Re: TCPDump Version

2017-02-07 Thread Tyler Hicks
On 02/06/2017 03:43 AM, Gianfranco Costamagna wrote: > Hello Ubuntu Security Team, > >> tcpdump (4.7.4-1ubuntu1) wily; urgency=low >> -- Gianfranco Costamagna Fri, 29 May >> 2015 20:13:33 +0200 > > since this happen to be me doing the merges... > lets do this: > > apparently Debian used 4.9.

Re: TCPDump Version

2017-02-07 Thread Gianfranco Costamagna
Hello Ubuntu Security Team, > tcpdump (4.7.4-1ubuntu1) wily; urgency=low > -- Gianfranco Costamagna Fri, 29 May > 2015 20:13:33 +0200 since this happen to be me doing the merges... lets do this: apparently Debian used 4.9.0 to stable-release update tcpdump. They might have their good reasons

Re: TCPDump Version

2017-02-07 Thread Gianfranco Costamagna
Hello Ubuntu Security Team, > tcpdump (4.7.4-1ubuntu1) wily; urgency=low > -- Gianfranco Costamagna Fri, 29 May > 2015 20:13:33 +0200 since this happen to be me doing the merges... lets do this: apparently Debian used 4.9.0 to stable-release update tcpdump. They might have their good reasons

Re: TCPDump Version

2017-02-07 Thread Sephiroth Storm
The vulnerabilities can be found here: https://isc.sans.edu/forums/diary/Multiple+Vulnerabilities+in+tcpdump/22017/ When it comes to the backport updates, how can I tell if backport has updated the specific software I need updated? On Sat, Feb 4, 2017 at 5:16 AM, Robie Basak wrote: > On Fri, Fe

Re: TCPDump Version

2017-02-06 Thread Gianfranco Costamagna
Hello Ubuntu Security Team, > tcpdump (4.7.4-1ubuntu1) wily; urgency=low > -- Gianfranco Costamagna Fri, 29 May > 2015 20:13:33 +0200 since this happen to be me doing the merges... lets do this: apparently Debian used 4.9.0 to stable-release update tcpdump. They might have their good reasons

Re: TCPDump Version

2017-02-04 Thread J Fernyhough
On 04/02/17 10:16, Robie Basak wrote: > Therefore you > cannot use the upstream version number as an indicator of whether > security vulnerabilities exist or not in any distribution package. > To expand again for this particular instance, the package can be checked at (e.g.): http://packages.ubun

Re: TCPDump Version

2017-02-04 Thread Robie Basak
On Fri, Feb 03, 2017 at 08:58:45AM -0500, Sephiroth Storm wrote: > Your repos currently have 4.7.x as the latest version of tcpdump available > when it is up to 4.9.x. As your version of tcpdump may have numerous > vulnerabilities, when will the repo be populated with the updated version? In addit

Re: TCPDump Version

2017-02-03 Thread Nish Aravamudan
On 03.02.2017 [08:58:45 -0500], Sephiroth Storm wrote: > Hello, > > Your repos currently have 4.7.x as the latest version of tcpdump > available when it is up to 4.9.x. As your version of tcpdump may have > numerous vulnerabilities, when will the repo be populated with the > updated version? Zest

TCPDump Version

2017-02-03 Thread Sephiroth Storm
Hello, Your repos currently have 4.7.x as the latest version of tcpdump available when it is up to 4.9.x. As your version of tcpdump may have numerous vulnerabilities, when will the repo be populated with the updated version? Thanks. -- Ubuntu-devel-discuss mailing list Ubuntu-devel-discuss@list