[SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

2004-02-01 Thread Matt Zimmerman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 431-1 [EMAIL PROTECTED] http://www.debian.org/security/ Matt Zimmerman February 1st, 2004

Re: [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

2004-02-01 Thread Arthur de Jong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 431-1 [EMAIL PROTECTED] http://www.debian.org/security/ Matt Zimmerman February 1st, 2004

Re: Query NS Root

2004-02-01 Thread Dale Amon
On Sun, Feb 01, 2004 at 02:29:53PM +0100, Hans Spaans wrote: But than a gain, you can do a joke next month so people have a problem or you can fix this problem by adding allow-query statements to your named.conf and forcing people to abuse someone else. Actually that's precisely how I

Re: Query NS Root

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:50, Dale Amon wrote: Actually that's precisely how I discovered it. I added allow queries and was trying to figure out why I was denying so many queries per second. You added it globally and to every zone? Also allow-transfer is a nice own to get into place. But

Re: security.debian.org is down ?

2004-02-01 Thread François TOURDE
Le 12449ième jour après Epoch, Hideki Yamane écrivait: Hi list, Does anyone know about if security.debian.org is down or not? Seems to be down... Yesterday I was unable to fetch packages, but ping was ok. Now, ping doesn't work. :( -- The best cure for insomnia is to get a lot of sleep.

Re: [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

2004-02-01 Thread Matt Zimmerman
On Sun, Feb 01, 2004 at 12:18:07PM +0100, Arthur de Jong wrote: - -- Debian Security Advisory DSA 431-1 [EMAIL PROTECTED] http://www.debian.org/security/ Matt Zimmerman

Re: [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

2004-02-01 Thread Matt Zimmerman
On Sun, Feb 01, 2004 at 10:40:05PM +, Paul Hink wrote: Does this mean that it is possible that known and fixed (!) security problems are not being corrected in Debian for nearly 5 months? Even though this may be a minor problem, I would like to see it fixed as soon as possible. Trollbait

Query NS Root

2004-02-01 Thread Dale Amon
What is the purpose of a DNS query NS Root? It returns to the requester my list of root servers, which seems pointless... and I am getting hit by them at the rate of several a second from various nameservers. -- -- Dale Amon [EMAIL

Re: Query NS Root

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:02, Dale Amon wrote: What is the purpose of a DNS query NS Root? It returns to the requester my list of root servers, which seems pointless... and I am getting hit by them at the rate of several a second from various nameservers. 'dig . ns @nameserver

Re: Query NS Root

2004-02-01 Thread Dale Amon
On Sun, Feb 01, 2004 at 02:29:53PM +0100, Hans Spaans wrote: But than a gain, you can do a joke next month so people have a problem or you can fix this problem by adding allow-query statements to your named.conf and forcing people to abuse someone else. Actually that's precisely how I

Re: Query NS Root

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:50, Dale Amon wrote: Actually that's precisely how I discovered it. I added allow queries and was trying to figure out why I was denying so many queries per second. You added it globally and to every zone? Also allow-transfer is a nice own to get into place. But

security.debian.org is down ?

2004-02-01 Thread Hideki Yamane
Hi list, Does anyone know about if security.debian.org is down or not? I cannot get .debs from it, and ping to it with no reply. -- Regards, Hideki Yamanemailto:henrich @ samba.gr.jp/iijmio-mail.jp

Re: security.debian.org is down ?

2004-02-01 Thread Teun Vink
On Sunday, February 01, 2004 3:45 PM [GMT+1=CET], Hideki Yamane [EMAIL PROTECTED] wrote: Hi list, Does anyone know about if security.debian.org is down or not? I cannot get .debs from it, and ping to it with no reply. Seems to be the case. XS4all (the hosting provider for s.d.o) seems ok

Re: Query NS Root

2004-02-01 Thread Dale Amon
On Sun, Feb 01, 2004 at 03:46:07PM +0100, Hans Spaans wrote: You added it globally and to every zone? Also allow-transfer is a nice own to get into place. But you will see queries being denied and if you Yes, I've got allow-transfer groups on all domains; allow-query { any; } on all domains I

Re: security.debian.org is down ?

2004-02-01 Thread Alexander Schmehl
* Hideki Yamane [EMAIL PROTECTED] [040201 15:45]: Does anyone know about if security.debian.org is down or not? I cannot get .debs from it, and ping to it with no reply. Citing Joey in the german irc-channel #debian.de: 14:53 Joey[tm] Weder noch, war einfach nicht mehr da, als wir dran

Re: security.debian.org is down ?

2004-02-01 Thread François TOURDE
Le 12449ième jour après Epoch, Hideki Yamane écrivait: Hi list, Does anyone know about if security.debian.org is down or not? Seems to be down... Yesterday I was unable to fetch packages, but ping was ok. Now, ping doesn't work. :( -- The best cure for insomnia is to get a lot of sleep.

Re: [SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

2004-02-01 Thread Arthur de Jong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 431-1 [EMAIL PROTECTED] http://www.debian.org/security/ Matt Zimmerman February 1st, 2004