NEW changes in oldstable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: linux_3.2.73-2_amd64.changes ACCEPT

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: charybdis_3.4.2-5~deb8u1_armel.changes ACCEPT Processing changes file: charybdis_3.4.2-5~deb8u1_mipsel.changes ACCEPT Processing changes file: systemd_215-17+deb8u3_armel.changes ACCEPT

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: systemd_215-17+deb8u3_armhf.changes ACCEPT Processing changes file: systemd_215-17+deb8u3_mipsel.changes ACCEPT

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: charybdis_3.4.2-5~deb8u1_armhf.changes ACCEPT

NEW changes in oldstable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: linux_3.2.73-2_armhf.changes ACCEPT Processing changes file: linux_3.2.73-2_i386.changes ACCEPT

NEW changes in oldstable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: linux_3.2.73-2_powerpc.changes ACCEPT

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: charybdis_3.4.2-5~deb8u1_mips.changes ACCEPT

NEW changes in oldstable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: linux_3.2.73-2_s390x.changes ACCEPT

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: charybdis_3.4.2-5~deb8u1_s390x.changes ACCEPT Processing changes file: systemd_215-17+deb8u3_powerpc.changes ACCEPT Processing changes file: systemd_215-17+deb8u3_s390x.changes ACCEPT

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: charybdis_3.4.2-5~deb8u1_arm64.changes ACCEPT Processing changes file: charybdis_3.4.2-5~deb8u1_i386.changes ACCEPT Processing changes file: charybdis_3.4.2-5~deb8u1_powerpc.changes ACCEPT Processing changes file: charybdis_3.4.2-5~deb8u1_ppc64el.changes ACCEPT Proc

NEW changes in oldstable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: linux_3.2.73-2_s390.changes ACCEPT

Bug#806166: wheezy-pu: package zendframework/1.11.13-1.1+deb7u5

2015-11-26 Thread David Prévot
Le 26/11/2015 17:23, Adam D. Barratt a écrit : > On Tue, 2015-11-24 at 19:16 -0400, David Prévot wrote: >> As per #806165 (Jessie pu request), this update aims to fix a security >> issue in zendframework: > Please go ahead. Uploaded and accepted, thanks. Regards David signature.asc Descripti

Bug#806165: jessie-pu: package zendframework/1.12.9+dfsg-2+deb8u5

2015-11-26 Thread David Prévot
Le 26/11/2015 17:22, Adam D. Barratt a écrit : > On Tue, 2015-11-24 at 19:12 -0400, David Prévot wrote: >> As agreed with the security team, this update aims to fix a security >> issue in zendframework > Please go ahead. Uploaded and accepted, thanks. Regards David signature.asc Description:

Bug#804172: jessie-pu: package spip/3.0.17-2+deb8u1

2015-11-26 Thread David Prévot
Le 26/11/2015 17:21, Adam D. Barratt a écrit : > On Thu, 2015-11-05 at 14:10 -0400, David Prévot wrote: >> As agreed with the security team, the two XSS fixes from the latest >> upstream version do not deserve a DSA, yet I’d like to fix them via pu > Please go ahead; sorry for the delay. Uploaded

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: gnome-orca_3.14.0-4+deb8u1_amd64.changes ACCEPT Processing changes file: libcommons-collections3-java_3.2.1-7+deb8u1_amd64.changes ACCEPT Processing changes file: nspr_4.10.7-1+deb8u1_source.changes ACCEPT Processing changes file: nspr_4.10.7-1+deb8u1_amd64.changes

Bug#806339: wheezy-pu: package libiptables-parse-perl/1.1-1+deb7u1

2015-11-26 Thread Salvatore Bonaccorso
Hi, On Thu, Nov 26, 2015 at 09:19:04PM +, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Thu, 2015-11-26 at 18:13 +0100, Salvatore Bonaccorso wrote: > > libiptables-parse-perl uses temporary files in an unsafe way, this was > > assigned CVE-2015-8326 and already fixed in unsta

