Bug reporting is contributing Was: fun with mailinglists Was: Is chromium updated?

2020-11-14 Thread Ulrike Uhlig
Hi! On 13.11.20 16:09, Georgi Guninski wrote: > On Fri, Nov 13, 2020 at 12:27 PM John Runyon wrote: >> >> Imagine calling yourself a “Debian contributor” because you... reported a >> few bugs? Guess I’m a Debian contributor too. >> > I was wrong about being _contributor_, sorry (misunderstood >

Re: Is chromium updated?

2020-11-13 Thread l0f4r0
Hi, 13 nov. 2020 à 11:06 de ggunin...@gmail.com: > Definitely won't say "thank you" to some entity which gives > me long unpatched important component like a web browser. > I confess that having an unpatched browser is really not recommended because of all exploits that could happen on the fly

Re: fun with mailinglists (was Re: Is chromium updated?)

2020-11-13 Thread Georgi Guninski
On Fri, Nov 13, 2020 at 12:27 PM John Runyon wrote: > > Imagine calling yourself a “Debian contributor” because you... reported a few > bugs? Guess I’m a Debian contributor too. > I was wrong about being _contributor_, sorry (misunderstood the definition).

Re: fun with mailinglists (was Re: Is chromium updated?)

2020-11-13 Thread Gian Piero Carrubba
* [Fri, Nov 13, 2020 at 05:26:56AM -0500] John Runyon: Why do we have such messages on the security mailing list? Is there a way to get actual security team announcements without all this spam? That's a job for debian-security-announce@l.d.o (please note the '-announce' suffix) Ciao, Gian

Re: fun with mailinglists (was Re: Is chromium updated?)

2020-11-13 Thread Emmanuel Halbwachs
John Runyon (Fri 2020-11-13 05:26:56 -0500) : > Why do we have such messages on the security mailing list? Is there a way to > get actual security team announcements without all this spam? Yes, there is such a list [1]. This list [2] is for (quote): Discussion about security issues,

Re: fun with mailinglists (was Re: Is chromium updated?)

2020-11-13 Thread Zhengbo Xiang
Come on man, if someone contributes, they contribute. Big or small. And sure, let's quiet down a bit~ Best, Alana X On Fri, Nov 13, 2020 at 7:27 PM John Runyon wrote: > Imagine calling yourself a “Debian contributor” because you... reported a > few bugs? Guess I’m a Debian contributor too. >

Re: fun with mailinglists (was Re: Is chromium updated?)

2020-11-13 Thread John Runyon
Imagine calling yourself a “Debian contributor” because you... reported a few bugs? Guess I’m a Debian contributor too. Why do we have such messages on the security mailing list? Is there a way to get actual security team announcements without all this spam? There is, after all, no shortage of

fun with mailinglists (was Re: Is chromium updated?)

2020-11-13 Thread Holger Levsen
On Fri, Nov 13, 2020 at 12:06:50PM +0200, Georgi Guninski wrote: > On Fri, Nov 13, 2020 at 10:21 AM Pavlos Ponos wrote: > > BUT we should not forget to say a THANK YOU to these guys which give their > > best in order all of us to use this OS for free ;-) > I believe I am debian contributor too,

Re: Is chromium updated?

2020-11-13 Thread Georgi Guninski
On Fri, Nov 13, 2020 at 10:21 AM Pavlos Ponos wrote: > BUT we should not forget to say a THANK YOU to these guys which give their > best in order all of us to use this OS for free ;-) I believe I am debian contributor too, search in google for: "georgi guninski" site:debian.org Definitely

Re: Is chromium updated?

2020-11-13 Thread Jörg Morbitzer
Hi, some brain storming: what about working together with the LinuxMint people, they just got a dedicated compiling machine, just for getting updated Chromium for LMDE in time: http://packages.linuxmint.com/list.php?release=Debbie Consolidating resources might do the trick here, Kind

Re: Is chromium updated?

