Security updates

2001-02-12 Thread Piotr Tarnowski
Hi, I am new in Debian but I found its apt-based update system very useful. Recently I have some problems with downloading from security.debian.org (connection time-out and things like that). Two questions: 1) Do others from Poland/Gdansk (via TPSA) have the same problem ? 2) When I fail with dse

Re: Proposal

2001-02-12 Thread Tal Danzig
On Tue, Feb 13, 2001 at 02:29:19AM -0200, Carlos Laviola wrote: > Sorry to disturb you all, but I am not too interested in the huge threads > that have appeared in debian-security lately. I subscribed to this list > mostly to get noticed of security problems in the distribution itself, and > it see

Re: Proposal

2001-02-12 Thread Tyler Braun
This if from the Debian mailing list subscribe page at: http://www.debian.org/MailingLists/subscribe debian-security-announce The security team informs the users about security problems here. Mainly security advisories covering fixed packages are released. Moderated:

Proposal

2001-02-12 Thread Carlos Laviola
Sorry to disturb you all, but I am not too interested in the huge threads that have appeared in debian-security lately. I subscribed to this list mostly to get noticed of security problems in the distribution itself, and it seems like people are using it to get answers now (like debian-user focused

Re: Proposal

2001-02-12 Thread Paul Haesler
All, Carlos wrote: > Sorry to disturb you all, but I am not too interested in the huge > threads that have appeared in debian-security lately. I subscribed to > this list mostly to get noticed of security problems in the > distribution itself, and it seems like people are using it to get > answer

Re: Proposal

2001-02-12 Thread Tal Danzig
On Tue, Feb 13, 2001 at 02:29:19AM -0200, Carlos Laviola wrote: > Sorry to disturb you all, but I am not too interested in the huge threads > that have appeared in debian-security lately. I subscribed to this list > mostly to get noticed of security problems in the distribution itself, and > it se

Re: Proposal

2001-02-12 Thread Tyler Braun
This if from the Debian mailing list subscribe page at: http://www.debian.org/MailingLists/subscribe debian-security-announce The security team informs the users about security problems here. Mainly security advisories covering fixed packages are released. Moderated

Proposal

2001-02-12 Thread Carlos Laviola
Sorry to disturb you all, but I am not too interested in the huge threads that have appeared in debian-security lately. I subscribed to this list mostly to get noticed of security problems in the distribution itself, and it seems like people are using it to get answers now (like debian-user focuse

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Daniel Jacobowitz
On Mon, Feb 12, 2001 at 10:43:33AM -0200, Carlos Carvalho wrote: > Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: > >IMHO people of security team shouldn't spend their time to serve > >security fixes for testing. People who want to use testing on > >security relevant machine

PGP and GnuPG

2001-02-12 Thread Antti Tolamo
How compatible are PGP Freeware international and keys made with GnuPG? I have some problems importing keys made with GnuPG to Windows PGP Freeware 6.53++ International. Lot of public keys do get imported, but many get bad parameter error, and I have two set of keys that I can't import at all. S

Re: [Florian.Weimer@RUS.UNI-STUTTGART.DE: Re: Linux kernel sysctl() vulnerability]

2001-02-12 Thread Florian Weimer
Ethan Benson <[EMAIL PROTECTED]> writes: > i hope that Alan Cox either releases 2.2.19 soon or an errata patch to > 2.2.18 to fix these, i like many do not use distribution kernels. I've derived a 2.2.18-compatible patch for the ptrace() issue: http://cert.uni-stuttgart.de/files/fw/lin

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Philippe BARNETCHE
On Mon, Feb 12, 2001 at 05:29:58PM +0100, Tim van Erven wrote: > On Mon, Feb 12, 2001 at 03:17:40PM +0100, Teun Vink <[EMAIL PROTECTED]> wrote: > > On Mon, 12 Feb 2001, Thomas Gebhardt wrote: > > > > > Hi, > > > > > > I am looking for a convenient and secure way for file transfer > > > between th

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Jim Breton
On Mon, Feb 12, 2001 at 03:14:23PM +0100, Thomas Gebhardt wrote: > A quick test with OpenSSH 2.3 + sftp 0.9.5 and SSH 2.1 Windows > Client did not succeed. I had similar failures with scp, sftp, and gftp using the OpenSSH-2.3.0 server. IIRC my server logs had something like "... we do not read...

