Re: [Fwd: [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution]

2005-09-24 Thread Jim Popovitch
Michal Jaegermann wrote: On Sat, Sep 24, 2005 at 10:23:00AM -0400, Jim Popovitch wrote: Michal Jaegermann wrote: It is hard to imagine that somebody quietly fixed such hole in Python packages for Red Hat distributions and did not mention that anybody. Wouldn't this count: http

Re: Another security problem..

2005-10-20 Thread Jim Popovitch
Another? Heck, that's old stuff from quite some time (Internet time) ago. If I had a nickel for every invalid file access attempt. ;-) -Jim P. James Kosin wrote: -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 - -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Everyone, On

Re: Another security problem..

2005-10-20 Thread Jim Popovitch
Matthew Nuzum wrote: But that's not my point... if you run a web-facing server there are some plugins for nessus that cause it to search for known-vulnerable web applications and such. It's a good idea to run it periodically so that you can find if you're exposed before someone else does. You

Re: Fedora Legacy Test Update Notification: httpd and mod_ssl

2005-10-24 Thread Jim Popovitch
Michal Jaegermann wrote: On Mon, Oct 24, 2005 at 06:26:03PM -0400, Jim Popovitch wrote: I've got a few questions about this release of mod_ssl. 1) why is it bundled w/ httpd v2.0 and not a separate bug? Actually it exists a separate bug report: https://bugzilla.redhat.com/bugzilla

Re: Fedora Legacy Test Update Notification: httpd and mod_ssl

2005-10-24 Thread Jim Popovitch
Jeff Sheltren wrote: Hi Jim, perhaps some of your confusion comes from the fact that rh9, fc1, and fc2 all contain the mod_ssl package as part of the httpd package. In the older rh 7.3, mod_ssl was separate from apache. According to the release notes, 2 binary rpm packages were released

Re: Fedora Legacy Test Update Notification: httpd and mod_ssl

2005-10-25 Thread Jim Popovitch
Jeff Sheltren wrote: So, to me this is not hiding at all. But I would be interested to hear if you have any ideas for implementing your suggestion of making things easier for people to help. Quite simply provide a one-stop spot with an up-to-date list of all bugs being tracked by FL

Re: Revisiting pruning of updates directories

2005-10-26 Thread Jim Popovitch
Jesse Keating wrote: I'd like to revisit the thought of pruning the updates rpms and srpms directories to save space. This would basically sync w/ the tree as it was at closure time, and then of course all the Legacy packages would be added in. Is there any of you that feel this _shouldn't_ be

Re: Revisiting pruning of updates directories

2005-10-26 Thread Jim Popovitch
Jesse Keating wrote: On Wed, 2005-10-26 at 15:57 -0400, Jim Popovitch wrote: What exactly would be pruned? Saving space sounds like a great idea as long as it is useless stuff we are deleting. Updates that have been obsoleted by newer updates (from Red Hat). Before Red Hat closes down

Re: 8 more days 'til we inherit FC3; are we ready??; FWD: Fedora Core 3 Status Update

2005-12-15 Thread Jim Popovitch
I agree with Jesse and David. It makes no sense to drop FC1 if there is still user interest (a'la RH73). A lot of people jumped to FC1 when Redhat changed their business practice (which turned out to be a very good move for them despite mine and other objections), so I think it is in FL's

Re: Need discussion, Re: Latest contrib perl

2006-01-03 Thread Jim Popovitch
I agree with Eric's and Jesse's premise that we test and release each identified fix rather than patching an in-process patch. It is easier to track (as we generally leverage work done by other distros), and it is easier to QA (as our tests only need to be done for a specific issue not various

Re: yum -- Repodata in os directories?

