[Secure-testing-team] Bug#796599: openssh-client: ssh -G no longer returns illegal option (6.0) or unknown option (6.7)

2015-08-22 Thread Francois Marier
Package: openssh-client Version: 1:6.9p1-1 Severity: critical Tags: security Justification: root security hole Sorry for the alarmist bug report. Hopefully this is a false positive and it can be reassigned to chkrootkit, but just in case... The ssh -G test [1] for Linux output has changed:

[Secure-testing-team] Elige Azafatas Para la Expocuz

2015-08-22 Thread Bolivia Modelos
Your email client cannot read this email. To view it online, please go here: http://pack201.w00n.com/display.php?M=315963C=a9a74ad9ac0b4b446fe740663ff7fa8dS=76L=14N=66 To stop receiving these emails:http://pack201.w00n.com/unsubscribe.php?M=315963C=a9a74ad9ac0b4b446fe740663ff7fa8dL=14N=76

[Secure-testing-team] Bug#796642: debian-policy: hardening is an afterthought and should never be

2015-08-22 Thread Richard Jasmin
Package: debian-policy Severity: normal Tags: newcomer upstream security Hardening according to many devs I have spoken with is an afterthought, especially post install. This is like reccommending Debian to be hacked. Im not saying one move can stop a hacker, security is always an ongoing