Re: Samba Root CVE-2012-1182 - Possibly countered with hardening@compiletime ?

2012-04-17 Thread Michael Gilbert
On Tue, Apr 17, 2012 at 6:15 AM, Crusty Saint wrote: > Hi, > > Regarding https://www.samba.org/samba/security/CVE-2012-1182 > > I'm currently step-by-step looking into compiling my own debs and > recompiling existing once ( ignoring that optimisations are often > overrated ) What i'm most intereste

Re: security fix prevent Gajim to be run

2012-04-17 Thread Nico Golde
Hi, * Yann Leboulanger [2012-04-17 13:30]: > Your last upload about Gajim package (0.13.4-3+squeeze2) prevent Gajim to be > run if you don't have latex / dvipng installed. Makes sense, I had this installed when I tested the upgrade. > many bugs have already been opened about that: > #668710 > #

security fix prevent Gajim to be run

2012-04-17 Thread Yann Leboulanger
Hi, Your last upload about Gajim package (0.13.4-3+squeeze2) prevent Gajim to be run if you don't have latex / dvipng installed. many bugs have already been opened about that: #668710 #669100 #669105 #669106 The solution is to move this os.rename inside a "if exitcode == 0:" test, to be sure

Samba Root CVE-2012-1182 - Possibly countered with hardening@compiletime ?

2012-04-17 Thread Crusty Saint
Hi, Regarding https://www.samba.org/samba/security/CVE-2012-1182 I'm currently step-by-step looking into compiling my own debs and recompiling existing once ( ignoring that optimisations are often overrated ) What i'm most interested in though is the hardening@compile-time of packages. Even if th