Re: eglibc update for GHOST CVE-2015-0235

2015-01-28 Thread Thorsten Alteholz
Hi Thijs, On Wed, 28 Jan 2015, Raphael Hertzog wrote: Nor do I have a good understanding of who is working on LTS. People are hired by the hour, so if I send something to someone personally now it may just be that they're not working on LTS this week. hmm, not working on LTS doesn't mean that

Re: eglibc update for GHOST CVE-2015-0235

2015-01-28 Thread Raphael Hertzog
Hi Thijs, On Wed, 28 Jan 2015, Thijs Kinkhorst wrote: > It seems at least from my perspective that the LTS team is a loosely > defined consortium of individuals which makes sharing the embargoed > information problematic. If I have an embargoed issue I think there's > usually no problem sharing th

Re: eglibc update for GHOST CVE-2015-0235

2015-01-28 Thread Holger Levsen
Hi, On Mittwoch, 28. Januar 2015, Thijs Kinkhorst wrote: > It seems at least from my perspective that the LTS team is a loosely > defined consortium of individuals which makes sharing the embargoed > information problematic. If I have an embargoed issue I think there's > usually no problem sharing

Re: eglibc update for GHOST CVE-2015-0235

2015-01-28 Thread Thijs Kinkhorst
On Wed, January 28, 2015 11:29, Lucas Nussbaum wrote: > Yes, I was wondering how we could improve on the current status for the > handling of medium/high-severity issues, and I'm interested in the > Debian security team's opinion about that. > > Should the Debian LTS team apply to join the linux-di

Re: eglibc update for GHOST CVE-2015-0235

2015-01-28 Thread Lucas Nussbaum
Hi, On 28/01/15 at 11:13 +0100, Holger Levsen wrote: > Hi, > > On Mittwoch, 28. Januar 2015, Raphael Hertzog wrote: > > Of course we do! That said the current LTS team doesn't have access > > to embargoed information and thus nobody prepared the update in advance. > > Lucas now contacted me abou

Re: eglibc update for GHOST CVE-2015-0235

2015-01-28 Thread Holger Levsen
Hi, On Mittwoch, 28. Januar 2015, Raphael Hertzog wrote: > Of course we do! That said the current LTS team doesn't have access > to embargoed information and thus nobody prepared the update in advance. Lucas now contacted me about this and he said he would try to start with some informal discuss

New problem with GIMP plugin file-jpeg

2015-01-28 Thread Bret Busby
Hello. I have, in the last hour, tried to open a JPEG file, to crop it, using the GIMP. I was unable to open that file. I now can not open JPEG files with the GIMP. The error message returned, includes " GIMP Message Plug-in crashed: "file-jpeg" (/usr/lib/gimp/2.0/plug-ins/file-jpeg) The dyi

Re: End of life for MySQL 5.1

2015-01-28 Thread Florian Weimer
* Raphael Hertzog: > Hi, > > On Tue, 27 Jan 2015, Florian Weimer wrote: >> * Raphael Hertzog: >> >> >> - Try to backport fixes based on the 5.5.x interdiffs (since Oracle >> >> publishes no detailed bug details). Complicated, but could be done >> >> in collaboration with Red Hat, RHEL 6 is al

Re: End of life for MySQL 5.1

2015-01-28 Thread Raphael Hertzog
Hi, On Tue, 27 Jan 2015, Florian Weimer wrote: > * Raphael Hertzog: > > >> - Try to backport fixes based on the 5.5.x interdiffs (since Oracle > >> publishes no detailed bug details). Complicated, but could be done > >> in collaboration with Red Hat, RHEL 6 is also based on MySQL 5.1. > > > >