Re: what do people think about having sandsifter in debian ?

2018-08-15 Thread Paul Wise
On Thu, Aug 16, 2018 at 8:50 AM, shirish शिरीष wrote: > First of all thank you for the whole team for keeping Debian as secure > as the people on the team do to keep Debian free from controversy ( at > least from the security viewpoint) . A few clarifications: debian-security@lists.debian.org is

Re: what do people think about having sandsifter in debian ?

2018-08-15 Thread shirish शिरीष
addition at bottom :- On 16/08/2018, shirish शिरीष wrote: > Dear all, > > First of all thank you for the whole team for keeping Debian as secure > as the people on the team do to keep Debian free from controversy ( at > least from the security viewpoint) . > > Please CC me as I'm not subscribed t

what do people think about having sandsifter in debian ?

2018-08-15 Thread shirish शिरीष
Dear all, First of all thank you for the whole team for keeping Debian as secure as the people on the team do to keep Debian free from controversy ( at least from the security viewpoint) . Please CC me as I'm not subscribed to the mailing list, sorry. I just came upon sandsifter today. While I h

Re: [SECURITY] [DSA 4272-1] linux security update

2018-08-15 Thread Salvatore Bonaccorso
Hi, On Wed, Aug 15, 2018 at 04:02:59PM +0200, Matus UHLAR - fantomas wrote: > Hello, > > On 14.08.18 21:52, Salvatore Bonaccorso wrote: > > CVE-2018-5391 (FragmentSmack) > > > >Juha-Matti Tilli discovered a flaw in the way the Linux kernel > >handled reassembly of fragmented IPv4 and IPv

Re: [SECURITY] [DSA 4272-1] linux security update

2018-08-15 Thread Matus UHLAR - fantomas
Hello, On 14.08.18 21:52, Salvatore Bonaccorso wrote: CVE-2018-5391 (FragmentSmack) Juha-Matti Tilli discovered a flaw in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker can take advantage of this flaw to trigger time and calculatio