Wheezy update of otrs2?

2017-09-24 Thread Markus Koschany
Dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of otrs2: https://security-tracker.debian.org/tracker/source-package/otrs2 Would you like to take care of this yourself? If yes, please follow the workflow we have defined

Re: Wheezy update of libofx?

2017-09-24 Thread Dylan Aïssi
Hi Thorsten, Sorry, I am completely snowed under with private life. So, please go ahead with libofx. Some links that could save your time: [1] is the upstream patch already apply in sid and buster. [2] is an example of ofx file that crash libofx. Best regards, Dylan [1] https://anonscm.debian.

Wheezy update of libofx?

2017-09-24 Thread Thorsten Alteholz
Hi Dylan, The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of libofx: https://security-tracker.debian.org/tracker/source-package/libofx Would you like to take care of this yourself? If yes, please follow the workflow we have defined here:

Wheezy update for lame

2017-09-24 Thread Hugo Lefeuvre
Hi, Over the past several weeks, I have been investigating various vulnerabilities in lame[0] which I couldn't reproduce on any Debian system. I have reported them to lame's upstream which claims they are duplicates of other already reported issues, with fixes available in the CVS (couldn't verify