Re: Support for ckeditor3 in Debian

2025-04-04 Thread Sylvain Beucler
Hello Security Team, On 21/03/2025 22:53, Sylvain Beucler wrote: On 12/08/2024 02:27, Mike Gabriel wrote: On  So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote: On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wrote: El 31/05/22 a las 05:42, Mike Gabriel escribió: > On  Mo

Re: Support for ckeditor3 in Debian

2025-04-03 Thread Moritz Mühlenhoff
Am Thu, Apr 03, 2025 at 04:15:27PM +0200 schrieb Sylvain Beucler: > Hello Security Team, > > I realized that ckeditor3 is not referenced in debian-security-support for > bullseye nor for bookworm. > > It was for buster-lts and stretch-lts: > https://lists.debian.org/debian-lts/2022/05/msg00060.ht

Re: Support for ckeditor3 in Debian

2025-03-21 Thread Sylvain Beucler
Hi Security Team, On 12/08/2024 02:27, Mike Gabriel wrote: Hi Moritz, hi Santiago, On  So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote: On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wrote: (I had tried to answer from the web debian-lts archive, and I don't know why f

Re: Support for ckeditor3 in Debian

2024-08-13 Thread Bastien Roucariès
Le lundi 12 août 2024, 16:15:53 UTC Bastien Roucariès a écrit : > Le lundi 12 août 2024, 00:27:17 UTC Mike Gabriel a écrit : > > Hi Moritz, hi Santiago, > > > > On So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote: > > > > > On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wr

Re: Support for ckeditor3 in Debian

2024-08-12 Thread Santiago Ruano Rincón
El 12/08/24 a las 00:27, Mike Gabriel escribió: > Hi Moritz, hi Santiago, > > On So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote: > > > On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wrote: > > > (I had tried to answer from the web debian-lts archive, and I don't know > >

Re: Support for ckeditor3 in Debian

2024-08-12 Thread Bastien Roucariès
Le lundi 12 août 2024, 00:27:17 UTC Mike Gabriel a écrit : > Hi Moritz, hi Santiago, > > On So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote: > > > On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wrote: > >> (I had tried to answer from the web debian-lts archive, and I don'

Re: Support for ckeditor3 in Debian

2024-08-11 Thread Mike Gabriel
Hi Moritz, hi Santiago, On So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote: On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wrote: (I had tried to answer from the web debian-lts archive, and I don't know why firefox ended up sending four empty emails to the list. Really

Re: Support for ckeditor3 in Debian

2024-08-11 Thread Moritz Muehlenhoff
On Sat, Aug 10, 2024 at 11:19:24AM -0300, Santiago Ruano Rincón wrote: > (I had tried to answer from the web debian-lts archive, and I don't know > why firefox ended up sending four empty emails to the list. Really sorry > for the noise) > > El 31/05/22 a las 05:42, Mike Gabriel escribió: > > Hi M

Re: Support for ckeditor3 in Debian

2024-08-10 Thread Santiago Ruano Rincón
(I had tried to answer from the web debian-lts archive, and I don't know why firefox ended up sending four empty emails to the list. Really sorry for the noise) El 31/05/22 a las 05:42, Mike Gabriel escribió: > Hi Moritz, Salvatore, Sylvain, > > On Mo 30 Mai 2022 20:04:14 CEST, Moritz Mühlenhoff

Re: Re: Support for ckeditor3 in Debian

2024-08-10 Thread Santiago Ruano Rincón

Re: Re: Support for ckeditor3 in Debian

2024-08-10 Thread Santiago Ruano Rincón

Re: Re: Support for ckeditor3 in Debian

2024-08-10 Thread Santiago Ruano Rincón

Re: Re: Support for ckeditor3 in Debian

2024-08-10 Thread Santiago Ruano Rincón

Re: Support for ckeditor3 in Debian

2023-05-23 Thread Moritz Mühlenhoff
Am Thu, Jun 02, 2022 at 01:03:36PM +0200 schrieb Moritz Muehlenhoff: > On Tue, May 31, 2022 at 05:42:00AM +, Mike Gabriel wrote: > > Hi Moritz, Salvatore, Sylvain, > > > > On Mo 30 Mai 2022 20:04:14 CEST, Moritz Mühlenhoff wrote: > > > > > Am Sun, May 29, 2022 at 09:36:43AM +0200 schrieb Sal

Re: Support for ckeditor3 in Debian

2022-06-02 Thread Moritz Muehlenhoff
On Tue, May 31, 2022 at 05:42:00AM +, Mike Gabriel wrote: > Hi Moritz, Salvatore, Sylvain, > > On Mo 30 Mai 2022 20:04:14 CEST, Moritz Mühlenhoff wrote: > > > Am Sun, May 29, 2022 at 09:36:43AM +0200 schrieb Salvatore Bonaccorso: > > > While this is discouraged in general, we could opt here

