Re: deb.debian.org vs security.debian.org

2021-08-19 Thread piorunz
://security.debian.org/debian-security I know because I installed bullseye fresh from installer. Perhaps you could stick to that. -- With kindest regards, piorunz. ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system ⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org ⠈⠳⣄

Re: thank *you*, team@security.d.o! (was Re: [SECURITY] [DSA 5000-1] openjdk-11 security update)

2021-11-01 Thread piorunz
On 02/11/2021 00:07, Holger Levsen wrote: hey hey, hear hear! On Mon, Nov 01, 2021 at 07:44:34PM +, Moritz Muehlenhoff wrote: - Debian Security Advisory DSA-5000-1 secur...@debian.org WHHO!

Re: CVE-2017-5715

2022-03-23 Thread piorunz
On 12/03/2022 09:48, Georgi Naplatanov wrote: spectre-meltdown-checker script reports that my system is vulnerable to CVE-2017-5715. My CPU is Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz Is this normal? In the past all checks from spectre-meltdown-checker were green (my system was not

Re: CVE-2017-5715

2022-03-23 Thread piorunz
On 23/03/2022 15:41, Leandro Cunha wrote: Please, take into consideration what is in the link and you can consult through it about CVE: https://security-tracker.debian.org/tracker/CVE-2017-5715 Leandro, I've been on this website before I posted with spectre-meltdown-checker results. I have

Re: amd64 running on Intel Celeron and Pentium? (was: [SECURITY] [DSA 5113-1] firefox-esr security update)

2022-04-13 Thread piorunz
On 12/04/2022 04:59, Friedhelm Waitzmann wrote: You mean, that it is possible to run amd64 on my old hardware 1# vendor_id   : GenuineIntel cpu family  : 6 model   : 22 model name  : Intel(R) Celeron(R) CPU  440  @ 2.00GHz stepping    : 1 microcode   : 0x43

Re: amd64 running on Intel Celeron and Pentium? (was: [SECURITY] [DSA 5113-1] firefox-esr security update)

2022-04-13 Thread piorunz
On 13/04/2022 15:57, Michael Stone wrote: family 15 model 2 is northwood based. no amd64. the best option for that one is to find a cheap second hand box with a CPU that's only 10 years old instead of (literally) 20 years old and retire it; those old p4's were really power hungry, and it

Re: Concerns about Security of packages in Debain OS and the Operating system itself.

2022-05-25 Thread piorunz
Hi Paul, On 25/05/2022 02:10, Paul Wise wrote: bullseye-updates: receives occasional time-sensitive and important updates, such as updates to the timezone database, which often happen just days before the timezone changes, or fixes for packages that get completely broken by some external

Re: Concerns about Security of packages in Debain OS and the Operating system itself.

2022-05-24 Thread piorunz
On 23/05/2022 19:59, Adam McKenna wrote: You are talking about a deterrent though.  I think the question is, what if someone cares more about their political cause than retaining their uploader access? What if someone's keys are compromised and an attacker uploads a compromised package?

Re: CVE-2023-41105 not fixed in bookworm

2024-03-17 Thread piorunz
On 10/03/2024 21:23, StealthMode Hu wrote: Im just going to state this and let yall figure it out. Security Exploits / CVE? Look no matter what OS, or SOFTWARE you run on your electronics hardware. At the end of the day, Electronics has a fatal flaw. And cannot be secured. That flaw has been