Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Patrick Schleizer
Dear security team! Paul Wise thinks this is a security issue Paul Wise: This is a security issue, [...] I was running: sudo apt-build install ccache And the output contained a message: WARNING: The following packages cannot be authenticated! ccache Authentication warning overridden.

Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Holger Levsen
Hi, I think you probably just need to run apt-get update before apt-get install... It's definitly not a security issue deserving the attention of the security team. cheers, Holger signature.asc Description: This is a digitally signed message part.

Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Patrick Schleizer
Holger Levsen: I think you probably just need to run apt-get update before apt-get install... I did that, I am sure of it. Reproduced this on two different systems. Cheers, Patrick -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Holger Levsen
Hi, On Donnerstag, 19. März 2015, Patrick Schleizer wrote: I think you probably just need to run apt-get update before apt-get install... I did that, I am sure of it. Reproduced this on two different systems. can you put the output of apt-get update and apt-cache policy on

External check

2015-03-19 Thread Raphael Geissert
CVE-2014-0219: RESERVED CVE-2015-1805: RESERVED -- The output might be a bit terse, but the above ids are known elsewhere, check the references in the tracker. The second part indicates the status of that id in the tracker at the moment the script was run. -- To UNSUBSCRIBE, email to

Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Cyril Brulebois
Patrick Schleizer adrela...@riseup.net (2015-03-18): Hi, I was running: sudo apt-build install ccache And the output contained a message: WARNING: The following packages cannot be authenticated! ccache Authentication warning overridden. Is this just how apt-build works or could

Re: [SECURITY] [DSA 3196-1] file security update

2015-03-19 Thread Alexander Cherepanov
On 2015-03-18 20:58, Moritz Muehlenhoff wrote: Package: file CVE ID : CVE-2014-9653 Hanno Boeck discovered that file's ELF parser Actually, my patch for this issues was posted and accepted before Hanno filed his bug report. MITRE got it right in their CVE assignment:

Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Patrick Schleizer
Holger Levsen: Hi, On Donnerstag, 19. März 2015, Patrick Schleizer wrote: I think you probably just need to run apt-get update before apt-get install... I did that, I am sure of it. Reproduced this on two different systems. can you put the output of apt-get update and apt-cache policy on

Re: apt-build - Authentication warning overridden. - security issue?

2015-03-19 Thread Patrick Schleizer
Cyril Brulebois: Patrick Schleizer adrela...@riseup.net (2015-03-18): Hi, I was running: sudo apt-build install ccache And the output contained a message: WARNING: The following packages cannot be authenticated! ccache Authentication warning overridden. Is this just how apt-build