Bug#966544: snmpd: extend option broken after update

2020-08-04 Thread James Greig
Hi,

Thanks to the LTS team for resolving for those on stretch.

Kind regards

James Greig 



Bug#966544: snmpd: extend option broken after update

2020-08-01 Thread James Greig
Hi,

Well, hopefully LTS can fix this for those of us that are using oldstable 
(stretch).  It almost seems like someone broke production on the oldstable 
version, then said, "don't worry - we've fixed it on unstable" (a version no 
one is using in production), then walked away :) 

Current work around is to either apt-mark snmpd before you upgrade if you 
haven't already broken it OR to run something like apt install 
snmpd=5.7.3+dfsg-1.7+deb9u1 libsnmp30=5.7.3+dfsg-1.7+deb9u1 to force the 
downgrade.

Kind regards

James Greig



Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update

2020-07-31 Thread James Greig
Hi,

Though I do appreciate that security should come above everything.  I have to 
agree with everyone else here it seems surprising  that it has just been 
removed like this.  We use it in read-only ourselves as well and it has broken 
a lot of monitoring.

Kind regards

James Greig
From: Craig Small 
Sent: 31 July 2020 01:46
To: James Greig ; 966...@bugs.debian.org
Subject: Re: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after 
update

Hi James,
  That would have been intentional, the EXTEND MIB has major security issues.

 - Craig


On Thu, 30 Jul 2020 at 23:03, James Greig 
mailto:ja...@host-it.co.uk>> wrote:
Package: snmpd
Version: 5.7.3+dfsg-1.7+deb9u2
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

Updating snmpd from deb9u1 to deb9u2 via apt on any stretch system
breaks the ability to use 'extend' in snmpd.

After updating on any stretch system and restarting snmpd this error will 
appear:-

Warning: Unknown token: extend

It's likely the latest binary build of this package has not included options to
enable extend and/or other extras.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.13
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-13-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages snmpd depends on:
ii  adduser3.115
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers1.48
ii  libc6  2.24-11+deb9u4
ii  libsnmp-base   5.7.3+dfsg-1.7+deb9u2
ii  libsnmp30  5.7.3+dfsg-1.7+deb9u2
ii  lsb-base   9.20161125

snmpd recommends no packages.

Versions of packages snmpd suggests:
pn  snmptrapd  

-- debconf information excluded

___
Pkg-net-snmp-devel mailing list
pkg-net-snmp-de...@alioth-lists.debian.net<mailto:pkg-net-snmp-de...@alioth-lists.debian.net>
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-net-snmp-devel


Bug#966544: snmpd: extend option broken after update

2020-07-30 Thread James Greig
Package: snmpd
Version: 5.7.3+dfsg-1.7+deb9u2
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

Updating snmpd from deb9u1 to deb9u2 via apt on any stretch system
breaks the ability to use 'extend' in snmpd.

After updating on any stretch system and restarting snmpd this error will 
appear:-

Warning: Unknown token: extend

It's likely the latest binary build of this package has not included options to
enable extend and/or other extras.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.13
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-13-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages snmpd depends on:
ii  adduser3.115
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers1.48
ii  libc6  2.24-11+deb9u4
ii  libsnmp-base   5.7.3+dfsg-1.7+deb9u2
ii  libsnmp30  5.7.3+dfsg-1.7+deb9u2
ii  lsb-base   9.20161125

snmpd recommends no packages.

Versions of packages snmpd suggests:
pn  snmptrapd  

-- debconf information excluded



Bug#674142: make it possible to disable ssl compression in apache2

2012-11-22 Thread James Greig
Hi Arno,

Thanks for your reply.  I appreciate that it's a client side issue and apache 
is just compensating for this so the efforts are fully appreciated especially 
with free software.  It's just unfortunate that the PCI compliance companies 
are treating it as a requirement that the servers should compensate for it.

Out of interest, you said it is already backported?  I'm using 
squeeze-backports but it hasn't appeared as an update?  Am I doing something 
wrong here?


James Greig


Bug#674142: make it possible to disable ssl compression in apache2

2012-11-22 Thread James Greig
Is there any way to get a .deb of this at all or is it purely a waiting game?

James Greig


Bug#674142: make it possible to disable ssl compression in apache2

2012-11-21 Thread James Greig
Hi,

I second the last message.  I have a number of systems failing PCI compliance 
that run squeeze so would really welcome this patch to debian squeeze even if 
it's backported.

James Greig