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Tim van Erven
On Mon, Feb 12, 2001 at 03:17:40PM +0100, Teun Vink <[EMAIL PROTECTED]> wrote: > On Mon, 12 Feb 2001, Thomas Gebhardt wrote: > > > Hi, > > > > I am looking for a convenient and secure way for file transfer > > between the MS world and a GNU/Linux Server. > > > > The Windows client from ssh.com p

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Daniel Jacobowitz
On Mon, Feb 12, 2001 at 10:43:33AM -0200, Carlos Carvalho wrote: > Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: > >IMHO people of security team shouldn't spend their time to serve > >security fixes for testing. People who want to use testing on > >security relevant machin

PGP and GnuPG

2001-02-12 Thread Antti Tolamo
How compatible are PGP Freeware international and keys made with GnuPG? I have some problems importing keys made with GnuPG to Windows PGP Freeware 6.53++ International. Lot of public keys do get imported, but many get bad parameter error, and I have two set of keys that I can't import at all. S

Re: [Florian.Weimer@RUS.UNI-STUTTGART.DE: Re: Linux kernel sysctl() vulnerability]

2001-02-12 Thread Florian Weimer
Ethan Benson <[EMAIL PROTECTED]> writes: > i hope that Alan Cox either releases 2.2.19 soon or an errata patch to > 2.2.18 to fix these, i like many do not use distribution kernels. I've derived a 2.2.18-compatible patch for the ptrace() issue: http://cert.uni-stuttgart.de/files/fw/li

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Philippe BARNETCHE
On Mon, Feb 12, 2001 at 05:29:58PM +0100, Tim van Erven wrote: > On Mon, Feb 12, 2001 at 03:17:40PM +0100, Teun Vink <[EMAIL PROTECTED]> wrote: > > On Mon, 12 Feb 2001, Thomas Gebhardt wrote: > > > > > Hi, > > > > > > I am looking for a convenient and secure way for file transfer > > > between t

Re: sources.list

2001-02-12 Thread Fraser Campbell
Duane Powers <[EMAIL PROTECTED]> writes: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get up

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Jim Breton
On Mon, Feb 12, 2001 at 03:14:23PM +0100, Thomas Gebhardt wrote: > A quick test with OpenSSH 2.3 + sftp 0.9.5 and SSH 2.1 Windows > Client did not succeed. I had similar failures with scp, sftp, and gftp using the OpenSSH-2.3.0 server. IIRC my server logs had something like "... we do not read..

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Teun Vink
On Mon, 12 Feb 2001, Thomas Gebhardt wrote: > Hi, > > I am looking for a convenient and secure way for file transfer > between the MS world and a GNU/Linux Server. > > The Windows client from ssh.com provides a GUI for file transfer > over ssh. I wonder whether sftp from Brian Wellington > ([EMA

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Tim van Erven
On Mon, Feb 12, 2001 at 03:17:40PM +0100, Teun Vink <[EMAIL PROTECTED]> wrote: > On Mon, 12 Feb 2001, Thomas Gebhardt wrote: > > > Hi, > > > > I am looking for a convenient and secure way for file transfer > > between the MS world and a GNU/Linux Server. > > > > The Windows client from ssh.com

Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Thomas Gebhardt
Hi, I am looking for a convenient and secure way for file transfer between the MS world and a GNU/Linux Server. The Windows client from ssh.com provides a GUI for file transfer over ssh. I wonder whether sftp from Brian Wellington ([EMAIL PROTECTED]) (debian package: sftp) implements the same pro

