Re: squeeze-lts and the security tracker

2014-08-09 Thread Holger Levsen
Hi, On Samstag, 9. August 2014, Salvatore Bonaccorso wrote: > http://security-team.debian.org/security_tracker.html#setting-up-a-local-t > esting-instance ah, thanks. Though I managed to set it up already and partly have support for lts locally already :) Will post patches soon. cheers,

Re: squeeze-lts and the security tracker

2014-08-09 Thread Salvatore Bonaccorso
Hi, On Fri, Aug 08, 2014 at 11:54:48AM -0400, Michael Gilbert wrote: > On Fri, Aug 8, 2014 at 11:16 AM, Holger Levsen wrote: > > But then, this target (copied from update-backports(-*) is never called, > > just > > like update-backports. doc/security-team.d.o/security_tracker only mentions > > th

Re: N/A Re: [alerts-security] [DLA 20-1] munin security update

2014-08-09 Thread Matus UHLAR - fantomas
On 08/07/2014 04:48 PM, Holger Levsen wrote: Package: munin Version: 1.4.5-3+deb6u1 CVE ID : CVE-2012-3512 CVE-2013-6048 CVE-2013-6359 [ Christoph Biedl ] * munin-node: more secure state file handling, introducing a new plugin state directory root, owned by uid 0. Then

Re: [DLA 25-2] python2.6 regression update

2014-08-09 Thread Pascal Hambourg
Raphael Geissert a écrit : > On Friday 08 August 2014 20:29:44 Pascal Hambourg wrote: >> >> Raphael Geissert a écrit : >>> Package: python2.6 >>> Version: 2.6.6-8+deb6u2 >> AFAICS, this update is not available for i386, whereas the more recent >> openssl update is. Is this expected