Re: Paquetes snap sin snap.

2024-03-30 Thread JavierDebian
El 30/3/24 a las 05:50, Camaleón escribió: El 2024-03-29 a las 09:07 -0300, JavierDebian escribió: El 29/3/24 a las 06:49, Listas escribió: El jue, 28-03-2024 a las 14:59 -0300, JavierDebian escribió: Buenas tardes. Proyecto para mi fin de semana: Instalar paquetes de SNAP sin instalar

Re: making Debian secure by default

2024-03-30 Thread Marc SCHAEFER
Hello, On Fri, Mar 29, 2024 at 07:02:54PM +0100, Kamil Jo?ca wrote: > O-o, is there any simple test to check if I have infected version or > not? For example, under root: path="$(ldd $(which sshd) | grep liblzma | grep -o '/[^ ]*')" if hexdump -ve '1/1 "%.2x"' "$path" | grep -q

Bluetooth sound problems playing from a web browser

2024-03-30 Thread Richmond
When playing videos in a web browser, and sending the sound to a bluetooth speaker (amazon echo) I get playback problems; stuttering, sound quality reduction to AM radio level or lower). These things can clear up after a minute or two, or be reduced. When playing from nvlc however I get no such

Debian 10 «Buster» (old old stable) se mueve al repositorio archivador

2024-03-30 Thread Camaleón
Hola, Pues eso, mando la noticia para quien quiera instalar (o usar) esta versión y no la encuentre en las réplicas habituales: Debian 10 "buster" moved to archive.debian.org https://lists.debian.org/debian-devel-announce/2024/03/msg3.html Quien todavía use esta versión seguramente tendrá

Re: Paquetes snap sin snap.

2024-03-30 Thread Camaleón
El 2024-03-29 a las 09:07 -0300, JavierDebian escribió: > El 29/3/24 a las 06:49, Listas escribió: > > El jue, 28-03-2024 a las 14:59 -0300, JavierDebian escribió: > > > Buenas tardes. > > > > > > Proyecto para mi fin de semana: > > > > > > Instalar paquetes de SNAP sin instalar Snap. > > >

Re: making Debian secure by default

2024-03-30 Thread Curt
On 2024-03-29, Andy Smith wrote: > I wasn't trying to bait you in any way. The above was what I thought > was a light-hearted way to say that I genuinely think you need to > relax a little about things that are outside of your control. I'm > sorry it wasn't taken that way and I get that you

Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Cindy Sue Causey
On Sat, Mar 30, 2024 at 1:19 PM gene heskett wrote: > > On 3/30/24 11:36, Antti-Pekka Känsälä wrote: > > What could be the deal, when Firefox tries to stop me from unmounting a > > stick, after I've accessed files on it through Firefox? I worry about > > my stick security. Thanks. > > Since

Re: Bluetooth sound problems playing from a web browser

2024-03-30 Thread Richmond
Richmond writes: > When playing videos in a web browser, and sending the sound to a > bluetooth speaker (amazon echo) I get playback problems; stuttering, > sound quality reduction to AM radio level or lower). These things can > clear up after a minute or two, or be reduced. > > When playing

Re: Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Antti-Pekka Känsälä
I was able to replicate this, by trying to send gmail to myself in Firefox, attaching a binary on a mounted USB stick. After the attachment supposedly was uploaded, I tried to unmount the stick, but it blocks. "lsof | grep -i KINGSTON" then shows a total of 129 lines from "x-www-browser". This

Re: Paquetes snap sin snap.

2024-03-30 Thread Carlos Villiere
¡Hola a todos! Tengo una versión para amd64 que corro en Debian 11 sin problemas y no tengo inconveniente en compartirla con ustedes. Lo que no sé,¿cómo hacerlas llegar? El archivo es geogebra-clasic_6.0.666.0-202109211234_amd64.deb Saludos El sáb, 30 mar 2024 a las 15:02, Camaleón () escribió:

Re: Paquetes snap sin snap.

2024-03-30 Thread Camaleón
El 2024-03-30 a las 09:23 -0300, JavierDebian escribió: > > El 30/3/24 a las 05:50, Camaleón escribió: > > El 2024-03-29 a las 09:07 -0300, JavierDebian escribió: > > > > > El 29/3/24 a las 06:49, Listas escribió: > > > > El jue, 28-03-2024 a las 14:59 -0300, JavierDebian escribió: > > > > >

Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Charles Curley
On Sat, 30 Mar 2024 17:17:52 +0200 Antti-Pekka Känsälä wrote: > What could be the deal, when Firefox tries to stop me from unmounting > a stick, after I've accessed files on it through Firefox? I worry > about my stick security. Thanks. It sounds like Firefox has a file open on the stick. To

Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

2024-03-30 Thread Andy Smith
Hi, On Sat, Mar 30, 2024 at 08:57:14PM +, fxkl4...@protonmail.com wrote: > so is this a threat to us normal debian users If you have to ask, i.e. you do not know how to check that your Debian install is secured against extremely well known recent exploits that have been plastered across the

Re: Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Antti-Pekka Känsälä
I can replicate this, by trying to send Gmail to myself in Firefox, attaching a binary on a mounted USB stick. After the attachment supposedly was uploaded, I tried to unmount the stick, but it blocked. "lsof | grep -i KINGSTON" then shows a total of 129 lines from "x-www-browser". This lasted for

Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

2024-03-30 Thread Jeffrey Walton
It looks like more analysis has revealed this is a RCE with the payload in the modulus of a public key: "The payload is extracted from the N value (the public key) passed to RSA_public_decrypt, checked against a simple fingerprint, and decrypted with a fixed ChaCha20 key before the Ed448 signature

Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

2024-03-30 Thread fxkl47BF
so is this a threat to us normal debian users if so how do we fix it On Sat, 30 Mar 2024, Jeffrey Walton wrote: > It looks like more analysis has revealed this is a RCE with the > payload in the modulus of a public key: "The payload is extracted from > the N value (the public key) passed to

Re: Dependencies between components.

2024-03-30 Thread Max Nikulin
On 30/03/2024 22:54, Tim Woodall wrote: I'm unclear whether backports is allowed to depend on -updates You have not mentioned bookworm-security. contrib  : non-free non-free-firmware main non-free : non-free-firmware main non-free-firmware    :

Dependencies between components.

2024-03-30 Thread Tim Woodall
Is there a wiki or something else that lays out exactly what other distributions and components each debian (distribution,component) tuple is allowed to depend on? This is what I've concluded so far. I'm assuming transitive dependencies are allowed, e.g. bookworm-updates-contrib can depend on

Re: Installation de VirtualBox par les dépots Debian?

2024-03-30 Thread Frederic Zulian
Euh, donc si j'ai bien compris il faut rajouter unstable dans sources.list et creer le fichier preferences avec un pinning haut pour testing 900 et un pinning bas 100 pour unstable ? On Fri, 29 Mar 2024, 14:08 Eric DEGENETAIS, wrote: > Le jeu. 28 mars 2024 à 09:00, Lucas Nussbaum a écrit : >

Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

2024-03-30 Thread Michel Verdier
On 2024-03-30, fxkl4...@protonmail.com wrote: > so is this a threat to us normal debian users > if so how do we fix it Debian stable is not affected, Debian testing, unstable and experimental must be updated. https://lists.debian.org/debian-security-announce/2024/msg00057.html

Re: Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread tomas
On Sat, Mar 30, 2024 at 07:32:16PM +0200, Antti-Pekka Känsälä wrote: > Yes, closing Firefox does allow the stick to unmount cleanly, but I still > worry. To get an idea of what's going on, you can use "lsof": tomas@trotzki:~$ lsof /dev/sda1 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE

Re: Re: Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Antti-Pekka Känsälä
I'd just like to add that I have seen the problem despite reinstalls with Debian stable minor versions. Thanks!

Re: OT: Lista de correo sobre HARDWARE

2024-03-30 Thread Eduardo Jorge Gil Michelena
El 2024-03-26 a las 16:23 +, Eduardo Jorge Gil Michelena escribió: > Estimada gente: > Disculpen el OT... > ¿Conocen alguna lista de correos o foro web sobre Hardware? ¿De hardware en general o buscas algo más concreto? > Antes había muchos pero ahora... parece que han desaparecido o por lo

Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Antti-Pekka Känsälä
What could be the deal, when Firefox tries to stop me from unmounting a stick, after I've accessed files on it through Firefox? I worry about my stick security. Thanks.

Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread gene heskett
On 3/30/24 11:36, Antti-Pekka Känsälä wrote: What could be the deal, when Firefox tries to stop me from unmounting a stick, after I've accessed files on it through Firefox?  I worry about my stick security.  Thanks. Since this is normally a root operation, I'm confused. Likely what it means

Re: Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread Antti-Pekka Känsälä
Yes, closing Firefox does allow the stick to unmount cleanly, but I still worry.

Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread David Christensen
On 3/30/24 08:17, Antti-Pekka Känsälä wrote: What could be the deal, when Firefox tries to stop me from unmounting a stick, after I've accessed files on it through Firefox? I worry about my stick security. Thanks. Linux knows what files are open on each file system. If you try to unmount

Re: Debian 12.5 up-to-date Xfce, Firefox clings to USB stick

2024-03-30 Thread David Wright
On Sat 30 Mar 2024 at 21:06:27 (+0200), Antti-Pekka Känsälä wrote: > I was able to replicate this, by trying to send gmail to myself in Firefox, > attaching a binary on a mounted USB stick. Did you mount the stick yourself as a user (ie there's an fstab entry for it), or as root, or does an