Re: [SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities

2007-12-28 Thread Luk Claes
Jim Popovitch wrote: > On Fri, 2007-12-28 at 22:36 +0100, Martin Zobel-Helas wrote: >> On Fri Dec 28, 2007 at 22:10:08 +0100, Wolfgang Jeltsch wrote: >>> However, I cannot see any security announcement for most of these. Were >>> they >>> updated because of the security fix for tar? If yes, why

Re: [SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities

2007-12-28 Thread Jim Popovitch
On Fri, 2007-12-28 at 22:36 +0100, Martin Zobel-Helas wrote: > On Fri Dec 28, 2007 at 22:10:08 +0100, Wolfgang Jeltsch wrote: > > However, I cannot see any security announcement for most of these. Were > > they > > updated because of the security fix for tar? If yes, why doesn’t the > > securi

Re: [SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities

2007-12-28 Thread Martin Zobel-Helas
Hi, On Fri Dec 28, 2007 at 22:10:08 +0100, Wolfgang Jeltsch wrote: > Am Freitag, 28. Dezember 2007 16:29 schrieb Florian Weimer: > > > > Debian Security Advisory DSA-1438-1 [EMAIL PROTECTED] > > http://www.d

Re: [SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities

2007-12-28 Thread Wolfgang Jeltsch
Am Freitag, 28. Dezember 2007 16:29 schrieb Florian Weimer: > > Debian Security Advisory DSA-1438-1 [EMAIL PROTECTED] > http://www.debian.org/security/ Florian Weimer > December 28, 2