Heute abend

2003-07-28 Thread Andreas Zeitz-Fehse
Hi, ich werd wohl heute mit dem Fahrad hochfahren. Kannst du mir bitte das ladegeraete fuers Handy mit auf den Berg bringen? mfg Andy -- --- Optel Informatik GmbH Rathausallee 10 53757 St. Augustin Germany Tel.: +49 2241 9211020 Fax : +49 2241 921

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Marcin Owsiany
On Mon, Jul 28, 2003 at 11:38:51AM -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? You could subscribe to debian-changes@lists.debian.org See http://lists.debian.org/debian-chang

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Marcin Owsiany
On Mon, Jul 28, 2003 at 11:38:51AM -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? You could subscribe to [EMAIL PROTECTED] See http://lists.debian.org/debian-changes/ Marcin PS

Re: Advice Needed On Recent Rootings

2003-07-28 Thread Javier Fernández-Sanguino Peña
On Tue, Jun 03, 2003 at 10:01:33AM -0700, Mark Ferlatte wrote: > Phillip Hofmeister said on Tue, Jun 03, 2003 at 10:02:09AM -0400: > > However, for the most part, chrooting is a valid countermeasure/method > > to compartmentalize. It is a shame that no distribution comes with > > packages natively

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks for the info. I don't like depending on Red Hat for security fixes. I want to rely on Debian for this kind of stuff I just didn't know where to find it. Thanks --- Ulrich Scholler <[EMAIL PROTECTED]> wrote: > Hi Bruce, > > On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner > wrote: > >

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Ulrich Scholler
Hi Bruce, On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? I found the Red Hat > info on Bugtraq but there was no mention of Debian > Source anywh

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
When were they patched? And how do I know when they are patched and when they are available? Is there somewhere I can find this info? I found the Red Hat info on Bugtraq but there was no mention of Debian Source anywhere. Thanks --- Matthijs Mohlmann <[EMAIL PROTECTED]> wrote: > Why download t

Re: Advice Needed On Recent Rootings

2003-07-28 Thread Javier Fernández-Sanguino Peña
On Tue, Jun 03, 2003 at 10:01:33AM -0700, Mark Ferlatte wrote: > Phillip Hofmeister said on Tue, Jun 03, 2003 at 10:02:09AM -0400: > > However, for the most part, chrooting is a valid countermeasure/method > > to compartmentalize. It is a shame that no distribution comes with > > packages natively

Re: Advice Needed On Recent Rootings

2003-07-28 Thread Adam Majer
On Tue, Jun 03, 2003 at 10:02:09AM -0400, Phillip Hofmeister wrote: > On Mon, 02 Jun 2003 at 03:38:21PM -0500, Adam Majer wrote: > > With something like sendmail or apache, it only needs to see a very > > limited part of the file system, so even braking these will not do > > any real damage. > > D

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks for the info. I don't like depending on Red Hat for security fixes. I want to rely on Debian for this kind of stuff I just didn't know where to find it. Thanks --- Ulrich Scholler <[EMAIL PROTECTED]> wrote: > Hi Bruce, > > On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner > wrote: > >

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Ulrich Scholler
Hi Bruce, On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? I found the Red Hat > info on Bugtraq but there was no mention of Debian > Source anywh

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Matthijs Mohlmann
Why download the source from RedHat? The source from debian is also patched with needed patches. apt-get install kernel-source On Mon, 2003-07-28 at 19:05, Bruce Banner wrote: > You can download Red Hats > kernel-source-2.4.20-19.9.i386.rpm run alien against > it and install the dpkg'ed kernel-

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
You can download Red Hats kernel-source-2.4.20-19.9.i386.rpm run alien against it and install the dpkg'ed kernel-source.deb. I have been forced to do this in the past to get patches that havn't been released or in the main stream kernel from kernel.org yet. Peace --- Phillip Hofmeister <[EMAIL

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
When were they patched? And how do I know when they are patched and when they are available? Is there somewhere I can find this info? I found the Red Hat info on Bugtraq but there was no mention of Debian Source anywhere. Thanks --- Matthijs Mohlmann <[EMAIL PROTECTED]> wrote: > Why download t

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Florian Weimer
Herbert Xu <[EMAIL PROTECTED]> writes: >>> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >>> could be spoofed by sending forged packets with bogus source >>> addresses the same as the local host. >> >> Ah, this one. I don't even know if it's about IP. >> >> As usual, Red H

Re: Woody security updates report.