2006-01-21 Thread Jim Popovitch
Jesse Keating wrote: On Sat, 2006-01-21 at 17:18 -0600, David Eisenstein wrote: Problem is, there are no repodata subdirectories in any of the os directories off of download.fedoralegacy.org (e.g., /fedora/3/os/i386/, /fedora/3/os/SRPMS/). Whoops, my bad. Fixing right now. You might want

Re: crazy thought about how to ease QA testing

2006-02-10 Thread Jim Popovitch
Jesse Keating wrote: On Fri, 2006-02-10 at 17:54 +0200, Pekka Savola wrote: So, instead of adding more hoops (please, install a virtual image of all the other distros and do verify testing etc. there), most focus should be put on making participation easier. I am trying to make it easier.

Re: Pruning old vendor update packages?

2006-02-11 Thread Jim Popovitch
Axel Thimm wrote: On Sat, Feb 11, 2006 at 07:59:54AM -0500, Jim Popovitch wrote: Axel Thimm wrote: Ping! My mirror just hit the ceiling. Why isn't something happening? It is just adding the --delete option to rsync, or to use the list I sent a week ago. I reported this over and over again

Re: X-Chat 2.4.0 to 2.6

2006-03-10 Thread Jim Popovitch
Danny Terweij - Net Tuning | Net wrote: From: Rex Dieter [EMAIL PROTECTED] Where it ends? FC is not a good choice for production. Easy: If you don't like that, don't use FC for production. Nice advertising line.. put it on the FC website in big red letters :) Hey! That's my line! :-)

Re: Sendmail Patch Breaks Virtusertable Settings

2006-03-28 Thread Jim Popovitch
Ralph Bearpark wrote: So, why did this patch need to regenerate the virtusertable.db? And if it really did have to, then wtf did it have to do it incorrectly? I can't recall ever doing a sendmail upgrade (diff hosts, diff distro's, manual builds, etc) that did not rebuild sendmail dbs via

Re: New sendmail breaks ability to mail to [EMAIL PROTECTED]

2006-03-30 Thread Jim Popovitch
David M. Shirley wrote: It's pretty clear now that this is purely an mmode.com problem but they seem unable to locate anything. If anyone has some insight, I'd love to be able to tell them, Hey did you check this...? First, Check that the IP address of your server(s) hasn't been

Re: New sendmail breaks ability to mail to [EMAIL PROTECTED]

2006-03-30 Thread Jim Popovitch
there. David Shirley http://www.webquarry.com On Mar 30, 2006, at 12:10 AM, Jim Popovitch wrote: First, Check that the IP address of your server(s) hasn't been blacklisted here: http://www.completewhois.com/rbl_lookup.htm Next, verify that your server(s) have proper DNS (A PTR) records

Re: Apache 1.3.7 (RH73) question wrt CVEs

2006-05-12 Thread Jim Popovitch
David Eisenstein wrote: On Thu, 11 May 2006, Jim Popovitch wrote: In another arena I saw a list of CVEs against Apache 1.3.7. RH73 ships with Apache 1.3.7-9 so I thought I would query BZ and see what I could find of these. (I am a BZ newbie when it comes to queries). CVE-2002-1233 Apache

Re: What we're forgetting . . .

2006-06-14 Thread Jim Popovitch
Michael Mansour wrote: Although I like and highly respect the communities (both Fedora and FL) I find these days I have little time to contribute and play with distributions - life gets in the way :P - so my involvement with both Fedora and FL will cease when I've migrated those last 3 machines

Help. Kernel errors, can't find common consensus

2006-07-14 Thread Jim Popovitch
Sorry for the chatter, but I am running out of places to look/ask... What does this mean, wrt a stock+FL-updated RH7.3 server (no ACPID, APM, etc): kernel: Uhhuh. NMI received for unknown reason 31 on CPU 0. kernel: Dazed and confused, but trying to continue kernel: Do you have a

Re: Help. Kernel errors, can't find common consensus

2006-07-16 Thread Jim Popovitch
This issue is no longer of any concern. The system has been disabled and applications moved to others. -Jim P. Jim Popovitch wrote: Hi Tim, This system is using raid1 but not on the root partition, only on a few data partitions. Additionally there is a broadcom ethernet controller. I've