About the security issues affecting fex in Squeeze

2015-03-10 Thread Raphael Hertzog
Hello Kilian,

the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/TEMP-000-AD275E
https://security-tracker.debian.org/tracker/source-package/fex

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).
That said the squeeze users would most certainly benefit from a fixed
package.

BTW contrary to what you said in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773751#5 this is the
only open security issue in squeeze, the others have been fixed by Thorsten
Alteholz in version 20100208+debian1-1+squeeze4, see
https://packages.qa.debian.org/f/fex/news/20140930T180401Z.html

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. However please make sure to
submit a tested package.

Thank you very much.

Raphaël Hertzog,
  on behalf of the Debian LTS team.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310093605.ga6...@home.ouaza.com



squeeze update of gnutls26?

2015-03-10 Thread Raphael Hertzog
Hello dear maintainer(s),

the Debian LTS team would like to fix the security issues which are
currently open in the Squeeze version of gnutls26:
https://security-tracker.debian.org/tracker/CVE-2014-8155
https://security-tracker.debian.org/tracker/CVE-2015-0294

Would you like to take care of this yourself? We are still understaffed so
any help is always highly appreciated.

If yes, please follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. Indicate clearly whether you
have tested the updated package or not.

If you don't want to take care of this update, it's not a problem, we
will do our best with your package. Just let us know whether you would
like to review and/or test the updated package before it gets released.

Thank you very much.

Raphaël Hertzog,
  on behalf of the Debian LTS team.

PS: A member of the LTS team might start working on this update at
any point in time. You can verify whether someone is registered
on this update in this file:
https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310094832.ga6...@home.ouaza.com



About the security issues affecting libjbcrypt-java in Squeeze

2015-03-10 Thread Raphael Hertzog
Hello dear maintainer(s),

the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/CVE-2015-0886

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).
That said the squeeze users would most certainly benefit from a fixed
package.

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. However please make sure to
submit a tested package.

Thank you very much.

Raphaël Hertzog,
  on behalf of the Debian LTS team.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310102758.ga8...@home.ouaza.com



libhtp / suricata unusable ?

2015-03-10 Thread Raphael Hertzog
Hello Moritz,

I saw that you marked (in commit 32723[1]) libhtp and suricata as no-dsa
on the ground that they are unusable in wheezy and that they will be
removed.

However I don't have any details about how this assessment has been made
and I'm interested to know to have an idea whether it applies to squeeze
as well.

Cheers,

[1] http://anonscm.debian.org/viewvc/secure-testing?view=revision&revision=32723
-- 
Raphaël Hertzog ◈ Writer/Consultant ◈ Debian Developer

Discover the Debian Administrator's Handbook:
→ http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310101453.ga7...@home.ouaza.com



Please remove me from the list!

2015-03-10 Thread Abel Guzman

Good day,

I have been trying to remove my self from this list for months. It just 
does not work.

Please help me.

Regards
Abel

On 03/10/2015 12:27 PM, Raphael Hertzog wrote:

Hello dear maintainer(s),

the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/CVE-2015-0886

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).
That said the squeeze users would most certainly benefit from a fixed
package.

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. However please make sure to
submit a tested package.

Thank you very much.

Raphaël Hertzog,
   on behalf of the Debian LTS team.



--
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54fecb7f.3070...@abelworld.com



Re: Please remove me from the list!

2015-03-10 Thread Raphael Hertzog
Hello Abel,

On Tue, 10 Mar 2015, Abel Guzman wrote:
> I have been trying to remove my self from this list for months. It just does
> not work. Please help me.

Did you try the unsubscription form at
https://lists.debian.org/debian-lts/ ?

And/or the instructions at the bottom of each mail:
> To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

And last resort, please get in touch with the listmasters as detailed
in the above instructions... by sending a mail to
listmas...@lists.debian.org, they can help you more effectively.

Regards,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310110754.gb8...@home.ouaza.com



Re: Please remove me from the list!

2015-03-10 Thread Abel Guzman

Good day,

Thank you for your answer.
I have done the unsubscription procedure using both methods a few times 
and it does not work for me.


I just did it again, so if your receive this message there should be a 
problem, isnt it?


Regards
Abel

On 03/10/2015 01:07 PM, Raphael Hertzog wrote:

Hello Abel,

On Tue, 10 Mar 2015, Abel Guzman wrote:

I have been trying to remove my self from this list for months. It just does
not work. Please help me.

Did you try the unsubscription form at
https://lists.debian.org/debian-lts/ ?

