Re: CVE-2019-15690/libvncserver: reference embedded copies in italc/ssvnc/tightvnc/veyon/vncsnapshot ?

2020-03-24 Thread Sylvain Beucler
Hi all, On 18/03/2020 19:27, Moritz Muehlenhoff wrote: > On Wed, Mar 18, 2020 at 06:14:36PM +0100, Sylvain Beucler wrote: >> I excluded 3 out of 8 packages. I only added packages that actually >> contain the impacted code (VNC client connection, using original RealVNC >> codebase). > > "Contains

Re: tor EOL in jessie

2020-03-24 Thread Holger Levsen
On Tue, Mar 24, 2020 at 03:23:26PM +, Peter Palfrader wrote: > On Tue, 24 Mar 2020, Emilio Pozuelo Monfort wrote: > > >> Upstream is no longer maintaining the 0.2.4.x tree. Maybe it's time to > > >> terminate support for Tor in wheezy/oldoldstable? > > > I think so. I have marked it as unsuppo

Re: tor EOL in jessie

2020-03-24 Thread Peter Palfrader
On Tue, 24 Mar 2020, Emilio Pozuelo Monfort wrote: > On 28/12/2017 11:48, Emilio Pozuelo Monfort wrote: > > On 04/12/17 13:31, Peter Palfrader wrote: > >> Upstream is no longer maintaining the 0.2.4.x tree. Maybe it's time to > >> terminate support for Tor in wheezy/oldoldstable? > > > > I think

tor EOL in jessie

2020-03-24 Thread Emilio Pozuelo Monfort
On 28/12/2017 11:48, Emilio Pozuelo Monfort wrote: > On 04/12/17 13:31, Peter Palfrader wrote: >> Upstream is no longer maintaining the 0.2.4.x tree. Maybe it's time to >> terminate support for Tor in wheezy/oldoldstable? > > I think so. I have marked it as unsupported in debian-security-support.