Re: timing of PHP 5.6 security updates

2016-10-05 Thread tmc
On Wed, Oct 05, 2016 at 10:02:50PM +0200, Salvatore Bonaccorso wrote: > No timeline yet, but we have asked the php5 maintainer if he can > prepare the usual update for jessie-security based on 5.6.26. > > Regards, > Salvatore Many thanks. I will keep an eye out for it. Tomasz -- Tomasz M. Ci

Re: timing of PHP 5.6 security updates

2016-10-05 Thread Salvatore Bonaccorso
Hi Tomasz, On Wed, Oct 05, 2016 at 09:06:02PM +1100, tmc wrote: > Hi there > > is there any news as to when the PHP 5.6 packages in Jessie will be updated > to provide fixes for the recent batch of issues - > > CVE-2016-7124 CVE-2016-7125 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 > CVE-2016-7

timing of PHP 5.6 security updates

2016-10-05 Thread tmc
Hi there is there any news as to when the PHP 5.6 packages in Jessie will be updated to provide fixes for the recent batch of issues - CVE-2016-7124 CVE-2016-7125 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 CVE-2016-7131 CVE-2016-7132 CVE-2016-7411 CVE-2016-7412 CVE-2016-7413 CVE-2016-7414 CVE-2

Re: CVE-2016-7117 Remote code execution vulnerability in kernel networking subsystem

2016-10-05 Thread Salvatore Bonaccorso
Hi Jan, On Wed, Oct 05, 2016 at 09:49:28AM +0200, Jan Lühr wrote: > Hello, > > > Am 10/05/2016 um 06:52 AM schrieb Salvatore Bonaccorso: > > On Tue, Oct 04, 2016 at 11:54:12PM +0200, Jan Lühr wrote: > >> Hello, > >> Am 10/04/2016 um 07:57 PM schrieb Nicholas Luedtke: > >>> On 10/04/2016 11:40 AM

Re: CVE-2016-7117 Remote code execution vulnerability in kernel networking subsystem

2016-10-05 Thread Jan Lühr
Hello, Am 10/05/2016 um 06:52 AM schrieb Salvatore Bonaccorso: > On Tue, Oct 04, 2016 at 11:54:12PM +0200, Jan Lühr wrote: >> Hello, >> Am 10/04/2016 um 07:57 PM schrieb Nicholas Luedtke: >>> On 10/04/2016 11:40 AM, Felix Knecht wrote: >>> On 10/04/2016 06:38 PM, Jan Lühr wrote: > CVE-20