And/or the instructions at the bottom of each mail:

To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

And last resort, please get in touch with the listmasters as detailed
in the above instructions... by sending a mail to
listmas...@lists.debian.org, they can help you more effectively.

Regards,



--
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54fed2be.7030...@abelworld.com



Bug#780201: new codename needed for oldstable (due to squeeze-lts) when stable becomes oldstable

2015-03-10 Thread Holger Levsen
package: ftp.debian.org
x-debbugs-cc: debian-lts@lists.debian.org, debian-rele...@lists.debian.org

Hi,

when jessie will be released, wheezy will become oldstable and we'll need a 
new alias for squeeze, as various tools internally work with aliases. (The 
security tracker comes to my mind, but also the Release files it seems. And 
probably more.)

I believe it's the ftp teams duty / joy to decide this name and would like to 
ask you to do soon, so that various places can be prepared for the joyful day 
we release jessie.

Current suggestions I've heard (and liked) are "oldoldstable" and 
"veryoldstable".

I *dislike* "obsoletestable" and "stalestable" as they are either wrong 
(squeeze is not obsolete) or carry a bad connotation.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Re: Please remove me from the list!

2015-03-10 Thread Alexander Wirt
On Tue, 10 Mar 2015, Abel Guzman wrote:

> Good day,
> 
> Thank you for your answer.
> I have done the unsubscription procedure using both methods a few times and
> it does not work for me.
> 
> I just did it again, so if your receive this message there should be a
> problem, isnt it?
Thats wrong. You can post to the list without beeing a subscriber.

And I checked the subscriber lists, noone from your domain is subscribed to
any of our lists.

Alex - Debian Listmaster
 


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310115920.ge14...@formorer.de



Re: Bug#780201: new codename needed for oldstable (due to squeeze-lts) when stable becomes oldstable

2015-03-10 Thread Andreas Glaeser
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 10 Mar 2015 12:38:29 +0100
Holger Levsen  wrote:

> Hi,
> 
> when jessie will be released, wheezy will become oldstable and we'll need a 
> new alias for squeeze, as various tools internally work with aliases. (The 
> security tracker comes to my mind, but also the Release files it seems. And 
> probably more.)
> 
> I believe it's the ftp teams duty / joy to decide this name and would like to 
> ask you to do soon, so that various places can be prepared for the joyful day 
> we release jessie.
> 
> Current suggestions I've heard (and liked) are "oldoldstable" and 
> "veryoldstable".
> 
> I *dislike* "obsoletestable" and "stalestable" as they are either wrong 
> (squeeze is not obsolete) or carry a bad connotation.
> 
> 
> cheers,
>   Holger

What about 'extremely-stable' ??
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iEYEARECAAYFAlT+7YsACgkQ5+rBHyUt5wswlQCgoTTsQR5jUK3Om45xcPsD2Fgp
HdcAoIPmig3g9GkHaezwK9ASpJJbn047
=cwuW
-END PGP SIGNATURE-


About the security issues affecting macchanger in Squeeze

2015-03-10 Thread Raphael Hertzog
Hello dear maintainer(s),

the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/source-package/macchanger

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).
That said the squeeze users would most certainly benefit from a fixed
package.

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. However please make sure to
submit a tested package.

Thank you very much.

Raphaël Hertzog,
  on behalf of the Debian LTS team.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310144342.ga13...@home.ouaza.com



Re: Bug#780201: new codename needed for oldstable (due to squeeze-lts) when stable becomes oldstable

2015-03-10 Thread Bret Busby
On 10/03/2015, Andreas Glaeser  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On Tue, 10 Mar 2015 12:38:29 +0100
> Holger Levsen  wrote:
>
>> Hi,
>>
>> when jessie will be released, wheezy will become oldstable and we'll need
>> a
>> new alias for squeeze, as various tools internally work with aliases. (The
>>
>> security tracker comes to my mind, but also the Release files it seems.
>> And
>> probably more.)
>>
>> I believe it's the ftp teams duty / joy to decide this name and would like
>> to
>> ask you to do soon, so that various places can be prepared for the joyful
>> day
>> we release jessie.
>>
>> Current suggestions I've heard (and liked) are "oldoldstable" and
>> "veryoldstable".
>>
>> I *dislike* "obsoletestable" and "stalestable" as they are either wrong
>> (squeeze is not obsolete) or carry a bad connotation.
>>
>>
>> cheers,
>>  Holger
>
> What about 'extremely-stable' ??
>

Why not simply use the states
experimental
unstable
testing

and for the stable version
stable and version number (eg Debian7)

and all preceding versions,
version number
eg
Debian6 LTS
Debian 5
Debian4
etc

Seems logical, and, meaningful, and, simple enough to me.


-- 
Bret Busby
Armadale
West Australia
..

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992




-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cacx6j8octpd6fj4n2eje6t3jyqpsaggub3v+jn1y6+gu0bn...@mail.gmail.com



Does CVE-2015-1609 apply to squeeze's version of mongodb?

2015-03-10 Thread Raphael Hertzog
Hello Laszlo,

I'm wondering whether CVE-2015-1609 is affecting the squeeze version. The
code base is vastly different between 1.4.4 and the current supported
releases.

The upstream announces mentions that it affects all "production releases"
but 1.4.4 is not part of the current production releases AFAIU.

I don't have any specific knowledge of that codebase and would like to
have your analysis on this issue.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310152437.ga14...@home.ouaza.com



About the security issues affecting openldap in Squeeze

2015-03-10 Thread Raphael Hertzog
Hello dear maintainer(s),

the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/CVE-2015-1545

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).
(Note there are a few older issues that have been classified in
the same way:
https://security-tracker.debian.org/tracker/source-package/openldap)

That said the squeeze users would most certainly benefit from a fixed
package. 

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. However please make sure to
submit a tested package.

Thank you very much.

Raphaël Hertzog,
  on behalf of the Debian LTS team.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150310153350.ga14...@home.ouaza.com



Re: About the security issues affecting openldap in Squeeze

2015-03-10 Thread Ryan Tandy

On Tue, Mar 10, 2015 at 04:33:50PM +0100, Raphael Hertzog wrote:

Hello dear maintainer(s),


Hi,


the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/CVE-2015-1545

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).


OK.


That said the squeeze users would most certainly benefit from a fixed
package.

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development


We currently have a few patches pending or under discussion for wheezy. 
After the changes for stable are finalized, I hope to backport them to 
squeeze as well, when time permits.


Thanks for your work on LTS!

Ryan


signature.asc
Description: Digital signature


About the security issues affecting tcllib in Squeeze

2015-03-10 Thread Raphael Hertzog
Hello dear maintainer(s),

the Debian LTS team recently reviewed the security issue(s) affecting your
package in Squeeze:
https://security-tracker.debian.org/tracker/source-package/tcllib

We decided that we would not prepare a squeeze security update (usually
because the security impact is low and that we concentrate our limited
resources on higher severity issues and on the most widely used packages).
That said the squeeze users would most certainly benefit from a fixed
package.

If you want to work on such an update, you're welcome to do so. Please
try to follow the workflow we have defined here:
http://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org
(via a debdiff, or with an URL pointing to the the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. However please make sure to
submit a tested package.

Thank you very much.

Raphaël Hertzog,
  on behalf of the Debian LTS team.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2015031016.ga15...@home.ouaza.com



Re: Bug#780100: About the security issues affecting tcllib in Squeeze

2015-03-10 Thread Sergei Golovan
Hi Raphael,

On Tue, Mar 10, 2015 at 7:00 PM, Raphael Hertzog  wrote:
> Hello dear maintainer(s),
>
> the Debian LTS team recently reviewed the security issue(s) affecting your
> package in Squeeze:
> https://security-tracker.debian.org/tracker/source-package/tcllib
>
> We decided that we would not prepare a squeeze security update (usually
> because the security impact is low and that we concentrate our limited
> resources on higher severity issues and on the most widely used packages).
> That said the squeeze users would most certainly benefit from a fixed
> package.
>
> If you want to work on such an update, you're welcome to do so. Please

I'll prepare the package for squeeze LTS.

Cheers!
-- 
Sergei Golovan


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caoq2pxh-v3oggdlnbyh_wrgp3rwh0fftbeywt5kj6skzg7w...@mail.gmail.com



Re: About the security issues affecting tcllib in Squeeze

2015-03-10 Thread Sergei Golovan
Hi Raphael,

On Tue, Mar 10, 2015 at 7:00 PM, Raphael Hertzog  wrote:
> Hello dear maintainer(s),
>
> the Debian LTS team recently reviewed the security issue(s) affecting your
> package in Squeeze:
> https://security-tracker.debian.org/tracker/source-package/tcllib

I've prepared an updated package. I can upload it to squeeze-lts. What
else should I do?

Cheers!
-- 
Sergei Golovan


-- 
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAOq2pXGv_Rp1XOs-c2XupamW5fE=M9oAjxj8apbdEBLonc=m...@mail.gmail.com



Re: Does CVE-2015-1609 apply to squeeze's version of mongodb?

