Re: policykit-1 CVE-2018-19788 in jessie

2018-12-30 Thread Santiago Ruano Rincón
El 20/12/18 a las 12:57, Moritz Muehlenhoff escribió: > On Thu, Dec 20, 2018 at 03:11:49PM +0530, Abhijith PA wrote: > > Hi Santiago, > > > > On Thursday 20 December 2018 01:00 AM, Santiago Ruano Rincón wrote: > > > Dear Maintainers, > > > > > > (It seems my first attempt to send this mail failed

testing wireshark for Jessie LTS and Wheezy ELTS

2018-12-30 Thread Thorsten Alteholz
Hi everybody, I uploaded version 1.12.1+g01b65bf-4+deb8u16 of wireshark to: https://people.debian.org/~alteholz/packages/jessie-lts/wireshark/ I also uploaded version 1.12.1+g01b65bf-4+deb8u6~deb7u13 of wireshark to: https://people.debian.org/~alteholz/packages/wheezy-elts/wireshark/ Please

Re: RFC: proposed fix for CVE-2018-19518 in uw-imap

2018-12-30 Thread Roberto C . Sánchez
Hi Salvatore, On Sun, Dec 30, 2018 at 09:38:57AM +0100, Salvatore Bonaccorso wrote: > > There is an alternative approach wich was raised by Magnus in the > respective bug: https://bugs.debian.org/914632#12 (and see followup > from Moritz). > I suppose I should have looked more carefully at the

Re: RFC: proposed fix for CVE-2018-19518 in uw-imap

2018-12-30 Thread Shelby Cruver
Unsubscribe me please On December 30, 2018 1:38:57 AM MST, Salvatore Bonaccorso wrote: >Hi Roberto, > >On Sat, Dec 29, 2018 at 10:24:40AM -0500, Roberto C. Sánchez wrote: >> On Sat, Dec 22, 2018 at 10:27:18PM -0500, Roberto C. Sánchez wrote: >> > [note: I am not subscribed to debian-security; pl

LTS report for December 2018 - Abhijith PA

2018-12-30 Thread Abhijith PA
December 2018 was my 11th month as a Debian LTS paid contributor. I was assigned 8 hours and I spend all of them for the following: * pdns/pdns-recursor: Spend some time working on CVE-2018-10851. But it will going to be a no-DSA as it was. * libvncserver: Fixed CVE-2018-15127, CVE-2018-20019,

Re: RFC: proposed fix for CVE-2018-19518 in uw-imap

2018-12-30 Thread Salvatore Bonaccorso
Hi Roberto, On Sat, Dec 29, 2018 at 10:24:40AM -0500, Roberto C. Sánchez wrote: > On Sat, Dec 22, 2018 at 10:27:18PM -0500, Roberto C. Sánchez wrote: > > [note: I am not subscribed to debian-security; please keep me or > > debian-lts addressed on replies] > > > > If this seems like a sensible app