Bug#820069: dhcpcd5: configures interface without being asked to

2019-01-16 Thread Adam McKenna
severity 820069 important tags 820069 security I was hit by this bug last night. After plugging a new Internet provider into my local network, my Debian router automatically added an IP address and default route to the new device. This resulted in my entire home's Internet access being disrupted

Bug#701200: ferm

2017-08-04 Thread Adam McKenna
Alright I guess I'll have to take this to debian-security then, this may even warrant a CVE On Fri, Aug 4, 2017 at 9:23 AM Alexander Wirt wrote: > On Fri, 04 Aug 2017, Adam McKenna wrote: > > > That makes no sense, if that's the case then why is a default ruleset > &g

Bug#701200: ferm

2017-08-04 Thread Adam McKenna
d 701200 2.4-1 > thanks > > On Fri, 04 Aug 2017, Adam McKenna wrote: > > > tag 701200 security > > > > This is not just a bug, this is a gaping security hole. The default > > configuration is wide open on ipv6. > > > > Please add, at a minimum, t

Bug#701200: ferm

2017-08-04 Thread Adam McKenna
tag 701200 security This is not just a bug, this is a gaping security hole. The default configuration is wide open on ipv6. Please add, at a minimum, the following default rules for ipv6: domain ip6 { table filter { chain INPUT { policy DROP; interface lo ACC

Bug#861927: How to change /proc mount options is undocumented

2017-05-05 Thread Adam McKenna
Package: base Severity: normal There is no documentation within the procps package or the wiki on how to modify /proc mount options on Jessie. There is no /proc entry in /etc/fstab. The correct way appears to be to add the /proc entry to fstab. Please add documentation that describes the offici

Bug#811033: Workaround

2016-05-19 Thread Adam McKenna
So to save everyone else the hour and a half I spent figuring out how to fix this, here's what you need to do: # lvconvert --mirrors -1 # vgchange -ay # lvconvert -m 1 Where lv_device is the device that's having issues, and is the SECONDARY device on the RAID1 mierror. This will throw a warn

Bug#797799: php5-mysqlnd: (Upstream Bug #68344): MySQLi does not provide way to disable peer certificate validation

2015-09-02 Thread Adam McKenna
Package: php5-mysqlnd Version: 5.6.12+dfsg-0+deb8u1 Severity: important Tags: security upstream patch https://bugs.php.net/bug.php?id=68344 Description: When the MySQLi extension is compiled against mysqlnd there is no method to disable peer_name validation. Since MySQL 5.6 now enab

Bug#325281: foo

2006-07-25 Thread Adam McKenna
severity 325281 wishlist tag 325281 wontfix merge 325281 166782 thanks This bug cannot be fixed to my satisfaction, as Debian does not provide a safe facility for editing inittab as you are requesting. Suggest you modify your inittab manually. Thanks. -- To UNSUBSCRIBE, email to [EMAIL PROTE

Bug#353277: Please reject to rule on the ndiswrapper question

2006-03-05 Thread Adam McKenna
On Sat, Mar 04, 2006 at 04:47:17PM -0800, Steve Langasek wrote: > Well, I agree with you that overruling the foundation documents is out of > scope for the technical committee; except the tech ctte has not been asked to > interpret or overrule the foundation documents. The Social Contract > mandat

Bug#314289: workaround

2005-09-26 Thread Adam McKenna
A workaround for this bug (worked for me, anyway) is to disable UsePAM and enable UseLogin in the sshd config file. YMMV, --Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#314289: experiencing the same issue

2005-07-01 Thread Adam McKenna
I'm experiencing the same issue with this package. Here's an strace -f of the sshd process, starting after I typed my password (password removed). Process 5023 attached - interrupt to quit read(6, "\0\0\0\21", 4) = 4 read(6, "4\0\0\0\1\0\0\0\10", 17) = 17 write(7, "\0\0\0\r\6", 5

Bug#308705: removing ipfwadm

2005-05-16 Thread Adam McKenna
ll request its removal. --Adam -- Adam McKenna <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]