[SECURITY] [DSA 153-1] New mantis package fixes cross site code execution

2002-08-14 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 153-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze August 14th, 2002

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Martin Schulze
Giuseppe Sacco wrote: Il Tue, Aug 13, 2002 at 09:23:57PM +0200, Martin Schulze ha scritto: [...] Currently, all DSAs are released via mail in english on [EMAIL PROTECTED] and copied to www.debian.org afterwards, where they will be picked up by seven[1] fellow translators Just for the

RE: debian-security-announce-$lang@lists?

2002-08-14 Thread Jens Hafner
I'm not really sure if this is the right place for the language discussion. I believe that everybody on this list at least understands English good enough to be able to get the message and understand the English announcements. Why would someone subscribe to a list she can't follow? And those who

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Ricardo Javier Cardenes Medina
On Tue, Aug 13, 2002 at 09:23:57PM +0200, Martin Schulze wrote: Given the above, what do you think about establishing localized security-announce lists? Please discuss this issue on debian-security and not on debian-devel or debian-project to reach a larger audience. Not being a CVS guru

Re: LDAP Help requested...please :)

2002-08-14 Thread Lupe Christoph
On Tuesday, 2002-08-13 at 14:22:51 -0400, Phillip Hofmeister wrote: My ldap configs on the client all have a host line to the server. Attached are the config files... when I run 'ldapsearch' I get: SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error When I type

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Siegbert Baude
I'm not really sure if this is the right place for the language discussion. I believe that everybody on this list at least understands English good enough to be able to get the message and understand the English announcements. Why would someone subscribe to a list she can't follow? And those

Re: [SECURITY] [DSA 149-1] New glibc packages fix security related problems

2002-08-14 Thread Thiemo Nagel
Paul Baker wrote: On Tuesday, August 13, 2002, at 03:21 AM, Martin Schulze wrote: - -- Debian Security Advisory DSA 149-1 [EMAIL PROTECTED] http://www.debian.org/security/

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Danny De Cock
On Wed, 14 Aug 2002, Siegbert Baude wrote: So we have to think for those, who aren't able to follow this discussion, too. I think as a system administrator, one is out of luck if one can't follow the English announcements anyway. [snip] I dislike this attitude No English, no IT. In many

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Lupe Christoph
On Wednesday, 2002-08-14 at 11:55:29 +0200, Siegbert Baude wrote: I dislike this attitude No English, no IT. In many states school systems aren't good enough or English is not taught as first foreign language. As a side note: I personally know Germans and foreign Chinese students here in

RE: IPSec VPN

2002-08-14 Thread Johan Segernas
Title: RE: IPSec VPN - If so which is compatible? Is FreeSWan compatible? FreeSWan is compatible, but only as a Branch Office tunnel, not as a dynamic Client tunnel. Check with the administrator of the Contivity VPN Switch on whether he/she is willing to set it up. I didn't read this

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Jan Niehusmann
On Wed, Aug 14, 2002 at 12:18:29PM +0200, Danny De Cock wrote: On Wed, 14 Aug 2002, Siegbert Baude wrote: language. As a side note: I personally know Germans and foreign Chinese students here in Germany working in this business, whose English skills wouldn`t allow reading complicated DSAs.

RE: debian-security-announce-$lang@lists?

2002-08-14 Thread Jens Hafner
I think as a system administrator, one is out of luck if one can't follow the English announcements anyway. [snip] I dislike this attitude No English, no IT. In many states school systems aren't good enough or English is not taught as first foreign language. As a side note: I personally know

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Siegbert Baude
Jens wrote: I think as a system administrator, one is out of luck if one can't follow the English announcements anyway. Siegbert wrote: [snip] I dislike this attitude No English, no IT. In many states school systems aren't good enough or English is not taught as first foreign language.

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread InfoEmergencias - Luis Gómez
El mié, 14-08-2002 a las 11:03, Javier Fernández-Sanguino Peña escribió: I do not see the benefit of this push method if we take in account that we already provide an RDF channel for advisories and users can configure their user agents (like Evolution) to retrieve them automatically.

