Re: Extended Security Support

2014-06-11 Thread Matus UHLAR - fantomas
On 11.06.14 13:40, Jörg Stephan wrote: i just wanne ask what the current status of the LTS support is. too broad question... Especially regarding the new openSSL bug. does this answer? https://lists.debian.org/debian-lts-announce/2014/06/msg2.html -- Matus UHLAR - fantomas, uh...@fant

Extended Security Support

2014-06-11 Thread Jörg Stephan
Good morning guys, i just wanne ask what the current status of the LTS support is. Especially regarding the new openSSL bug. Cheers -- Should you have any further questions, please do not hesitate to contact us. Best regards, Joerg Stephan Head of Systemadministration Chief Information Securi

Re: Fw: Re: [SECURITY] [DSA 2954-1] dovecot security update

2014-06-11 Thread Dominic Hargreaves
On Wed, Jun 11, 2014 at 09:14:45AM +0200, Salvatore Bonaccorso wrote: > Hi, > > On Mon, Jun 09, 2014 at 10:51:48PM +0200, Andrea Zwirner wrote: > > Uops, I've erroneously sent this question to debian-security. They will > > (justly) kill me! > > > > Before it happens, just let me ask you if fix

Re: Fw: Re: [SECURITY] [DSA 2954-1] dovecot security update

2014-06-11 Thread Thijs Kinkhorst
On Wed, June 11, 2014 09:14, Salvatore Bonaccorso wrote: > Before I release the package, if somebody has a further dovecot > instance running under squeeze there are prepared packages for amd64 > under: > > http://people.debian.org/~carnil/tmp/dovecot/ Confirmed that it would without problems in o

Re: Fw: Re: [SECURITY] [DSA 2954-1] dovecot security update

2014-06-11 Thread matteo filippetto
2014-06-11 9:14 GMT+02:00 Salvatore Bonaccorso : > Hi, > > On Mon, Jun 09, 2014 at 10:51:48PM +0200, Andrea Zwirner wrote: >> Uops, I've erroneously sent this question to debian-security. They will >> (justly) kill me! >> >> Before it happens, just let me ask you if fixing CVE-2014-3430 is planned

Re: Fw: Re: [SECURITY] [DSA 2954-1] dovecot security update

2014-06-11 Thread Salvatore Bonaccorso
Hi, On Mon, Jun 09, 2014 at 10:51:48PM +0200, Andrea Zwirner wrote: > Uops, I've erroneously sent this question to debian-security. They will > (justly) kill me! > > Before it happens, just let me ask you if fixing CVE-2014-3430 is planned in > LTS. :-) Before I release the package, if somebo