Critical bug in pdns - security team not responding

2005-07-09 Thread Christoph Haas
Dear list... our package 'pdns' in Sarge has a serious bug which can be abused to run a DoS attack against a name server. My co-maintainer already mailed the security team but did not get a response yet. Currently we are preparing a new package to upload into 'unstable'. How else can we get the f

Re: hardware for authentication

2005-07-09 Thread Olaf
Am Donnerstag, 9. Juni 2005 08:26 schrieb martin f krafft: > Do you guys use any hardware for authentication with PAM? E.g. > fingerprint sensors, USB dongles and the like... > > Are there any products you can recommend for Debian and/or other > distributions? I'm using the experimental package li

Re: Debian Security Support in Place

2005-07-09 Thread Petter Reinholdtsen
[Sven 'Rae the Git' Grounsell] > Also, you are IMHO ignoring, that Debian is one of the _very_ few > distros, that provides _seamless_ upgrades between even major > releases. This is a slight exaggeration, as this do not really work very seamlessly for packages where the configuration was changed

Re: Debian Security Support in Place

2005-07-09 Thread Petter Reinholdtsen
[Martin Wodrich] >> IIRC security-support for sarge started befor its release. > > But only one month before the release. That depends on your definition of support. The testing security team was working hard to secure it a long time before sarge was released. http://secure-testing.alioth.debia

Re: Debian Security Support in Place

2005-07-09 Thread Sven 'Rae the Git' Grounsell
Robert Lemmen <[EMAIL PROTECTED]> wrote: > On Sat, Jul 09, 2005 at 10:22:29AM +0200, Lupe Christoph wrote: > > So in essence the announcement says "screw you, commercial > > customers". > > > > Please don't do that. It makes promoting Debian awkward. > > are you aware that we are talking about *

Re: Debian Security Support in Place

2005-07-09 Thread Robert Lemmen
On Sat, Jul 09, 2005 at 10:22:29AM +0200, Lupe Christoph wrote: > So in essence the announcement says "screw you, commercial customers". > > Please don't do that. It makes promoting Debian awkward. are you aware that we are talking about *oldstable* here? it was released july 2002, i think if it

Adobe+macromedia+OS etc all in CD under $99

2005-07-09 Thread Sammy
soft at incredibly low prices http://orygr.u1y9ftc5r4cj9vc.trophemahi.info Nature has a great simplicity and therefore a great beauty. Life is a fatal complaint, and an eminently contagious one. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble?

Re: Debian Security Support in Place

2005-07-09 Thread Lupe Christoph
On Saturday, 2005-07-09 at 10:37:27 +0200, martin f krafft wrote: > also sprach Lupe Christoph <[EMAIL PROTECTED]> [2005.07.09.1022 +0200]: > > > The security team will continue to support Debian GNU/Linux 3.0 > > > alias woody until May 2006, or if the security support for the > > > next release,

Re: Debian Security Support in Place

2005-07-09 Thread Jan Lühr
(open letter to the debian security team) Greetings,.. on friday, 8th july 2005 07:58 Martin Schulze wrote: [...] > The Debian project confirms that the security infrastructure for both > the current release Debian GNU/Linux 3.1 (alias sarge) and the former > release 3.0 (alias woody) is working

Re: Debian Security Support in Place

2005-07-09 Thread Martin Schulze
Lupe Christoph wrote: > > The security team will continue to support Debian GNU/Linux 3.0 alias > > woody until May 2006, or if the security support for the next release, > > codenamed etch, starts, whatever happens first. > > This is equivalent to saying "We will rip security support for oldstabl

Re: Debian Security Support in Place

2005-07-09 Thread martin f krafft
also sprach Lupe Christoph <[EMAIL PROTECTED]> [2005.07.09.1022 +0200]: > > The security team will continue to support Debian GNU/Linux 3.0 > > alias woody until May 2006, or if the security support for the > > next release, codenamed etch, starts, whatever happens first. > > This is equivalent to

Re: Debian Security Support in Place

2005-07-09 Thread Lupe Christoph
> The security team will continue to support Debian GNU/Linux 3.0 alias > woody until May 2006, or if the security support for the next release, > codenamed etch, starts, whatever happens first. This is equivalent to saying "We will rip security support for oldstable from under your feet at any ti