Re: CVE-2021-3121 stretch patch review request and request for test help

2021-03-19 Thread Ola Lundqvist
Hi I do not really think it is worth it. But that is more related to the fact that I have not understood what the security problem is. Yes, my site is down. It is concluded to be just ash right now. I have a backup so I should be able to upload the patch to somewhere else. // Ola On Thu, 18 Mar

cloud-init LTS update

2021-03-19 Thread Noah Meyerhans
I've prepared an update for cloud-init in stretch to fix CVE-2021-3429 (Bug #985540). For buster, after discussion with the stable security team, we've decided not to publish a DSA but instead to release the fix with the next stable point release. I haven't worked with LTS much, so I don't know i

Re: cloud-init LTS update

2021-03-19 Thread Utkarsh Gupta
Hi Noah, On Fri, Mar 19, 2021 at 11:32 PM Noah Meyerhans wrote: > The debdiff is attached. If somebody wants to take this and handle > uploading to LTS and whatever followup is needed, that's fine with me. > Otherwise, I can perform the upload if that's all that's required, but > I'd prefer to l

Re: cloud-init LTS update

2021-03-19 Thread Noah Meyerhans
On Sat, Mar 20, 2021 at 01:42:34AM +0530, Utkarsh Gupta wrote: > > The debdiff is attached. If somebody wants to take this and handle > > uploading to LTS and whatever followup is needed, that's fine with me. > > Otherwise, I can perform the upload if that's all that's required, but > > I'd prefer