On Mon, May 09, 2016 at 05:28:50pm +1000, Brian May wrote:
> Added CC Debian Libidn Team
>
> I now have fixed the packages libidn packages initially produced by
> Alessandro Ghedini and destined for wheezy-security and jessie-security.
> They now build fine.
>
> In parti
On Fri, Apr 22, 2016 at 03:17:19pm -0400, Antoine Beaupré wrote:
> On 2016-04-16 18:46:50, Alessandro Ghedini wrote:
> > On Tue, Apr 12, 2016 at 03:20:04PM -0400, Antoine Beaupré wrote:
> >> (Fixed list address, sorry for the duplicate.)
> >>
> >> Hi,
>
On Tue, Apr 12, 2016 at 03:20:04PM -0400, Antoine Beaupré wrote:
> (Fixed list address, sorry for the duplicate.)
>
> Hi,
>
> I have looked at porting the security fixes on the libidn package from
> squeeze to wheezy. As usual, signed test packages are available here:
>
> https://people.debian.o
On Fri, Jun 12, 2015 at 01:25:51PM +0200, Alessandro Ghedini wrote:
> On Wed, Jun 10, 2015 at 08:15:42PM +0200, Alessandro Ghedini wrote:
> > On Mon, Jun 08, 2015 at 06:54:55AM +0200, Santiago Ruano Rincón wrote:
> > > Hi,
> > >
> > > sqlite3's DSA-3252-
On Wed, Jun 10, 2015 at 08:15:42PM +0200, Alessandro Ghedini wrote:
> On Mon, Jun 08, 2015 at 06:54:55AM +0200, Santiago Ruano Rincón wrote:
> > Hi,
> >
> > sqlite3's DSA-3252-1 concerns three CVEs: CVE-2015-3414, CVE-2015-3415
> > and CVE-2015-3416. I've took
On Mon, Jun 08, 2015 at 06:54:55AM +0200, Santiago Ruano Rincón wrote:
> Hi,
>
> sqlite3's DSA-3252-1 concerns three CVEs: CVE-2015-3414, CVE-2015-3415
> and CVE-2015-3416. I've took a look on how they impact wheezy and
> squeeze, and as far as I can see, backporting CVE-2015-3414 and
> CVE-2015-3
On ven, apr 24, 2015 at 11:26:22 +0200, Raphael Hertzog wrote:
> Hello Alessandro,
Hi, and sorry for the delay.
> the Debian LTS team would like to fix the security issues which are
> currently open in the Squeeze version of curl:
> https://security-tracker.debian.org/tracker/CVE-2015-3143
> http
Hi Joachim,
> Raphael Hertzog wrote on 2015-04-10 21:33:
>
> > If that workflow is a burden to you, feel free to just prepare an
> > updated source package and send it to debian-lts@lists.debian.org
> > (via a debdiff, or with an URL pointing to the the source package,
> > or even with a pointer