2020-11-13 Thread Emmanuel Halbwachs
Hello, Pavlos Ponos (Fri 2020-11-13 10:20:36 +0200) : > BUT we should not forget to say a THANK YOU to these guys and gals > which give their best in order all of us to use this OS for free ;-) I was about to write the same thing: a big thank you to all volunteers. -- Emmanuel

Re: Is chromium updated?

2020-11-13 Thread Sven Hartge
On 17.10.20 14:28, Georgi Guninski wrote: Is Debian's chromium vulnerable now? Yes. The Team maintaining Chromium in Debian is clearly overloaded and understaffed and I am sure the Corona Crisis isn't helping here.

Re: Is chromium updated?

2020-11-12 Thread Georgi Guninski
So debian are distributing vulnerable Chromium since nearly a month? There is exploit (not sure about which OSes) in the wild. Debian are not commenting on this on this mailing list. Right?

Re: Is chromium updated?

2020-11-11 Thread Georgi Guninski
On Wed, Nov 11, 2020 at 9:46 PM wrote: > > Regarding CVE-2020-16009 , it > seems that some distros like Arch [1] have already updated their chromium > packages but no Debian yet. Right? > Right. > Is it just a matter of extracting the security

Re: Is chromium updated?

2020-11-11 Thread Georgi Guninski
On Thu, Nov 12, 2020 at 2:15 AM Lou Poppler wrote: > > You can follow debian's progress on this here: > > https://security-tracker.debian.org/tracker/CVE-2020-16009 > Hi, thanks for the link. I think your advice is incomplete and we should monitor the union of all vulnerabilities and CVEs, not

Re: Is chromium updated?

2020-11-11 Thread Lou Poppler
You can follow debian's progress on this here: https://security-tracker.debian.org/tracker/CVE-2020-16009 On Wed, 2020-11-11 at 20:46 +0100, l0f...@tuta.io wrote: > > Regarding CVE-2020-16009 , it > seems that some distros like Arch [1] have

Re: Is chromium updated?

2020-11-11 Thread l0f4r0
Hi, 8 nov. 2020 à 18:50 de ggunin...@gmail.com: > https://www.theregister.com/2020/11/04/google_chrome_critical_updates/ > > Wed 4 Nov 2020 > If you're an update laggard, buck up: Chrome zero-days are being > exploited in the wild > > Desktop and Android versions both at risk > Thanks Georgi for

Re: Is chromium updated?

2020-11-11 Thread Georgi Guninski
On Mon, Nov 9, 2020 at 6:31 PM Georgi Naplatanov wrote: > Chromium project doesn't provide > binaries for any OS. > Aren't these trustworthy daily builds?: https://download-chromium.appspot.com/

Re: Is chromium updated?

2020-11-09 Thread Georgi Naplatanov
Hi Georgi Guninski, what is your opinion, what should Linux users use for their daily work? Firefox becomes more and more buggier, Chromium project doesn't provide binaries for any OS. Kind regards Georgi On 11/8/20 7:50 PM, Georgi Guninski wrote: >

Re: Is chromium updated?

2020-11-08 Thread Georgi Guninski
https://www.theregister.com/2020/11/04/google_chrome_critical_updates/ Wed 4 Nov 2020 If you're an update laggard, buck up: Chrome zero-days are being exploited in the wild Desktop and Android versions both at risk On Sat, Oct 17, 2020 at 9:31 PM wrote: > > Hi, > > 17 oct. 2020 à 14:28 de

Re: Is chromium updated?

2020-10-17 Thread l0f4r0
Hi, 17 oct. 2020 à 14:28 de ggunin...@gmail.com: > On Debian stable, I have chromium Version: 83.0.4103.116-1~deb10u3 > > >From Arch advisory on 2020-10-10: > The package chromium before version 86.0.4240.75-1 is vulnerable to > multiple issues including arbitrary code execution, access

Is chromium updated?

2020-10-17 Thread Georgi Guninski
On Debian stable, I have chromium Version: 83.0.4103.116-1~deb10u3 >From Arch advisory on 2020-10-10: The package chromium before version 86.0.4240.75-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information disclosure and insufficient