2003-07-28 Thread George Georgalis
On Mon, Jul 28, 2003 at 09:18:31AM -0500, Andr?s Rold?n wrote: >Hi all. > >I have a Debian Woody up-to-date'd production server (it's daily updated) and >I need a report of the security updates made in the server since a given time >ago >(a month, a couple of months or so). > >Is there any way, a

Re: Advice Needed On Recent Rootings

2003-07-28 Thread Adam Majer
On Tue, Jun 03, 2003 at 10:02:09AM -0400, Phillip Hofmeister wrote: > On Mon, 02 Jun 2003 at 03:38:21PM -0500, Adam Majer wrote: > > With something like sendmail or apache, it only needs to see a very > > limited part of the file system, so even braking these will not do > > any real damage. > > D

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Matthijs Mohlmann
Why download the source from RedHat? The source from debian is also patched with needed patches. apt-get install kernel-source On Mon, 2003-07-28 at 19:05, Bruce Banner wrote: > You can download Red Hats > kernel-source-2.4.20-19.9.i386.rpm run alien against > it and install the dpkg'ed kernel-

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
You can download Red Hats kernel-source-2.4.20-19.9.i386.rpm run alien against it and install the dpkg'ed kernel-source.deb. I have been forced to do this in the past to get patches that havn't been released or in the main stream kernel from kernel.org yet. Peace --- Phillip Hofmeister <[EMAIL

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Beware there is also a vulnerability in the spanning tree implementation as well so. Peace --- Phillip Hofmeister <[EMAIL PROTECTED]> wrote: > If I do use bridging...is there a patch? > > What is the consequences of an unpatched system? (In > more detail than > below) > > On Mon, 28 Jul 2003 a

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Florian Weimer
Herbert Xu <[EMAIL PROTECTED]> writes: >>> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >>> could be spoofed by sending forged packets with bogus source >>> addresses the same as the local host. >> >> Ah, this one. I don't even know if it's about IP. >> >> As usual, Red H

Re: Woody security updates report.

2003-07-28 Thread George Georgalis
On Mon, Jul 28, 2003 at 09:18:31AM -0500, Andr?s Rold?n wrote: >Hi all. > >I have a Debian Woody up-to-date'd production server (it's daily updated) and >I need a report of the security updates made in the server since a given time ago >(a month, a couple of months or so). > >Is there any way, a t

Woody security updates report.

2003-07-28 Thread Andrés Roldán
Hi all. I have a Debian Woody up-to-date'd production server (it's daily updated) and I need a report of the security updates made in the server since a given time ago (a month, a couple of months or so). Is there any way, a tool or something to do that? Thanks in advance. -- Andres Roldan

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Phillip Hofmeister
If I do use bridging...is there a patch? What is the consequences of an unpatched system? (In more detail than below) On Mon, 28 Jul 2003 at 07:39:53PM +1000, Herbert Xu wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Beware there is also a vulnerability in the spanning tree implementation as well so. Peace --- Phillip Hofmeister <[EMAIL PROTECTED]> wrote: > If I do use bridging...is there a patch? > > What is the consequences of an unpatched system? (In > more detail than > below) > > On Mon, 28 Jul 2003 a

Woody security updates report.

2003-07-28 Thread Andrés Roldán
Hi all. I have a Debian Woody up-to-date'd production server (it's daily updated) and I need a report of the security updates made in the server since a given time ago (a month, a couple of months or so). Is there any way, a tool or something to do that? Thanks in advance. -- Andres Roldan <

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Phillip Hofmeister
If I do use bridging...is there a patch? What is the consequences of an unpatched system? (In more detail than below) On Mon, 28 Jul 2003 at 07:39:53PM +1000, Herbert Xu wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks, --- Herbert Xu <[EMAIL PROTECTED]> wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry Kreuscher discovered that > the Forwarding table > >> could be spoofed by sending forged packets with > bogus source > >> addre

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Herbert Xu
Florian Weimer <[EMAIL PROTECTED]> wrote: > Bruce Banner <[EMAIL PROTECTED]> writes: > >> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >> could be spoofed by sending forged packets with bogus source >> addresses the same as the local host. > > Ah, this one. I don't even kn

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks, --- Herbert Xu <[EMAIL PROTECTED]> wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry Kreuscher discovered that > the Forwarding table > >> could be spoofed by sending forged packets with > bogus source > >> addre

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Herbert Xu
Florian Weimer <[EMAIL PROTECTED]> wrote: > Bruce Banner <[EMAIL PROTECTED]> writes: > >> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >> could be spoofed by sending forged packets with bogus source >> addresses the same as the local host. > > Ah, this one. I don't even kn