Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread David MENTRE
Hello, Le 19/11/2014 15:09, Steve Kemp a écrit : Take a look at /etc/sysctl.conf, and the comments at the top of that file pointing to the man-page and other locations. Thank you for the quick answer. And thanks also to Joseph Hauptmann who answered even more quickly. ;-) Best regards,

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread Steve Kemp
On Wed Nov 19, 2014 at 14:57:13 +0100, David MENTRE wrote: > >so people are advised to keep kernel > >symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by > >default on Wheezy > > This setting is not set on my Wheezy machine. > > How can I set it permanently (i.e. across reboo

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread Sébastien NOBILI
Le mercredi 19 novembre 2014 à 15:12, Sébastien NOBILI a écrit : > Le mercredi 19 novembre 2014 à 14:57, David MENTRE a écrit : > > Le 19/11/2014 11:49, Yves-Alexis Perez a écrit : > > >so people are advised to keep kernel > > >symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread Sébastien NOBILI
Le mercredi 19 novembre 2014 à 14:57, David MENTRE a écrit : > Le 19/11/2014 11:49, Yves-Alexis Perez a écrit : > >so people are advised to keep kernel > >symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by > >default on Wheezy > > This setting is not set on my Wheezy machine.

Re: [SECURITY] [DSA 3074-2] php5 regression update

2014-11-19 Thread David MENTRE
Hello, Le 19/11/2014 11:49, Yves-Alexis Perez a écrit : so people are advised to keep kernel symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by default on Wheezy This setting is not set on my Wheezy machine. How can I set it permanently (i.e. across reboots). Best regard

Re: [SECURITY] [DSA 3074-1] php5 security update

2014-11-19 Thread Sébastien NOBILI
Hi, Le mercredi 19 novembre 2014 à 7:59, Yves-Alexis Perez a écrit : > Yes, we're aware of that and working on a quick regression update. Thanks for this (quick) update! Seb -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact

[sipgate Adminteam] Betreff: [SECURITY] [DSA 3074-1] php5 security update

2014-11-19 Thread sipgate Adminteam
##- Bitte geben Sie Ihre Antwort über dieser Zeile ein. -## [sipgate Adminteam] Betreff: [SECURITY] [DSA 3074-1] php5 security update Deine Anfrage (# 1849) wurde aktualisiert. Um darauf zu antworten, antworte einfach auf diese Mail. -- Aktualisiert v