[03:03] jbicha: Congrats on becoming a Core Dev :) [12:12] jbicha, congrats!!! === est31_ is now known as est31 === juergh_ is now known as juergh === koza is now known as koza|away === JanC_ is now known as JanC [21:06] mdeslaur: I presume you saw https://bugs.debian.org/864400 / CVE-2017-9469 / CVE-2017-9468? I prepped the artful upload, but it's a simple merge there (https://sigma.unit193.net/source/irssi_1.0.3-1ubuntu1.dsc) [21:06] Debian bug 864400 in src:irssi "irssi: CVE-2017-9468 CVE-2017-9469" [Important,Fixed] [21:07] In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469) [21:07] In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468) [22:14] Unit193: I've got irssi packages in the security team ppa for publishing on monday [22:15] Unit193: did you upload to artful, or do you need sponsoring or something? [22:16] mdeslaur: Figured you'd be quick on it, but didn't see it either. Sounds good. That was just in case you hadn't gotten to it yet, I didn't push it (well, can't anyway, not a core dev.) [23:03] mwhudson: have you ever seen: LP: #1568902 ? [23:03] Launchpad bug 1568902 in golang-github-coreos-go-systemd (Ubuntu Xenial) "Bump go-systemd in Ubuntu Xenial" [Undecided,Confirmed] https://launchpad.net/bugs/1568902 [23:11] does anyone know what will the default python3 be for 17.10 ? [23:11] nacc: ^^ you mabe ? [23:11] maybe* [23:18] roaksoax: i don't know officially, but i think we're in the middle of the python3.6 transition === lan3y is now known as Laney [23:38] nacc: thanks! [23:59] xnox: are we bumping OpenSSL in Artful?