[PATCH 1/3] report-vuln: Use spaces instead of tabs

--- Hi, report-vuln has a mixture of tabs and spaces which made changing it hard so I changed everyting to spaces. O.k. to apply? Cheers, -- Guido bin/report-vuln | 292 1 file changed, 146 insertions(+), 146 deletions(-) diff --git a/bin

[PATCH 2/3] report-vuln: don't fail if description_from_list return None

If no description was found None is returned. This fixes Traceback (most recent call last): File "bin/report-vuln", line 237, in main() File "bin/report-vuln", line 234, in main gen_text(pkg, cve, affected=args.affected, blanks=args.blanks, severity=args.severity, cc=args.cc, cclist=

[PATCH 3/3] report-vuln: Support generation of mail headers

Address the bts already and put the CVEs in the subject. --- This can be further improved regards temp id handling, providing a better subject in case of only a single CVE, etc. but already makes like simpler. O.k. to apply? bin/report-vuln | 22 +++--- 1 file changed, 15 insert

Re: [PATCH 1/3] report-vuln: Use spaces instead of tabs

Hi Guido, > report-vuln has a mixture of tabs and spaces which made changing it hard > so I changed everyting to spaces. O.k. to apply? Python files with tabs? I *insist* you apply! Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk

Re: [PATCH 1/3] report-vuln: Use spaces instead of tabs

On Wed, Nov 29, 2017 at 09:48:54PM +0900, Chris Lamb wrote: > Hi Guido, > > > report-vuln has a mixture of tabs and spaces which made changing it hard > > so I changed everyting to spaces. O.k. to apply? > > Python files with tabs? I *insist* you apply! > Uggh. At least with all tabs I get to d

Re: [PATCH 1/3] report-vuln: Use spaces instead of tabs

Hi Guido, On Wed, Nov 29, 2017 at 01:45:47PM +0100, Guido Günther wrote: > --- > Hi, > report-vuln has a mixture of tabs and spaces which made changing it hard > so I changed everyting to spaces. O.k. to apply? Looks good, feel free to apply this one. Regards, Salvatore

Re: [PATCH 2/3] report-vuln: don't fail if description_from_list return None

Hi Guido, On Wed, Nov 29, 2017 at 01:46:06PM +0100, Guido Günther wrote: > If no description was found None is returned. This fixes > > Traceback (most recent call last): > File "bin/report-vuln", line 237, in > main() > File "bin/report-vuln", line 234, in main > gen_text(pkg, cve,

Re: [PATCH 1/3] report-vuln: Use spaces instead of tabs

Hi, On Wed, Nov 29, 2017 at 04:10:17PM +0100, Salvatore Bonaccorso wrote: > Hi Guido, > > On Wed, Nov 29, 2017 at 01:45:47PM +0100, Guido Günther wrote: > > --- > > Hi, > > report-vuln has a mixture of tabs and spaces which made changing it hard > > so I changed everyting to spaces. O.k. to apply?

Re: [PATCH 3/3] report-vuln: Support generation of mail headers

Hi Guido, On Wed, Nov 29, 2017 at 01:48:02PM +0100, Guido Günther wrote: > Address the bts already and put the CVEs in the subject. > > --- > This can be further improved regards temp id handling, providing a > better subject in case of only a single CVE, etc. but already makes like > simpler. O.

Re: [PATCH 3/3] report-vuln: Support generation of mail headers

Hi, On Wed, Nov 29, 2017 at 04:24:54PM +0100, Salvatore Bonaccorso wrote: > Hi Guido, > > On Wed, Nov 29, 2017 at 01:48:02PM +0100, Guido Günther wrote: > > Address the bts already and put the CVEs in the subject. > > > > --- > > This can be further improved regards temp id handling, providing a

Re: [PATCH 3/3] report-vuln: Support generation of mail headers

Hi Guido, On Wed, Nov 29, 2017 at 04:49:41PM +0100, Guido Günther wrote: > Hi, > On Wed, Nov 29, 2017 at 04:24:54PM +0100, Salvatore Bonaccorso wrote: > > Hi Guido, > > > > On Wed, Nov 29, 2017 at 01:48:02PM +0100, Guido Günther wrote: > > > Address the bts already and put the CVEs in the subject

Contact maintainers via bts [was Re: Debconf 2017 LTS BoF Summary]

Hi, On Wed, Aug 09, 2017 at 07:11:16AM -0400, Roberto C. Sánchez wrote: > Hi Guido & LTS/Security folks, > > Thanks very much for publishing this summary. Since I was not able to > participate in person I would like add a few thoughts. See my comments > below inline. > > On Wed, Aug 09, 2017 at

CVE-2017-14988 in openexr

Hi security team, looking at the above CVE I wonder if this shouldn't be no-dsa (postponed). The memory is allocated during new which can fail and there's basically no sane default to cap the reservation at a sane value. Running with 'ASAN_OPTIONS=allocator_may_return_null=1' gives a convert:

Re: [PATCH 3/3] report-vuln: Support generation of mail headers

Hi, On Wed, Nov 29, 2017 at 08:25:49PM +0100, Salvatore Bonaccorso wrote: > Hi Guido, > > On Wed, Nov 29, 2017 at 04:49:41PM +0100, Guido Günther wrote: > > Hi, > > On Wed, Nov 29, 2017 at 04:24:54PM +0100, Salvatore Bonaccorso wrote: > > > Hi Guido, > > > > > > On Wed, Nov 29, 2017 at 01:48:02PM