Fix for dnsmasq breakage

2018-07-02 Thread Nick Hall
The recent update to the dns-root-data package in jessie changed its format which in causes dnsmasq to not be able to start up, which causes DNS servers running dnsmasq to not work. See debian bug # 858506 for more information for when this happened on stretch. The attached patch is taken from th

jetty CVE triage: jetty8 ignored?

2018-07-02 Thread Hugo Lefeuvre
Hi, I just noticed that jetty8 is almost never marked as affected by issues in jetty and jetty9. Is it intentional that jetty8 isn't listed whereas jetty and jetty9 are ? For example: - CVE-2018-12538: there is no obvious reason why jetty8 wouldn't be listed if jetty and jetty9 are. - CVE-20