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread A . L . Meyers
-BEGIN PGP SIGNED MESSAGE- On Monday 12 February 2001 14:02, Anthony Towns wrote: > > On Mon, Feb 12, 2001 at 10:43:33AM -0200, Carlos Carvalho wrote: > > Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: > > >IMHO people of security team shouldn't spend their time to se

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Anthony Towns
On Mon, Feb 12, 2001 at 10:43:33AM -0200, Carlos Carvalho wrote: > Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: > >IMHO people of security team shouldn't spend their time to serve > >security fixes for testing. People who want to use testing on > >security relevant machine

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Carlos Carvalho
Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: >IMHO people of security team shouldn't spend their time to serve >security fixes for testing. People who want to use testing on >security relevant machines should know what they do and should be >able to handle those issues th

Re: sources.list

2001-02-12 Thread Fraser Campbell
Duane Powers <[EMAIL PROTECTED]> writes: > I have a question - I have a dozen boxen that I am maintaining, all with > Debian ( almost all potato - one woody) I would like to save bandwidth > and centralize administration by utilizing one of the boxes as a apt-get > source. then I can apt-get u

Re: Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Teun Vink
On Mon, 12 Feb 2001, Thomas Gebhardt wrote: > Hi, > > I am looking for a convenient and secure way for file transfer > between the MS world and a GNU/Linux Server. > > The Windows client from ssh.com provides a GUI for file transfer > over ssh. I wonder whether sftp from Brian Wellington > ([EM

Interoperability between sftp and ftp GUI from ssh.com?

2001-02-12 Thread Thomas Gebhardt
Hi, I am looking for a convenient and secure way for file transfer between the MS world and a GNU/Linux Server. The Windows client from ssh.com provides a GUI for file transfer over ssh. I wonder whether sftp from Brian Wellington ([EMAIL PROTECTED]) (debian package: sftp) implements the same pr

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread A . L . Meyers
-BEGIN PGP SIGNED MESSAGE- On Monday 12 February 2001 14:02, Anthony Towns wrote: > > On Mon, Feb 12, 2001 at 10:43:33AM -0200, Carlos Carvalho wrote: > > Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: > > >IMHO people of security team shouldn't spend their time to s

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Andreas Tille
On Sun, 11 Feb 2001, Carlos Carvalho wrote: > But it would if security patches were incorporated in testing as well. > So I agree with Laz that it's a design bug. > > Note that we're talking about security-relevant packages, which are a > small portion of the total. > > A question: with the chan

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Anthony Towns
On Mon, Feb 12, 2001 at 10:43:33AM -0200, Carlos Carvalho wrote: > Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: > >IMHO people of security team shouldn't spend their time to serve > >security fixes for testing. People who want to use testing on > >security relevant machin

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Carlos Carvalho
Andreas Tille ([EMAIL PROTECTED]) wrote on 12 February 2001 11:32: >IMHO people of security team shouldn't spend their time to serve >security fixes for testing. People who want to use testing on >security relevant machines should know what they do and should be >able to handle those issues t

Re: Food for thought - SECURITY (design flaw?)

2001-02-12 Thread Andreas Tille
On Sun, 11 Feb 2001, Carlos Carvalho wrote: > But it would if security patches were incorporated in testing as well. > So I agree with Laz that it's a design bug. > > Note that we're talking about security-relevant packages, which are a > small portion of the total. > > A question: with the cha

Re: SSH

2001-02-12 Thread Hanno Böttcher
There is SSH2 for Debian, but it's unofficial. - Original Message - From: Jonas Carlsson <[EMAIL PROTECTED]> To: Sent: Friday, February 09, 2001 2:28 PM Subject: SSH > Why does Debian only have SSH-1 not SSH-2 ? > > Some restrictions or is it something else ? > > I have been recommende