Re: [SECURITY] [DSA 4371-1] apt security update

2019-01-23 Thread Steve McIntyre
On Wed, Jan 23, 2019 at 12:19:28AM +, Ben Hutchings wrote: >On Tue, 2019-01-22 at 13:50 +, Steve McIntyre wrote: >> >> I can help with new jessie installation images, but it'll need a bit >> of prep work. debian-cd doesn't pull from security or lts by default. > >Would it be any easier to

Review and testing phpmyadmin for Jessie LTS

2019-01-23 Thread Lucas Kanashiro
Hi, I uploaded version 4.2.12-2+deb8u4 of phpmyadmin to: https://people.debian.org/~kanashiro/jessie_lts/phpmyadmin/ It has patches fixing CVE-2018-19968 and CVE-2018-19970. I did not have the time to determine whether jessie is affected by CVE-2018-19969 (requested by sunweaver), I did some sup

Re: Review and testing phpmyadmin for Jessie LTS

2019-01-23 Thread Hugo Lefeuvre
Hi Lucas, > I uploaded version 4.2.12-2+deb8u4 of phpmyadmin to: > > https://people.debian.org/~kanashiro/jessie_lts/phpmyadmin/ > > It has patches fixing CVE-2018-19968 and CVE-2018-19970. I did not have > the time to determine whether jessie is affected by CVE-2018-19969 > (requested by sunwea