Processed: Re: Bug#805293: jessie-pu: package systemd/215-17+deb8u3

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + pending Bug #805293 [release.debian.org] jessie-pu: package systemd/215-17+deb8u3 Added tag(s) pending. -- 805293: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805293 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#806338: jessie-pu: package libiptables-parse-perl/1.1-1+deb8u1

2015-11-26 Thread Salvatore Bonaccorso
Hi, On Thu, Nov 26, 2015 at 09:19:36PM +, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Thu, 2015-11-26 at 18:12 +0100, Salvatore Bonaccorso wrote: > > libiptables-parse-perl uses temporary files in an unsafe way, this was > > assigned CVE-2015-8326 and already fixed in unstabl

Bug#805293: jessie-pu: package systemd/215-17+deb8u3

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + pending On Sat, 2015-11-21 at 20:30 +0100, Michael Biebl wrote: > Am 21.11.2015 um 17:31 schrieb Julien Cristau: > > On Mon, Nov 16, 2015 at 18:22:05 +0100, Michael Biebl wrote: > >> I'd like to update the systemd package in stable to fix a few issues > > Thanks for the explanat

NEW changes in oldstable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: libcommons-collections3-java_3.2.1-5+deb7u1_amd64.changes ACCEPT Processing changes file: linux_3.2.73-2_multi.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u3_source.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u3_amd64.changes ACCEPT Proces

NEW changes in stable-new

2015-11-26 Thread Debian FTP Masters
Processing changes file: charybdis_3.4.2-5~deb8u1_amd64.changes ACCEPT Processing changes file: dpkg_1.17.26_amd64.changes ACCEPT Processing changes file: dpkg_1.17.26_arm64.changes ACCEPT Processing changes file: dpkg_1.17.26_armel.changes ACCEPT Processing changes file: dpkg_1.17.26_armhf

Bug#804172: jessie-pu: package spip/3.0.17-2+deb8u1

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2015-11-05 at 14:10 -0400, David Prévot wrote: > As agreed with the security team, the two XSS fixes from the latest > upstream version do not deserve a DSA, yet I’d like to fix them via pu > if you agree, debdiff attached. There is no upstream fix available (y

Processed: Re: Bug#806165: jessie-pu: package zendframework/1.12.9+dfsg-2+deb8u5

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #806165 [release.debian.org] jessie-pu: package zendframework/1.12.9+dfsg-2+deb8u5 Added tag(s) confirmed. -- 806165: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806165 Debian Bug Tracking System Contact ow...@bugs.debian.org with prob

Processed: Re: Bug#804172: jessie-pu: package spip/3.0.17-2+deb8u1

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #804172 [release.debian.org] jessie-pu: package spip/3.0.17-2+deb8u1 Added tag(s) confirmed. -- 804172: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804172 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#806166: wheezy-pu: package zendframework/1.11.13-1.1+deb7u5

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #806166 [release.debian.org] wheezy-pu: package zendframework/1.11.13-1.1+deb7u5 Added tag(s) confirmed. -- 806166: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806166 Debian Bug Tracking System Contact ow...@bugs.debian.org with proble

Bug#806165: jessie-pu: package zendframework/1.12.9+dfsg-2+deb8u5

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2015-11-24 at 19:12 -0400, David Prévot wrote: > As agreed with the security team, this update aims to fix a security > issue in zendframework (request for Wheezy follows) via pu. Please find > attached the debdiff, as well as the actual patch with some formati

Bug#806166: wheezy-pu: package zendframework/1.11.13-1.1+deb7u5

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2015-11-24 at 19:16 -0400, David Prévot wrote: > As per #806165 (Jessie pu request), this update aims to fix a security > issue in zendframework: > > * Backport security fix from 1.12.17: > - ZF2015-09: Fixed entropy issue in word CAPTCHA > http://

Processed: Re: Bug#805024: jessie-pu: package glance/2014.1.3-12 (CVE-2015-5251)

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + pending Bug #805024 [release.debian.org] jessie-pu: package glance/2014.1.3-12 (CVE-2015-5251) Added tag(s) pending. -- 805024: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805024 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#805127: jessie-pu: package charybdis/3.4.2-4+b1