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Martin Schulze
Giuseppe Sacco wrote: We decided to translate from the english wml, so in order to start a translation we wait for the english published version. Is it the right way? In any case I will subscribe to debian-security-announce to get quicker translations. That's the proper way. However, due to

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Martin Schulze
InfoEmergencias - Luis Gómez wrote: El mié, 14-08-2002 a las 11:03, Javier Fernández-Sanguino Peña escribió: I do not see the benefit of this push method if we take in account that we already provide an RDF channel for advisories and users can configure their user agents (like

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Martin Schulze
Jan Niehusmann wrote: On Wed, Aug 14, 2002 at 12:18:29PM +0200, Danny De Cock wrote: On Wed, 14 Aug 2002, Siegbert Baude wrote: language. As a side note: I personally know Germans and foreign Chinese students here in Germany working in this business, whose English skills wouldn`t allow

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Jan Niehusmann
On Wed, Aug 14, 2002 at 05:12:19PM +0200, Martin Schulze wrote: One could reduce a DSA to do I have this package installed? Yes, then I'd better update.. However, if these people are subscribed to Perhaps this could even be automated: When a new (english) DSA gets released, a script

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Peter Karlsson
Martin Schulze: what do other developers think about localized lists for security advisories, such as [EMAIL PROTECTED] That sounds like a good idea. However, to make sure that the information is sent out as soon as possible, I think it would be a good idea that, whenever a new advisory is

Pgp/GPG MiM chosen ciphertext attack

2002-08-14 Thread Dale Amon
I presume most of you have heard about the paper by Jallad, Katz and Schneier? http://www.counterpane.com/pgp-attack.html

BUSINESS RELATIONSHIP

2002-08-14 Thread Mr Abdelhadi Benzaghou
ATTN: CEO/PRESIDENT May I indulge your trust and confidence as I introduce myself as well as intimating you of this business proposal. I am Mr Abdelhadi Benzaghou the Algeria OPEC Governor (Organization of Petroleum Exporting countries). Through the sale of our allocated oil quota in OPEC, I was

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Gustavo Noronha Silva
Em Tue, 13 Aug 2002 21:23:57 +0200, Martin Schulze [EMAIL PROTECTED] escreveu: Hi, Hello! Establishing localized -announce lists could impose an unacceptable delay before the translated advisory gets posted to the localized list. This will probably be the case especially with long

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Martin Schulze
Oohara Yuuma wrote: For your information, this is how the Japanese translation of DSAs works: 1. Kenshi Muto forwards the English DSA to [EMAIL PROTECTED] as soon as possible (usually in 24 hours) 2. Seiji Kaneko translates the e-mail version of DSA into Japanese and post it to [EMAIL

Re: [SECURITY] [DSA 149-1] New glibc packages fix security related problems

2002-08-14 Thread Peter Cordes
On Tue, Aug 13, 2002 at 06:28:01PM -0500, Paul Baker wrote: On Tuesday, August 13, 2002, at 03:21 AM, Martin Schulze wrote: - -- Debian Security Advisory DSA 149-1 [EMAIL PROTECTED]

Apache Log Files

2002-08-14 Thread Matthew Sackman
Hi All, In apache log files I'm seeing a lot of bogus attacks. Using various software I can easily sort out which are Nimda, which are Code Red 1, Code Red 2 etc etc, and extract the IPs. That's all fine. What I then want to do is to do a whois on the IP, extract the name of the person who ownes

Re: Apache Log Files

2002-08-14 Thread Phillip Hofmeister
On Wed, 14 Aug 2002 at 10:31:51PM +0100, Matthew Sackman wrote: Does anyone know of a simple program that will return info on whois IP lookup in a set format? Perl and regex's work wonderful :) Side note: Korea's whois info is pretty much useless. Their whole country has like...one giant ISP

Re: Apache Log Files

2002-08-14 Thread TOK
Hi Matthew, i've tried parsing the output of allwhois.com, a few regexps matching emails should work most times. i was more interested in creating statistics (most used attack of the week...) but gave up because of the hassle of manually updating the attack signatures. whats software do you use

Re: Apache Log Files

2002-08-14 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Content-Type: text/plain; charset=us-ascii In message [EMAIL PROTECTED], TOK writes: i've tried parsing the output of allwhois.com, a few regexps matching emails should work most times. The abuse.net mail forwarder is also pretty useful for this