Bug#1098267: dns-root-data: root.key needs updating

2025-02-18 Thread Laura Smith
Package: dns-root-data Version: 2024041801~deb12u1 Severity: important X-Debbugs-Cc: n5d9xq3ti233xiyif...@pm.me Dear Maintainer, /usr/share/dns/root.key appears to be an old file in need of refresh? This causes various issues being logged such as: [taupd ] you need to update package with trust a

Bug#1030119: release-notes: openssh-server: fills the log with "deprecated reading of user environment enabled"

2024-05-18 Thread Laura Smith
You wanted to "track down an actual reason for this change" ? Try this: CVE-2011-3148 CVE-2011-3149 As summarised by Redhat (https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/6.4_technical_notes/pam): If an application's PAM configuration contained user_readenv=1, a

Bug#1018260: openssh-server: fills the log with "deprecated reading of user environment enabled"

2024-05-18 Thread Laura Smith
You wanted to "track down an actual reason for this change" ? Try this: CVE-2011-3148 CVE-2011-3149 As summarised by Redhat (https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/6.4_technical_notes/pam): If an application's PAM configuration contained user_readenv=1, a

Bug#1031509: clamav: 2 RCE bugs in ClamAV

2023-02-18 Thread Laura Smith
Dear Maintainer Could you confirm when the Debian Bullseye updates are due to be uploaded ? Thanks !

Bug#992195: Remove reference to undocumented APT feature

2021-08-15 Thread Laura Smith
Package: release-notes Severity: normal Re: 5.1.2 "which takes advantage of the undocumented feature of APT that it supports regular expressions (inside /)." Why are we encouraging people to use undocumented features ? It surely just sets you up for a future fail when people try to use the tric

Bug#992194: Need to reflect Debian project preferences on repo keys

2021-08-15 Thread Laura Smith
Package: release-notes Severity: normal The project really needs to make its mind up which way it is going in terms of managing repo keys. The bullseye release notes, e.g. 5.3.2. Deprecated components for bullseye make reference to "Keys should be managed by dropping files into /etc/apt/truste

Bug#991895: apt-setup: Need to move into the 21st century with support for https in preeseed apt-setup

2021-08-04 Thread Laura Smith
Package: apt-setup Severity: wishlist Dear Maintainer, Debian *urgently* needs to move into the 21st century with first-class support for https in preeseed apt-setup automated installs !! Thanks to projects such as Let's Encrypt and the major browsers actively pushing it, an increasing majorit

Bug#991894: debian-installer: Need to move into the 21st century with support for https in preeseed apt-setup

2021-08-04 Thread Laura Smith
Package: debian-installer Severity: wishlist Dear Maintainer, Debian *urgently* needs to move into the 21st century with first-class support for https in preeseed apt-setup automated installs !! Thanks to projects such as Let's Encrypt and the major browsers actively pushing it, an increasing

Bug#986034: sa-compile broken under apt-get upgrade

2021-03-28 Thread Laura Smith
Subject: sa-compile fails under apt-get upgrade Package: sa-compile Version: 3.4.2-1+deb10u3 Severity: normal Dear Maintainer, # apt-get upgrade Reading package lists... Done Building dependency tree Reading state information... Done Calculating upgrade... Done The following package was automatic

Bug#859706: Still there in 10.2

2019-11-17 Thread Laura Smith
Still present in a clean install of 10.2 ! Setting up opendkim (2.11.0~alpha-12) ... Created symlink /etc/systemd/system/multi-user.target.wants/opendkim.service → /lib/systemd/system/opendkim.service. [opendkim.conf:1] Line references path below legacy directory /var/run/, updating /var/run/ope