June Debian (E)LTS Monthly Report for Scarlett Moore

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Here is my public monthly report. Thanks to our sponsors for making this possible, and to Freexian for handling the offering. https://www.freexian.com/lts/debian/#sponsors LTS: - - golang-yaml.v2 - buster: - CVE-2021-4235 - CVE-2022-3064

Debian (E)LTS Work May 2023

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Here is my public monthly report. Thanks to our sponsors for making this possible, and to Freexian for handling the offering. https://www.freexian.com/lts/debian/#sponsors LTS: - - golang-yaml.v2 - CVE-2021-4235 - CVE-2022-3064 - Add upstream

Re: Mentorship

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tuesday, March 21, 2023 11:06:00 AM MST Utkarsh Gupta wrote: > Hi Scarlett, > > On Tue, Mar 21, 2023 at 11:23 PM Scarlett Moore > > wrote: > > I am looking for someone who can mentor me through a security update or >

Mentorship

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello! I am looking for someone who can mentor me through a security update or two to get me going on contributing here and ELTS. I am a quick learn, once I get one under my belt. If anyone can spare a few extra moments to help me get started I wo

Re: Re: libappimage lts update

. Scarlett On Tue, Jan 24, 2023 at 7:48 AM Scarlett Moore wrote: > > I have done made myself very confused. That patch does not apply > though and will require further research. > I will reach out again when I am actually ready. > Sorry, > Scarlett > > > On Mon, Jan 23

Re: Re: libappimage lts update

I have done made myself very confused. That patch does not apply though and will require further research. I will reach out again when I am actually ready. Sorry, Scarlett On Mon, Jan 23, 2023 at 12:00 PM Scarlett Moore wrote: > > > > On Mon, Jan 23, 2023, 9:47 AM Utkarsh Gup

Re: Re: libappimage lts update

On Mon, Jan 23, 2023, 9:47 AM Utkarsh Gupta wrote: > Hi Scarlett, > > On Mon, Jan 23, 2023 at 6:43 PM Scarlett Moore > wrote: > > It turns out the issue affects 0.4 or earlier. Buster has 0.9.1 which was > > completely rewritten C -> C++ and not affected. While

Re: Re: libappimage lts update

Hello! It turns out the issue affects 0.4 or earlier. Buster has 0.9.1 which was completely rewritten C -> C++ and not affected. While I was looking forward to learning this process, I am happy libappimage is not vulnerable in Buster. Now the question is how does one get this blemish removed or s

libappimage lts update

. Thank you for any assistance in the matter. Scarlett Moore signature.asc Description: This is a digitally signed message part.