2015-03-10 Thread GCS
Hi Raphaël, others,

On Tue, Mar 10, 2015 at 4:24 PM, Raphael Hertzog  wrote:
> I'm wondering whether CVE-2015-1609 is affecting the squeeze version. The
> code base is vastly different between 1.4.4 and the current supported
> releases.
 I think it's not affected, but I'm not a security expert and don't
have the exploit to test it against 1.4.x versions. I think neither
the Wheezy version (v2.0) is affected. BSON support is modularized in
it, but can't find the affected file nor the function in the source.
It would be much better if someone with more security knowledge
approve or refute me in this matter.

> The upstream announces mentions that it affects all "production releases"
> but 1.4.4 is not part of the current production releases AFAIU.
 Sure, 1.4.4 is way too old, released in June, 2010. As I know, 2.4 to
3.0 versions are supported. But to answer your question, BSON support
was already part of MongoDB that time. It was integrated and was not a
separate part of the project that it's now. I think the modularity
came somewhere before the 2.0 versions (it was incremental in between,
1.5, 1.6 to 1.9 and so on).

> I don't have any specific knowledge of that codebase and would like to
> have your analysis on this issue.
 Beware, me neither have knowledge of the source in detail as I'm in
no affiliate with MongoDB, Inc. in any way.

Regards,
Laszlo/GCS


--
To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAKjSHr1uSiQzroVEBijq7i7zmTbe6z=dwb9xwsn+lkwzc5x...@mail.gmail.com



Re: About the security issues affecting tcllib in Squeeze

2015-03-10 Thread Holger Levsen
Hi Sergei,

On Dienstag, 10. März 2015, Sergei Golovan wrote:
> I've prepared an updated package. I can upload it to squeeze-lts. What
> else should I do?

please follow the procedure as described on 
https://wiki.debian.org/LTS/Development & thanks for your contributions to 
LTS!


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Re: squeeze update of axis?

2015-03-10 Thread Holger Levsen
Hi Markus,

On Mittwoch, 18. Februar 2015, Markus Koschany wrote:
> > I think this is a trivial update, the version of Axis hasn't changed
> > since Squeeze and it should be as simple as dropping the CVE-2014-3596
> > patch from axis/1.4-22 into the version 1.4-12 currently in Squeeze (it
> > also addresses CVE-2012-5784).
> I agree with Emmanuel. I have successfully built axis in Squeeze with
> the CVE patch. Please find attached the debdiff against the version in
> Squeeze.

Thanks! I've just uploaded a fixed axis package to squeeze-lts and will send 
out the announcement shortly!


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Re: Please remove me from the list!

2015-03-10 Thread Ben Hutchings
On Tue, 2015-03-10 at 12:59 +0100, Alexander Wirt wrote:
> On Tue, 10 Mar 2015, Abel Guzman wrote:
> 
> > Good day,
> > 
> > Thank you for your answer.
> > I have done the unsubscription procedure using both methods a few times and
> > it does not work for me.
> > 
> > I just did it again, so if your receive this message there should be a
> > problem, isnt it?
> Thats wrong. You can post to the list without beeing a subscriber.
> 
> And I checked the subscriber lists, noone from your domain is subscribed to
> any of our lists.

So I would guess Abel is subscribed under another address that is
forwarding to his current one.  The forwarding address should appear
somewhere in the 'Received' header lines.

Ben.

-- 
Ben Hutchings
Any smoothly functioning technology is indistinguishable from a rigged demo.


signature.asc
Description: This is a digitally signed message part


Re: Please remove me from the list!

2015-03-10 Thread Alexander Wirt
On Tue, 10 Mar 2015, Ben Hutchings wrote:

> On Tue, 2015-03-10 at 12:59 +0100, Alexander Wirt wrote:
> > On Tue, 10 Mar 2015, Abel Guzman wrote:
> > 
> > > Good day,
> > > 
> > > Thank you for your answer.
> > > I have done the unsubscription procedure using both methods a few times 
> > > and
> > > it does not work for me.
> > > 
> > > I just did it again, so if your receive this message there should be a
> > > problem, isnt it?
> > Thats wrong. You can post to the list without beeing a subscriber.
> > 
> > And I checked the subscriber lists, noone from your domain is subscribed to
> > any of our lists.
> 
> So I would guess Abel is subscribed under another address that is
> forwarding to his current one.  The forwarding address should appear
> somewhere in the 'Received' header lines.
If he still receives mail he should check the Return-Path of a mail received
from the list. It includes the subscriber address.

Alex



pgp9mkuJRrsIi.pgp
Description: PGP signature