Re: [SECURITY] [DSA 3547-1] imagemagick security update

2016-04-13 Thread Julien Cristau
On Tue, Apr 12, 2016 at 20:29:21 -0300, Henrique de Moraes Holschuh wrote: > On Tue, Apr 12, 2016, at 16:37, Michael Stone wrote: > > On Tue, Apr 12, 2016 at 04:19:20PM -0300, Henrique de Moraes Holschuh > > wrote: > > >And if you need to access security.debian.org over IPv6, "too bad". > > > > H

Upcoming oldstable point release (7.11)

2016-05-21 Thread Julien Cristau
Hi, The next (and last) point release for "wheezy" (7.11) is scheduled for Saturday, June 4th. Processing of new uploads into wheezy-proposed-updates will be frozen during the preceding weekend. Cheers, Julien

Upcoming stable point release (8.5)

2016-05-21 Thread Julien Cristau
Hi, The next point release for "jessie" (8.5) is scheduled for Saturday, June 4th. Processing of new uploads into jessie-proposed-updates will be frozen during the preceding weekend. Cheers, Julien

Re: [release-notes/stretch] Release notes sign-off from the security team

2017-05-01 Thread Julien Cristau
On Mon, Apr 3, 2017 at 20:43:08 +0200, Florian Weimer wrote: > * Niels Thykier: > > > There is a security team related item in the release checklist where we > > need input from the you[1]: > > > > Items are: > > * release-notes: Security Team signoff for lower supported packages > > > > Please

Re: [release-notes/stretch] Release notes sign-off from the security team

2017-05-01 Thread Julien Cristau
On Mon, May 1, 2017 at 15:14:10 +0200, Florian Weimer wrote: > * Julien Cristau: > > > The current state for the release notes is actually at > > https://www.debian.org/releases/stretch/releasenotes > > It's not clear based on the architecture list in this docume

Re: [SECURITY] [DSA 3995-1] libxfont security update

2017-10-16 Thread Julien Cristau
I don't believe it does. The only relevant piece of software I'm aware of from a security point of view is Xorg, which uses libxfont2 in stretch. Julien On October 16, 2017 6:56:40 PM GMT+02:00, Adrian Bunk wrote: >On Tue, Oct 10, 2017 at 09:22:11PM +0200, Moritz Muehlenhoff wrote: >> >--

Re: Problems with shim and shim-signed in unstable, and proposed solutions to unblock us

2019-03-06 Thread Julien Cristau
On Sun, Mar 3, 2019 at 23:35:45 +, Steve McIntyre wrote: > So, we're looking at three hacky options options here to work our way > out of this hole. In (probably?) descending order of hackitude: > > 1. Ask the nice ftpmaster people to bodge the archive by hand: [...] > > OR

discontinuing rsync service on security.debian.org

2019-11-15 Thread Julien Cristau
Hi, For a long time, the Debian security mirrors have served the security archive via both HTTP and rsync. As part of improving the reliability of security.debian.org for our users, the Debian mirrors team is going to separate those services to different host names: - http://security.debian.org/d

rsync service on security.debian.org discontinued (use rsync.security.d.o instead)

2020-03-24 Thread Julien Cristau
Hi all, As a reminder, in November[0] I wrote: > For a long time, the Debian security mirrors have served the security > archive via both HTTP and rsync. As part of improving the reliability > of security.debian.org for our users, the Debian mirrors team is going > to separate those services to

Re: [SECURITY] [DSA 2189-1] chromium-browser security update

2011-03-10 Thread Julien Cristau
On Thu, Mar 10, 2011 at 18:22:58 +0100, Giuseppe Iuculano wrote: > In addition, this upload fixes the following issues (they don't have a CVE id > yet): > > Out-of-bounds read in text searching [69640] > Memory corruption in SVG fonts. [72134] > Memory corruption with counter nodes. [69628] >

Re: [SECURITY] [DSA 2552-1] tiff security update

2012-09-27 Thread Julien Cristau
On Wed, Sep 26, 2012 at 18:55:26 -0300, Luciano Bello wrote: > For the stable distribution (squeeze), these problems have been fixed in > version 3.9.4-5+squeeze5. > > For the testing distribution (wheezy), these problems have been fixed in > version 4.0.2-2. > > For the unstable distribution (s