Re: Debian Kernel security status?

2006-04-21 Thread Steve Kemp
On Thu, Apr 20, 2006 at 04:18:28PM +0200, Jan Luehr wrote: Btw. Why do a lot of DSAs care about oldstable, while kernel-updates avoid woody? Because building kernels is hard for Sarge and very hard for Woody. I seem to recall Joey asking for volunteers to help work on kernels a good few

Re: Debian Kernel security status?

2006-04-21 Thread Michael Stone
On Thu, Apr 20, 2006 at 04:18:28PM +0200, Jan Luehr wrote: Btw. Why do a lot of DSAs care about oldstable, while kernel-updates avoid woody? Because the kernel build process for woody is even worse than for sarge. Mike Stone -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: Security status of mozilla-* packages

2006-04-21 Thread Greg Norris
On Thu, Apr 20, 2006 at 11:02:20AM +0100, James Davis wrote: Actually, the release of Thunderbird which fixes these vulnerabilities (1.5.0.2) has not completed testing and is not a 'release' yet. The vulnerability report is confusing, in that it implies that Thunderbird 1.5.0.2 should be

Re: Security status of mozilla-* packages

2006-04-21 Thread Moritz Muehlenhoff
Holger Mense wrote: the Mozilla team has recently released new versions of Firefox, Mozilla Suite, Thunderbird, which also fix several security issues (http://www.mozilla.org/projects/security/known-vulnerabilities.html) How far are these issues affected by the Debian packages? Will there be=

Re: postfix in qmail out proftpd in pureftpd

2006-04-21 Thread Florian Weimer
* I found you in a search and thought you could help. I am unable to get in touch with the webmaster at qmail. If you can answer this question it would be greatly appreciated. Many thanks for your help. diane We have been receiving mail from several people being sent under different

Re: Debian Kernel security status?

2006-04-21 Thread dann frazier
On Thu, Apr 20, 2006 at 04:18:28PM +0200, Jan Luehr wrote: Well, looking back at woody, kernel updates appear infrequently and not that often. I can remeber that we asked for a kernel-update but nothing came around. I can't speak for the stable security team; but I suspect it was a lack of