Update

2006-09-01 Thread Maik Holtkamp
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I just received: - ---cut--- Subject: CRON-APT completed The following packages will be upgraded: base-config libc6 libc6-dev libfreetype6 libfreetype6-dev libgnutls11 libperl5.8 libpq3 libsasl2 libsasl2-modules locales login passwd perl

Re: Update

2006-09-01 Thread Dominic Hargreaves
On Fri, Sep 01, 2006 at 09:39:07AM +0200, Maik Holtkamp wrote: Hi, I just received: ---cut--- Subject: CRON-APT completed The following packages will be upgraded: base-config libc6 libc6-dev libfreetype6 libfreetype6-dev libgnutls11 libperl5.8 libpq3 libsasl2 libsasl2-modules

Re: When are security updates effective?

2006-09-01 Thread Petter Reinholdtsen
[Dann Frazier] Would this help? http://lists.debian.org/debian-devel/2006/08/msg00629.html Getting all packages requiring an reboot to call /usr/share/update-notifier/notify-reboot-required or touch /var/run/reboot-required would definitely be a step in the right direction, and handle kernel

Re: GPG errors from apt update

2006-09-01 Thread Sam Morris
On Thu, 31 Aug 2006 16:52:06 -0700, Hedges, Mark wrote: But then, I tried apt-get update about 5 minutes later with NO CHANGES and got these erorrs: Failed to fetch http://ftp.us.debian.org/debian/dists/testing/main/binary-i386/PackagesI ndex MD5Sum mismatch [...] $ host

Re: GPG errors from apt update

2006-09-01 Thread Robert Dobbs
From: Sam Morris [EMAIL PROTECTED] Date: Fri, 1 Sep 2006 10:11:30 + (UTC) On Thu, 31 Aug 2006 16:52:06 -0700, Hedges, Mark wrote: But then, I tried apt-get update about 5 minutes later with NO CHANGES and got these erorrs: Failed to fetch

Re: GPG errors from apt update

2006-09-01 Thread Jim Popovitch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Dobbs wrote: I'm surprised more people haven't reported these problems. Maybe they were ignored because they did resemble the older problem with the signing key so closely. I do recall seeing something similar to what you describe, but it

Re: GPG errors from apt update

2006-09-01 Thread Robert Dobbs
From: Jim Popovitch [EMAIL PROTECTED] Date: Fri, 01 Sep 2006 13:55:56 -0400 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Dobbs wrote: I'm surprised more people haven't reported these problems. Maybe they were ignored because they did resemble the older problem with the signing

Re: When are security updates effective?

2006-09-01 Thread Mikko Rapeli
On Thu, Aug 31, 2006 at 07:23:27PM -0300, Henrique de Moraes Holschuh wrote: Indeed. lsof +L1 is currently useless for detecting unlinked libraries. I've been using lsof | grep path inode to detect them for a while now. Still, I hope the older, saner lsof +L1 behaviour can be restored

Re: When are security updates effective?

2006-09-01 Thread Michael Stone
On Sat, Sep 02, 2006 at 12:28:17AM +0300, Mikko Rapeli wrote: - can a process running vulnerable code be exploited to not show the shared libraries and other non-shared libraries and files it had opened for reading at some point? Of course it can. And that's irrelevant to the question at

Re: [SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure

2006-09-01 Thread Nick Boyce
Florian Weimer wrote: * Nick Boyce: For interest, can anyone explain why a problem with kdm leads to the need to reissue so many KDE packages ? Security updates a performed on per source package (after all, we need to ship an updated source package to comply with the DFSG and various

Re: [SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure

2006-09-01 Thread Nick Boyce
Nick Boyce wrote: I don't mean to complain - not being a developer I may well not be aware of some very good reason for it - but the pain that ensues for people like me, on dial-up links (don't ask ...), when we must download so many binaries just because something small like kdm has changed,

Re: When are security updates effective?

2006-09-01 Thread Mikko Rapeli
On Fri, Sep 01, 2006 at 06:56:17PM -0400, Michael Stone wrote: On Sat, Sep 02, 2006 at 12:28:17AM +0300, Mikko Rapeli wrote: - can a process running vulnerable code be exploited to not show the shared libraries and other non-shared libraries and files it had opened for reading at some

They envy you

2006-09-01 Thread Damian Robison
We hope you get this email and can respond. Walter referred your email to us as he thought our service would be of value to you. we have a home plan prepared for you. The plan is less than your current one and has more benefits. We can assist you in your options here: