 Thread Raphael Hertzog
Control: found -1 2.8.4-1.1 Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of fuse: https://security-tracker.debian.org/tracker/CVE-2015-3202 Would you like to take care of this yourself? We are still