Re: services installed and running out of the box

Javier Fernández-Sanguino Peña schrieb: On Wed, Sep 24, 2003 at 03:59:28PM -0400, Noah L. Meyerhans wrote: For starters, I think portmap, rpc.statd, and inetd should not run by default. Not running a mail server (or perhaps only running one on the loopback interface) would be nice, too. A mail

Re: services installed and running out of the box

Javier Fernández-Sanguino Peña schrieb: On Wed, Sep 24, 2003 at 03:59:28PM -0400, Noah L. Meyerhans wrote: For starters, I think portmap, rpc.statd, and inetd should not run by default. Not running a mail server (or perhaps only running one on the loopback interface) would be nice, too. A

Re: PTRACE Fixed?

Hi, Here you'll find a kernel source tree patched against the PTrace bug: ftp://ftp.debian.org/debian/pool/main/k/kernel-source-2.4.20/kernel-sourc e-2.4.20_2.4.20-3woody.3_all.deb I always install my kernel-sources by hand, but out of curiosity, could I get this by means of apt? # apt-cache

Re: PTRACE Fixed?

Hi, Here you'll find a kernel source tree patched against the PTrace bug: ftp://ftp.debian.org/debian/pool/main/k/kernel-source-2.4.20/kernel-sourc e-2.4.20_2.4.20-3woody.3_all.deb I always install my kernel-sources by hand, but out of curiosity, could I get this by means of apt? #

Re: [SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood

Hi, I dont't quite understand the consequences of the above DSA posted by Martin Schulze earlier this day on Debian Security Announcements. When the problem is the dhcp-relay, why is then the dhcp3 package upgraded for Debian and not the dhcp3-relay package? If you only install the dhcp3

Re: [SECURITY] [DSA 149-2] New glibc packages fix

Wolfram Gloger discovered that the bugfix from DSA 149-1 unintentially replaced potential integer overflows in connection with malloc() with more likely divisions by zero. This called for an update. As nearly everything is linked to glibc, does this require a reboot to be sure? Or is

Re: [SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use

Hi, after an apt-get update on my potato box, the following happens: wurm:~# apt-get upgrade Reading Package Lists... Done Building Dependency Tree... Done The following packages have been kept back python-base python-tk 0 packages upgraded, 0 newly installed, 0 to remove and 2 not upgraded.

Re: [SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use

Hi Matt, Ah, I missed the part where you said this was a potato system. It looks like you are installing woody security updates on a potato system. You probably have a line like this: deb http://security.debian.org/ stable/updates main in /etc/apt/sources.list. Since Debian 3.0 (woody)

Re: debian-security-announce-$lang@lists?

I'm not really sure if this is the right place for the language discussion. I believe that everybody on this list at least understands English good enough to be able to get the message and understand the English announcements. Why would someone subscribe to a list she can't follow? And those

Re: debian-security-announce-$lang@lists?

Jens wrote: I think as a system administrator, one is out of luck if one can't follow the English announcements anyway. Siegbert wrote: [snip] I dislike this attitude No English, no IT. In many states school systems aren't good enough or English is not taught as first foreign language.

sshd attack?

Hello, I get about 100 log entries of the following pattern: Aug 14 01:29:01 myserver sshd[27175]: Disconnecting: crc32 compensation attack: network attack detected What´s this? How can I find out, from where this attack is originating? Must I increase the verbositiy level of sshd to achieve