Re: HFS/HFS+ are insecure

If an official procedure to disable the driver completely is documented and hosted from an official debian server it would be, in my opinion, an acceptable solution. Users would have a copy-pastable procedure to disable HFS if the risk is intolerable to them, sysadmin would have an official page t

Re: HFS/HFS+ are insecure

Looks reasonable. Le vendredi 21 juillet 2023 à 10:55 +0200, Marco d'Itri a écrit : > On Jul 21, Matthew Garrett wrote: > > > > You are totally correct. > > > Kernel team, please blacklist HFS/HFS+ for automounting. > > > > Isn't this a userland policy decision? udisks will happily trigger > >

Re: merged /usr considered harmful (was Re: Bits from the Technical Committee)

In this case, this page should be updated to reflect the fact it is not broken. https://wiki.debian.org/Teams/Dpkg/MergedUsr Nol' Le jeudi 15 juillet 2021 à 10:13 +0100, Luca Boccassi a écrit : > On Wed, 2021-07-14 at 23:40 +0200, Guillem Jover wrote: > > On Wed, 2021-07-14 at 19:54:56 +, Th

Unable to find 1.14.2-2+deb10u3 in buster(-pu) branch ?

Greetings, Looking at both buster and buster-pu branches on git, version 1.14.2- 2+deb10u3 does not exist. https://salsa.debian.org/nginx-team/nginx/-/tree/buster-pu Last commit announce deb10u2 https://salsa.debian.org/nginx-team/nginx/-/commit/1b93db3264fab0654a0112b55d3f2cc79cc7ebd7 https://