Re: Support for ckeditor3 in Debian

2022-05-30 Thread Mike Gabriel
Hi Moritz, Salvatore, Sylvain, On Mo 30 Mai 2022 20:04:14 CEST, Moritz Mühlenhoff wrote: Am Sun, May 29, 2022 at 09:36:43AM +0200 schrieb Salvatore Bonaccorso: While this is discouraged in general, we could opt here for this, to avoid that ckeditor3 might get additional users outside of php-h

Re: Support for ckeditor3 in Debian

2022-05-30 Thread Moritz Mühlenhoff
Am Sun, May 29, 2022 at 09:36:43AM +0200 schrieb Salvatore Bonaccorso: > While this is discouraged in general, we could opt here for this, to > avoid that ckeditor3 might get additional users outside of > php-horde-editor. This would also mean that only those bits of ckeditor3 which are actually u

Re: Support for ckeditor3 in Debian

2022-05-29 Thread Salvatore Bonaccorso
Hi, On Wed, May 25, 2022 at 03:33:11PM +0200, Sylvain Beucler wrote: > Hi, > > On 21/05/2022 12:06, Sylvain Beucler wrote: > > On 21/05/2022 10:45, Mike Gabriel wrote: > > > as I have a company interest in Horde and thus in ckeditor3, I'd be > > > happy to co-fund work hours on ckeditor3. Esp. be

Re: Support for ckeditor3 in Debian

2022-05-25 Thread Sylvain Beucler
Hi, On 21/05/2022 12:06, Sylvain Beucler wrote: On 21/05/2022 10:45, Mike Gabriel wrote: as I have a company interest in Horde and thus in ckeditor3, I'd be happy to co-fund work hours on ckeditor3. Esp. because ckeditor3 in unstable needs the same love as in LTS. And we are currently working

Re: Support for ckeditor3 in Debian

2022-05-21 Thread Sylvain Beucler
Hi Mike, On 21/05/2022 10:45, Mike Gabriel wrote: as I have a company interest in Horde and thus in ckeditor3, I'd be happy to co-fund work hours on ckeditor3. Esp. because ckeditor3 in unstable needs the same love as in LTS. And we are currently working on upgrading the company mailserver.

Re: Support for ckeditor3 in Debian

2022-05-21 Thread Mike Gabriel
Hi all, On Sa 21 Mai 2022 10:25:35 CEST, Sylvain Beucler wrote: Hi all, On 12/05/2022 08:35, Mike Gabriel wrote: On Tue, May 10, 2022 at 12:31:46PM +0200, Sylvain Beucler wrote: On 08/05/2022 21:17, Salvatore Bonaccorso wrote: Now, php-horde-editor is the only rdepends of ckeditor3. IMHO

Re: Support for ckeditor3 in Debian

2022-05-21 Thread Sylvain Beucler
Hi all, On 12/05/2022 08:35, Mike Gabriel wrote: On Tue, May 10, 2022 at 12:31:46PM +0200, Sylvain Beucler wrote: On 08/05/2022 21:17, Salvatore Bonaccorso wrote: Now, php-horde-editor is the only rdepends of ckeditor3. IMHO we need to do a re-evaluation of the current CVEs for ckeditor to se

Re: Support for ckeditor3 in Debian

2022-05-11 Thread Mike Gabriel
Hi all, On Tue, May 10, 2022 at 12:31:46PM +0200, Sylvain Beucler wrote: > Hello Salvatore, > > On 08/05/2022 21:17, Salvatore Bonaccorso wrote: > > On Fri, May 06, 2022 at 09:23:27PM +0200, Sylvain Beucler wrote: > > > Hello Security Team, > > > > > > I'm currently checking 'ckeditor' (v4), an

Re: Support for ckeditor3 in Debian

2022-05-10 Thread Sylvain Beucler
Hello Salvatore, On 08/05/2022 21:17, Salvatore Bonaccorso wrote: On Fri, May 06, 2022 at 09:23:27PM +0200, Sylvain Beucler wrote: Hello Security Team, I'm currently checking 'ckeditor' (v4), an HTML editor for web applications, currently v4), for vulnerabilities to fix. (I may send a separate

Re: Support for ckeditor3 in Debian

2022-05-08 Thread Salvatore Bonaccorso
Hi Sylvain, On Fri, May 06, 2022 at 09:23:27PM +0200, Sylvain Beucler wrote: > Hello Security Team, > > I'm currently checking 'ckeditor' (v4), an HTML editor for web applications, > currently v4), for vulnerabilities to fix. > (I may send a separate e-mail about this later) > > I noted that 'ck

Support for ckeditor3 in Debian

2022-05-06 Thread Sylvain Beucler
Hello Security Team, I'm currently checking 'ckeditor' (v4), an HTML editor for web applications, currently v4), for vulnerabilities to fix. (I may send a separate e-mail about this later) I noted that 'ckeditor3' (re-introduced as a dependency to horde in 2016) did not reference any vulnerab