Bug#812103: CVE-2015-7519

2016-04-26 Thread Raphael Geissert
On 26 April 2016 at 10:27, Linus van Geuns wrote: > On Tue, Apr 26, 2016 at 10:08 AM, Raphael Geissert wrote: >> On 19 February 2016 at 09:35, Linus van Geuns wrote: >>> On Thu, Feb 18, 2016 at 8:35 PM, Thorsten Alteholz >>> wrote: On irc you wrote: 15:05 < Nirkus> have some old redm

Bug#812103: CVE-2015-7519

2016-04-26 Thread Linus van Geuns
Hi, On Tue, Apr 26, 2016 at 10:08 AM, Raphael Geissert wrote: > Hi, > > On 19 February 2016 at 09:35, Linus van Geuns wrote: >> On Thu, Feb 18, 2016 at 8:35 PM, Thorsten Alteholz >> wrote: >>> On irc you wrote: >>> 15:05 < Nirkus> have some old redmine running on squeeze-lts (yeah..) and >>

Bug#812103: CVE-2015-7519

2016-04-26 Thread Raphael Geissert
Hi, On 19 February 2016 at 09:35, Linus van Geuns wrote: > On Thu, Feb 18, 2016 at 8:35 PM, Thorsten Alteholz wrote: >> On irc you wrote: >> 15:05 < Nirkus> have some old redmine running on squeeze-lts (yeah..) and >> since the update yesterday the following redmine code bails out with >> "pri

Bug#812103: CVE-2015-7519

2016-02-19 Thread Linus van Geuns
Hi Thorsten, On Thu, Feb 18, 2016 at 8:35 PM, Thorsten Alteholz wrote: > > [..] > On irc you wrote: > 15:05 < Nirkus> have some old redmine running on squeeze-lts (yeah..) and > since the update yesterday the following redmine code bails out with "private > method `split' called for nil:NilClas

Bug#812103: CVE-2015-7519

2016-02-18 Thread Thorsten Alteholz
Hi Linus, as others might be interested in the answer as well, I also send it to debian-lts@. On irc you wrote: 15:05 < Nirkus> have some old redmine running on squeeze-lts (yeah..) and since the update yesterday the following redmine code bails out with "private method `split' called for ni