Re: About the security issues affecting openldap in Squeeze

2015-04-18 Thread Holger Levsen
Hi Ryan, On Samstag, 18. April 2015, Ryan Tandy wrote: > Uploaded openldap for squeeze-lts to mentors: [...] > Would a member of the LTS team be willing to sponsor it and announce the > update? The issues fixed are the same as DSA-3209-1, plus CVE-2012-1164. ok, cool! I'll upload and announce it

Re: About the security issues affecting openldap in Squeeze

2015-04-17 Thread Ryan Tandy
Hi, Uploaded openldap for squeeze-lts to mentors: http://mentors.debian.net/debian/pool/main/o/openldap/openldap_2.4.23-7.3+deb6u1.dsc Would a member of the LTS team be willing to sponsor it and announce the update? The issues fixed are the same as DSA-3209-1, plus CVE-2012-1164. I didn't re

Re: About the security issues affecting openldap in Squeeze

2015-04-13 Thread Ryan Tandy
On Mon, Apr 13, 2015 at 10:57:54PM +0200, Holger Levsen wrote: Ryan, I believe you might find some testers among the Debian Edu users, which uses openldap by default. Best if you couldd provide binary packages (amd64/i386) for download somewhere... Thanks for the suggestion. Uploaded UNRELEASED

Re: About the security issues affecting openldap in Squeeze

2015-04-13 Thread Holger Levsen
Hi debian-edu, is anyone of you using Squeeze and able to test Ryans updated packages? If you are interested, please reply to Ryan directly. On Mittwoch, 8. April 2015, Ryan Tandy wrote: > >>We currently have a few patches pending or under discussion for > >>wheezy. After the changes for stable

Re: About the security issues affecting openldap in Squeeze

2015-04-08 Thread Ryan Tandy
On Wed, Apr 08, 2015 at 11:10:42AM +0200, Thorsten Alteholz wrote: Hi Ryan, Hi! On Tue, 10 Mar 2015, Ryan Tandy wrote: We currently have a few patches pending or under discussion for wheezy. After the changes for stable are finalized, I hope to backport them to squeeze as well, when time pe

Re: About the security issues affecting openldap in Squeeze

2015-04-08 Thread Thorsten Alteholz
Hi Ryan, On Tue, 10 Mar 2015, Ryan Tandy wrote: We currently have a few patches pending or under discussion for wheezy. After the changes for stable are finalized, I hope to backport them to squeeze as well, when time permits. is there anything I can do for the Squeeze upload? Thorsten -

Re: About the security issues affecting openldap in Squeeze

2015-03-10 Thread Ryan Tandy
On Tue, Mar 10, 2015 at 04:33:50PM +0100, Raphael Hertzog wrote: Hello dear maintainer(s), Hi, the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/CVE-2015-1545 We decided that we would not prepare a squee

About the security issues affecting openldap in Squeeze

2015-03-10 Thread Raphael Hertzog
Hello dear maintainer(s), the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/CVE-2015-1545 We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we