Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5046 > unrolled thread
| Started by | tmc <tmc@vandradlabs.com.au> |
|---|---|
| First post | 2016-10-05 12:20 +0200 |
| Last post | 2016-10-09 01:20 +0200 |
| Articles | 5 — 2 participants |
Back to article view | Back to linux.debian.security
timing of PHP 5.6 security updates tmc <tmc@vandradlabs.com.au> - 2016-10-05 12:20 +0200
Re: timing of PHP 5.6 security updates Salvatore Bonaccorso <carnil@debian.org> - 2016-10-05 22:10 +0200
Re: timing of PHP 5.6 security updates tmc <tmc@vandradlabs.com.au> - 2016-10-05 22:50 +0200
Re: timing of PHP 5.6 security updates Salvatore Bonaccorso <carnil@debian.org> - 2016-10-08 16:30 +0200
Re: timing of PHP 5.6 security updates tmc <tmc@vandradlabs.com.au> - 2016-10-09 01:20 +0200
| From | tmc <tmc@vandradlabs.com.au> |
|---|---|
| Date | 2016-10-05 12:20 +0200 |
| Subject | timing of PHP 5.6 security updates |
| Message-ID | <soRsR-7Wi-7@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Hi there is there any news as to when the PHP 5.6 packages in Jessie will be updated to provide fixes for the recent batch of issues - CVE-2016-7124 CVE-2016-7125 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 CVE-2016-7131 CVE-2016-7132 CVE-2016-7411 CVE-2016-7412 CVE-2016-7413 CVE-2016-7414 CVE-2016-7416 CVE-2016-7417 CVE-2016-7418 I can see that there is package in sid that address most if not all of these. Cheers Tomasz -- Tomasz M. Ciolek ******************************************************************************* tmc at vandradlabs dot com dot au ******************************************************************************* GPG Key ID: 0x41C4C2F0 GPG Key Fingerprint: 3883 B308 8256 2246 D3ED A1FF 3A1D 0EAD 41C4 C2F0 Key available on good key-servers *******************************************************************************
[toc] | [next] | [standalone]
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2016-10-05 22:10 +0200 |
| Message-ID | <sp0FP-6Ex-27@gated-at.bofh.it> |
| In reply to | #5046 |
[Multipart message — attachments visible in raw view] — view raw
Hi Tomasz, On Wed, Oct 05, 2016 at 09:06:02PM +1100, tmc wrote: > Hi there > > is there any news as to when the PHP 5.6 packages in Jessie will be updated > to provide fixes for the recent batch of issues - > > CVE-2016-7124 CVE-2016-7125 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 > CVE-2016-7131 CVE-2016-7132 CVE-2016-7411 CVE-2016-7412 CVE-2016-7413 > CVE-2016-7414 CVE-2016-7416 CVE-2016-7417 CVE-2016-7418 > > I can see that there is package in sid that address most if not all of these. No timeline yet, but we have asked the php5 maintainer if he can prepare the usual update for jessie-security based on 5.6.26. Regards, Salvatore
[toc] | [prev] | [next] | [standalone]
| From | tmc <tmc@vandradlabs.com.au> |
|---|---|
| Date | 2016-10-05 22:50 +0200 |
| Message-ID | <sp1ix-6VP-5@gated-at.bofh.it> |
| In reply to | #5047 |
[Multipart message — attachments visible in raw view] — view raw
On Wed, Oct 05, 2016 at 10:02:50PM +0200, Salvatore Bonaccorso wrote: > No timeline yet, but we have asked the php5 maintainer if he can > prepare the usual update for jessie-security based on 5.6.26. > > Regards, > Salvatore Many thanks. I will keep an eye out for it. Tomasz -- Tomasz M. Ciolek ******************************************************************************* tmc at vandradlabs dot com dot au ******************************************************************************* GPG Key ID: 0x41C4C2F0 GPG Key Fingerprint: 3883 B308 8256 2246 D3ED A1FF 3A1D 0EAD 41C4 C2F0 Key available on good key-servers *******************************************************************************
[toc] | [prev] | [next] | [standalone]
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2016-10-08 16:30 +0200 |
| Message-ID | <sq0Nr-8cD-11@gated-at.bofh.it> |
| In reply to | #5048 |
Hi Tmoasz, On Thu, Oct 06, 2016 at 07:48:52AM +1100, tmc wrote: > On Wed, Oct 05, 2016 at 10:02:50PM +0200, Salvatore Bonaccorso wrote: > > No timeline yet, but we have asked the php5 maintainer if he can > > prepare the usual update for jessie-security based on 5.6.26. > > > > Regards, > > Salvatore > > Many thanks. I will keep an eye out for it. The corresponding update has been released now (DSA-3689-1). Regards, Salvatore
[toc] | [prev] | [next] | [standalone]
| From | tmc <tmc@vandradlabs.com.au> |
|---|---|
| Date | 2016-10-09 01:20 +0200 |
| Message-ID | <sq94l-4VE-3@gated-at.bofh.it> |
| In reply to | #5050 |
[Multipart message — attachments visible in raw view] — view raw
Slavatore On Sat, Oct 08, 2016 at 04:20:36PM +0200, Salvatore Bonaccorso wrote: > > The corresponding update has been released now (DSA-3689-1). Many thnaks for the information. Tomasz -- Tomasz M. Ciolek ******************************************************************************* tmc at vandradlabs dot com dot au ******************************************************************************* GPG Key ID: 0x41C4C2F0 GPG Key Fingerprint: 3883 B308 8256 2246 D3ED A1FF 3A1D 0EAD 41C4 C2F0 Key available on good key-servers *******************************************************************************
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web