[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Unable to announce the updates

On 15/01/20 3:20 am, Utkarsh Gupta wrote:
> Hi Mike,
> On 14/01/20 2:00 pm, Mike Gabriel wrote:
>> please send over the announcement text, I'll handle the signed mail to
>> d-lts-announce later today.
> Many thanks for doing so.
> Attached is the DLA-2060 for phpmyadmin and DLA-2063 for debian-lan-config.

Just a small thingy,
I had stripped the "From", "To", and the "Subject" field from DLA-2063
previously (when I was trying to send it on my own).

Re-added in the attached DLA-2063 file if it helps.


From: Utkarsh Gupta <utkarsh@debian.org>
To: debian-lts-announce@lists.debian.org
Subject: [SECURITY] [DLA 2063-1] debian-lan-config security update

Package        : debian-lan-config
Version        : 0.19+deb8u2
CVE ID         : CVE-2019-3467
Debian Bug     : 947459

In debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos
admin server allowed password changes for other Kerberos user principals.

For Debian 8 "Jessie", this problem has been fixed in version

We recommend that you upgrade your debian-lan-config packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment: signature.asc
Description: OpenPGP digital signature

Reply to: