tomcat6 squeeze-lts packages available for test, CVE-2014-0227 and CVE-2014-0230

2015-05-15 Thread Santiago Ruano Rincón
Hi, I've prepared a tomcat6 package with the patches I've recently submitted to the BTS concerning CVE-2014-0227 and CVE-2014-0230. I haven't found a test-case for the CVEs and I have been unable to test the vulnerability by myself. Although, I have tested the basic tomcat6 functionnalities. The

Re: squeeze update of dnsmasq?

2015-05-15 Thread Santiago Ruano Rincón
Hi Simon, On Thu, May 14, 2015 at 09:57:24PM +0100, Simon Kelley wrote: > Hi Raphael. > > I'm over-committed trying to get the long-overdue 2.73 release of > dnsmasq out at the moment, so if the LTS team could handle the Debian > mechanics of this, that would really help me. > In that case, I

Re: squeeze update of libmodule-signature-perl?

2015-05-15 Thread Salvatore Bonaccorso
Hi, On Fri, Apr 24, 2015 at 06:36:28AM +0200, Salvatore Bonaccorso wrote: > Hi Raphael, > > On Mon, Apr 20, 2015 at 03:54:51PM +0200, Raphael Hertzog wrote: > > Hello dear maintainer(s), > > > > the Debian LTS team would like to fix the security issues which are > > currently open in the Squeeze

Re: Updating dpkg in squeeze-lts

2015-05-15 Thread Ben Hutchings
On Sun, 2015-05-03 at 16:52 +0200, Guillem Jover wrote: > On Fri, 2015-05-01 at 13:24:56 +0100, Ben Hutchings wrote: > > On Fri, 2015-05-01 at 05:51 +0200, Guillem Jover wrote: > > > Although I cannot fetch from the repo: > > > > > > ,--- > > > $ git pull http://git.decadent.org.uk/git/dpkg.git 1.