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + pending On Wed, 2015-11-25 at 10:50 -0500, Antoine Beaupré wrote: > Control: fixed -1 3.4.2-5~deb8u1 > > On 2015-11-21 12:48:44, Adam D. Barratt wrote: > > Please go ahead. > > Done. Forgot to mention this bug report in the changelog though, but it > should end up in the pu qu

Processed: Re: Bug#805127: jessie-pu: package charybdis/3.4.2-4+b1

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + pending Bug #805127 [release.debian.org] jessie-pu: package charybdis/3.4.2-4+b1 Added tag(s) pending. -- 805127: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805127 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#806338: jessie-pu: package libiptables-parse-perl/1.1-1+deb8u1

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2015-11-26 at 18:12 +0100, Salvatore Bonaccorso wrote: > libiptables-parse-perl uses temporary files in an unsafe way, this was > assigned CVE-2015-8326 and already fixed in unstable with the 1.6-1 > upload. > > Attached is a debdiff to fix this issue for jess

Processed: Re: Bug#806339: wheezy-pu: package libiptables-parse-perl/1.1-1+deb7u1

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #806339 [release.debian.org] wheezy-pu: package libiptables-parse-perl/1.1-1+deb7u1 Added tag(s) confirmed. -- 806339: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806339 Debian Bug Tracking System Contact ow...@bugs.debian.org with pro

Bug#806339: wheezy-pu: package libiptables-parse-perl/1.1-1+deb7u1

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2015-11-26 at 18:13 +0100, Salvatore Bonaccorso wrote: > libiptables-parse-perl uses temporary files in an unsafe way, this was > assigned CVE-2015-8326 and already fixed in unstable with the 1.6-1 > upload. Please go ahead. Regards, Adam

Processed: Re: Bug#806338: jessie-pu: package libiptables-parse-perl/1.1-1+deb8u1

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #806338 [release.debian.org] jessie-pu: package libiptables-parse-perl/1.1-1+deb8u1 Added tag(s) confirmed. -- 806338: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806338 Debian Bug Tracking System Contact ow...@bugs.debian.org with pro

Bug#804734: jessie-pu: package gnome-orca/3.14.0-4

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + pending On Mon, 2015-11-23 at 00:00 +0100, Samuel Thibault wrote: > Hello, > > Julien Cristau, on Sat 21 Nov 2015 17:39:09 +0100, wrote: > > > Since speaking passwords out loud is a security issue, I'd like to > > > upload the attached change which backports the fix. > > > > G

Processed: Re: Bug#804734: jessie-pu: package gnome-orca/3.14.0-4

2015-11-26 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + pending Bug #804734 [release.debian.org] jessie-pu: package gnome-orca/3.14.0-4 Added tag(s) pending. -- 804734: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804734 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#805024: jessie-pu: package glance/2014.1.3-12 (CVE-2015-5251)

2015-11-26 Thread Adam D. Barratt
Control: tags -1 + pending On Mon, 2015-11-23 at 19:58 +, Adam D. Barratt wrote: > Control: tags -1 -moreinfo +confirmed > > On Mon, 2015-11-23 at 11:40 +0100, Thomas Goirand wrote: > > On 11/22/2015 07:04 PM, Adam D. Barratt wrote: > > > On Sun, 2015-11-22 at 18:25 +0100, Thomas Goirand wrot

Bug#806339: wheezy-pu: package libiptables-parse-perl/1.1-1+deb7u1

2015-11-26 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal Tags: wheezy User: release.debian@packages.debian.org Usertags: pu Hi libiptables-parse-perl uses temporary files in an unsafe way, this was assigned CVE-2015-8326 and already fixed in unstable with the 1.6-1 upload. Attached is a debd

Bug#806338: jessie-pu: package libiptables-parse-perl/1.1-1+deb8u1

2015-11-26 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi libiptables-parse-perl uses temporary files in an unsafe way, this was assigned CVE-2015-8326 and already fixed in unstable with the 1.6-1 upload. Attached is a debdiff to fix t