Re: PHP5 status

2019-02-12 Thread Abhijith PA
On Tuesday 12 February 2019 09:36 PM, Roberto C. Sánchez wrote: > I did a fresh build and uploaded them here: > https://people.debian.org/~roberto/ This is enough, thanks. > I don't have a Salsa or other remote Git repository setup, as I just > work locally. --abhijith

Re: PHP5 status

2019-02-12 Thread Roberto C . Sánchez
On Tue, Feb 12, 2019 at 08:22:08PM +0530, Abhijith PA wrote: > > > On Tuesday 12 February 2019 08:14 PM, Roberto C. Sánchez wrote: > > .. > > It took me several tries to figure out why the 5.6.40 build failed after > > incorporating your change, but I was able to determine that the change > > in

Re: Bug#859122: about 500 DLAs missing from the website

2019-02-12 Thread Antoine Beaupré
On 2019-02-12 08:13:18, Salvatore Bonaccorso wrote: > Hi, > > On Sat, Feb 09, 2019 at 03:55:44AM +0100, Laura Arjona Reina wrote: >> * We still need the Apache redirects, so the people that try the old >> URLs (wether directly because they knew, or via the security tracker), >> find the files they

Re: PHP5 status

2019-02-12 Thread Abhijith PA
On Tuesday 12 February 2019 08:14 PM, Roberto C. Sánchez wrote: .. > It took me several tries to figure out why the 5.6.40 build failed after > incorporating your change, but I was able to determine that the change > introduced by your patch is now included upstream. I have an updated > 5.6.40

Re: PHP5 status

2019-02-12 Thread Roberto C . Sánchez
On Tue, Feb 12, 2019 at 07:44:41AM +0530, Abhijith PA wrote: > > That was very stupid of me. I was working on CVE-2018-1000888 in > php-pear and this ships via php5 in jessie. I didn't noticed php5 > already entered dla-needed.txt and I went directly changing php-pear to > php5. Anyway I release D

Re: Jessie update of libsdl1.2 and libsdl2?

2019-02-12 Thread Manuel A. Fernandez Montecelo
Hello, Em ter, 12 de fev de 2019 às 10:23, Ola Lundqvist escreveu: > > Thank you for letting us know. You are correct, no patches available yet. Same for me, I didn't even have the bandwidth available to update several SDL packages to their latest upstream versions (thanks Felix!). -- Manuel

Re: [pkg-golang-devel] [SECURITY] [DLA 1664-1] golang security update

2019-02-12 Thread Chris Lamb
Hi Emilio, > Also, can't we reduce this list further? Are all those packages using the > crypto > module? I can remove: * kxd * golang-bindata * golang-gogoprotobuf * golang-goprotobuf * ngrok * obfs4proxy * pt-websocket * slt I've gone-ahead and uploaded the rest. Regards, --

Re: tiff

2019-02-12 Thread Brian May
Hugo Lefeuvre writes: >> ++if (0x / tilew < spp) { > > I don't really like this patch... it has not been merged yet (the PR has > been closed, so I guess it will never get merged) and looks more like a > hack to me. > > What if tilew * spp = INT_MAX ? > > Then oskew + iskew will s

Re: Jessie update of libsdl1.2 and libsdl2?

2019-02-12 Thread Ola Lundqvist
Hi Thank you for letting us know. You are correct, no patches available yet. // Ola On Mon, 11 Feb 2019 at 23:31, Felix Geyer wrote: > Hi Ola, > > On 10.02.19 17:27, Ola Lundqvist wrote: > > Dear maintainers, > > > > The Debian LTS team would like to fix the security issues which are > > curre

Re: tiff

2019-02-12 Thread Hugo Lefeuvre
.. follow up of 20190212073152.ga2...@behemoth.owl.eu.com.local otherwise tests went fine. one more comment: > + * Non-maintainer upload by the LTS Team. > + * Fix CVE-2018-19210: NULL pointer dereference > +There is a NULL pointer dereference in the TIFFWriteDirectorySec function > +i