Re: [SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability

2005-09-19 Thread Christoph Pleger
Hallo, On Fri, 16 Sep 2005 15:21:45 +0200 (CEST) [EMAIL PROTECTED] (Martin Schulze) wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - Debian Security Advisory DSA 815-1 [EMAIL PROTECTED]

Re: [SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability

2005-09-19 Thread Evgeni Golov
On Mon, 19 Sep 2005 08:44:21 +0200 Christoph Pleger [EMAIL PROTECTED] wrote: Hallo, On Fri, 16 Sep 2005 15:21:45 +0200 (CEST) [EMAIL PROTECTED] (Martin Schulze) wrote: Package: kdebase Vulnerability : programming error Problem type : local Debian-specific: no CVE ID

Re: Abwesenheit

2005-09-19 Thread paddy
On Fri, Sep 16, 2005 at 06:06:13PM +0200, Horst Pflugstaedt wrote: On Fri, Sep 16, 2005 at 05:38:00PM +0200, Evgeni Golov wrote: On Fri, 16 Sep 2005 17:19:37 +0200 Peer Janssen [EMAIL PROTECTED] wrote: Isn't sending such mails a security risk? Not only this. It's also quite

Re: Abwesenheit

2005-09-19 Thread paddy
On Mon, Sep 19, 2005 at 01:23:13PM +0200, Florian Weimer wrote: Is there a reason not to simply read the Precedence: list header and simply not respond at all ? Precedence: list is non-standard. Technically speaking, RFC-compliant software should not use it. 8-/ I'm surprised. Do you

Re: Abwesenheit

2005-09-19 Thread Peter Palfrader
On Mon, 19 Sep 2005, Florian Weimer wrote: Is there a reason not to simply read the Precedence: list header and simply not respond at all ? Precedence: list is non-standard. Technically speaking, RFC-compliant software should not use it. 8-/ That's not quite correct, software MAY use

Re: Abwesenheit

2005-09-19 Thread Florian Weimer
* Peter Palfrader: On Mon, 19 Sep 2005, Florian Weimer wrote: Is there a reason not to simply read the Precedence: list header and simply not respond at all ? Precedence: list is non-standard. Technically speaking, RFC-compliant software should not use it. 8-/ That's not quite

unsubscribe

2005-09-19 Thread Felipe Talavera Armero
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Abwesenheit

2005-09-19 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: Is there a reason not to simply read the Precedence: list header and simply not respond at all ? BTW: Exchnage Server does this. Gruss Bernd -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

security.debian.org timeouts

2005-09-19 Thread Noèl Köthe
Hello, anybody knows what's the problem with klecker/security.d.o? The whole day I get timeouts but I could update xfree(woody)/xorg(sarge) on some machine but I didn't find the DSA for it. Any information about this? thx. -- Noèl Köthe noel debian.org signature.asc Description: This is a

Re: security.debian.org timeouts

2005-09-19 Thread Andreas Barth
* Noèl Köthe ([EMAIL PROTECTED]) [050919 21:19]: anybody knows what's the problem with klecker/security.d.o? The link to the outside world is fully saturated currently. There are ideas discussed how we can add more machines / bandwith, but that's not a short-term solution. The whole day I get

Re: security.debian.org timeouts

2005-09-19 Thread Noah Meyerhans
On Mon, Sep 19, 2005 at 09:18:29PM +0200, No?l K?the wrote: anybody knows what's the problem with klecker/security.d.o? The whole day I get timeouts but I could update xfree(woody)/xorg(sarge) on some machine but I didn't find the DSA for it. Any information about this? See

Re: security.debian.org timeouts

2005-09-19 Thread Noèl Köthe
Am Montag, den 19.09.2005, 15:24 -0400 schrieb Noah Meyerhans: On Mon, Sep 19, 2005 at 09:18:29PM +0200, No?l K?the wrote: anybody knows what's the problem with klecker/security.d.o? The whole day I get timeouts but I could update xfree(woody)/xorg(sarge) on some machine but I didn't find

Re: security.debian.org timeouts

2005-09-19 Thread Steve Kemp
On Mon, Sep 19, 2005 at 09:18:29PM +0200, No?l K?the wrote: anybody knows what's the problem with klecker/security.d.o? http://lists.debian.org/debian-curiosa/2005/09/msg00018.html There is an advisory pending ... Steve -- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Re: security.debian.org timeouts

2005-09-19 Thread Florian Weimer
* Steve Kemp: On Mon, Sep 19, 2005 at 09:18:29PM +0200, No?l K?the wrote: anybody knows what's the problem with klecker/security.d.o? http://lists.debian.org/debian-curiosa/2005/09/msg00018.html The MRTG output is broken (as suggested by the straight line). Real port utilization is

Re: security.debian.org timeouts

2005-09-19 Thread Bartosz Fenski aka fEnIo
On Mon, Sep 19, 2005 at 10:04:14PM +0200, Florian Weimer wrote: BTW, I don't understand why this was posted to debian-curiosa, either. I got into the habit of reading important announcements for the users on http://planet.debian.net. Now it seems debian-curiosa is another place for them. I

Re: security.debian.org timeouts

2005-09-19 Thread Andreas Barth
* Bartosz Fenski aka fEnIo ([EMAIL PROTECTED]) [050919 22:46]: On Mon, Sep 19, 2005 at 10:04:14PM +0200, Florian Weimer wrote: BTW, I don't understand why this was posted to debian-curiosa, either. I got into the habit of reading important announcements for the users on

Re: security.debian.org timeouts

2005-09-19 Thread Noah Meyerhans
On Mon, Sep 19, 2005 at 10:45:37PM +0200, Bartosz Fenski aka fEnIo wrote: I wonder what else should I read to keep in touch with such important information? slashdot? ;) signature.asc Description: Digital signature

Re: security.debian.org timeouts

2005-09-19 Thread Michael Stone
On Mon, Sep 19, 2005 at 09:22:18PM +0200, Andreas Barth wrote: The link to the outside world is fully saturated currently. There are ideas discussed how we can add more machines / bandwith, but that's not a short-term solution. The current problem isn't a bandwidth problem, but it is related

Re: security.debian.org timeouts

2005-09-19 Thread Florian Weimer
* Michael Stone: The current problem isn't a bandwidth problem, but it is related to people downloading the X update. The available bandwidth is not sufficient for dealing with an X11 update, at least in the usual way (pushing everything that's built by the source packages, and not just the

Re: security.debian.org timeouts

2005-09-19 Thread Bartosz Fenski aka fEnIo
On Mon, Sep 19, 2005 at 10:48:15PM +0200, Andreas Barth wrote: BTW, I don't understand why this was posted to debian-curiosa, either. I got into the habit of reading important announcements for the users on http://planet.debian.net. Now it seems debian-curiosa is another place for