Salvatore Bonaccorso

Hi Maybe this should not be labeled bug but rather a mix with request. For context see: https://bugs.debian.org/1000078 and https://lists.debian.org/debian-devel/2021/11/msg00176.html pcre upstream considers the older version now end of life...

test_listview.sh test failure

2

Hi While running the testsuite I do get a FAIL in the `test_listview.sh` where the exact same version did pass the tests some months ago, but now even v0.9.0 fails:...

Slic3r libslic3r Obj File TriangleMesh::TriangleMesh() out-of-bounds read vulnerability (TALOS-2020-1213, CVE-2020-28590)

4

Hi https://talosintelligence.com/vulnerability_reports/TALOS-2020-1213 (CVE-2020-28590) refers to an issue in Slic3r. Were you informed about it? Is this issue open yet or can you point to the fixing commit?

New test failure isues test_sql_str_func.sh

2

Hi @tstack As you might remember there was some work for `lnav` in downstream Debian to get in shape for the next Debian bookworm release, and it was finally good...

Add support for AMD Inception

3

Similarly as for https://github.com/speed47/spectre-meltdown-checker/issues/465 please do add support for the AMD Inception issue (CVE-2023-20569): https://comsec.ethz.ch/research/microarch/inception/ https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-7005

CVE-2019-1010011

2

Hi Recently there was a CVE assigned, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010011 with two references: - https://drive.google.com/drive/folders/1nAL-B_I5Y7SKX0AeIurGkTzNHMazoyzP?usp=sharing - https://drive.google.com/drive/folders/1xiVrcB1lTE_mSd_mL7akjpscH4CUahYU?usp=sharing Did you got a notice on it? Was this already fixed? (any reference to share?)

CVE-2022-23967 duplicate of CVE-2019-15679?

3

@MaherAzzouzi, while triaging the issue assigned as [CVE-2022-23967](https://github.com/MaherAzzouzi/CVE-2022-23967): Is this not a duplicate of CVE-2019-15679? For details on CVE-2019-15679 see * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15679 * in particular https://www.openwall.com/lists/oss-security/2018/12/10/5 The last reference as...

Testsuite failing on i386 architecture?

12

Hi While preparing the update for `boxes` up to v2.3.0 in Debian I noticed that in our pipeline when building for i386 the testsuite fails, and the underlying error: ```...

Hi In Debian we are currently applying the following patch to Daemon-Control. We thought you might be interested in it too. Description: Fix spelling errors in manpage Origin: vendor Author:...

CVE-2019-5086: xcftools flattenIncrementally tiles walk code execution vulnerability

10

Hi See TALOS report at [TALOS-2019-0878]. [TALOS-2019-0878]: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0878