Re: security updates for testing?

2002-11-22 Thread ninewands
On Fri, 2002-11-22 at 08:14, Wichert Akkerman wrote: > Previously martin f krafft wrote: > > give me an estimate (someone) on how much manpower is required to > > provide this service for testing? > > As usual that is pretty much impossible to say. In busy periods it might > be two mandays per wee

Re: security updates for testing?

2002-11-22 Thread ninewands
On Fri, 2002-11-22 at 08:14, Wichert Akkerman wrote: > Previously martin f krafft wrote: > > give me an estimate (someone) on how much manpower is required to > > provide this service for testing? > > As usual that is pretty much impossible to say. In busy periods it might > be two mandays per wee

Re: unknown udp port

2002-11-22 Thread Dale Amon
If you look in /etc/bind/named.conf you'll see a line near the top query-source address * port ; which is probably set to 1025. That's the new package default I believe. -- -- Nuke bin Laden: Dale Amon, CEO/MD improve

Re: X Security Issues? [SOLVED]

2002-11-22 Thread Peter Cordes
On Tue, Nov 19, 2002 at 09:35:36PM -0500, Edward Guldemond wrote: > On Wed, Nov 20, 2002 at 02:47:13AM +0100, Olaf Dietsche wrote: > > Well, it seems I should heed my own advice ;-). man xinit doesn't > > mention xserverrc, maybe this is a debian thing. But it does mention > > $HOME/.xserverrc; try

Re: unknown udp port

2002-11-22 Thread Dale Amon
If you look in /etc/bind/named.conf you'll see a line near the top query-source address * port ; which is probably set to 1025. That's the new package default I believe. -- -- Nuke bin Laden: Dale Amon, CEO/MD improve

Re: X Security Issues? [SOLVED]

2002-11-22 Thread Peter Cordes
On Tue, Nov 19, 2002 at 09:35:36PM -0500, Edward Guldemond wrote: > On Wed, Nov 20, 2002 at 02:47:13AM +0100, Olaf Dietsche wrote: > > Well, it seems I should heed my own advice ;-). man xinit doesn't > > mention xserverrc, maybe this is a debian thing. But it does mention > > $HOME/.xserverrc; try

Re: security updates for testing?

2002-11-22 Thread Tim van Erven
On Fri, Nov 22, 2002 at 09:42:17AM -0500, "Noah L. Meyerhans" <[EMAIL PROTECTED]> wrote: > On Fri, Nov 22, 2002 at 03:19:30PM +0100, Sythos wrote: >> >> If someone has testing version on his machine should link "stable" or >> "unstable" for security update? > > Neither. Unstable doesn't get sec

Re: security updates for testing?

2002-11-22 Thread Noah L. Meyerhans
On Fri, Nov 22, 2002 at 03:19:30PM +0100, Sythos wrote: > > If someone has testing version on his machine should link "stable" or > "unstable" for security update? Neither. Unstable doesn't get security updates. Security updates to stable will typically be to older versions of software than wha

Re: security updates for testing?

2002-11-22 Thread Sythos
On Fri, Nov 22, 2002 at 01:10:04AM -0500, Stephen Gran wrote: > > does a line > > deb http://security.debian.org testing/updates main non-free contrib > > in short: does Debian support security updates for testing? > In short, no. Occasionally, though, the security team will quickly move > a fix

Re: security updates for testing?

2002-11-22 Thread Wichert Akkerman
Previously martin f krafft wrote: > give me an estimate (someone) on how much manpower is required to > provide this service for testing? As usual that is pretty much impossible to say. In busy periods it might be two mandays per week, in more quiet periods (of which there are less and less) no ti

Re: security updates for testing?

2002-11-22 Thread Tim van Erven
On Fri, Nov 22, 2002 at 09:42:17AM -0500, "Noah L. Meyerhans" <[EMAIL PROTECTED]> wrote: > On Fri, Nov 22, 2002 at 03:19:30PM +0100, Sythos wrote: >> >> If someone has testing version on his machine should link "stable" or >> "unstable" for security update? > > Neither. Unstable doesn't get secu

Re: unknown udp port

2002-11-22 Thread Phillip Hofmeister
On Fri, 22 Nov 2002 at 02:56:24PM +0200, Costas Magos wrote: > Some more info: > > I killed and restarted named. > the udp port that named seems to be listening on has now changed to 1026 Just a stretch...but I seem to recall bind uses a high port to receive query answers on so it does not need r0

RE: unknown udp port

2002-11-22 Thread Costas Magos
Some more info: I killed and restarted named. the udp port that named seems to be listening on has now changed to 1026 ~kmag > -Original Message- > From: Costas Magos [mailto:[EMAIL PROTECTED] > Sent: Friday, November 22, 2002 2:06 PM > To: debian-security@lists.debian.org > Subject: RE

Re: security updates for testing?

2002-11-22 Thread Noah L. Meyerhans
On Fri, Nov 22, 2002 at 03:19:30PM +0100, Sythos wrote: > > If someone has testing version on his machine should link "stable" or > "unstable" for security update? Neither. Unstable doesn't get security updates. Security updates to stable will typically be to older versions of software than wha

Re: security updates for testing?

2002-11-22 Thread martin f krafft
also sprach Stephen Gran <[EMAIL PROTECTED]> [2002.11.22.0710 +0100]: > In short, no. Occasionally, though, the security team will quickly move > a fix in for testing if it's something particularly horrendous, and they > have the resources to do it. That's why the repository is there, but I > wou

Re: security updates for testing?

2002-11-22 Thread Sythos
On Fri, Nov 22, 2002 at 01:10:04AM -0500, Stephen Gran wrote: > > does a line > > deb http://security.debian.org testing/updates main non-free contrib > > in short: does Debian support security updates for testing? > In short, no. Occasionally, though, the security team will quickly move > a fix

Re: security updates for testing?

2002-11-22 Thread Wichert Akkerman
Previously martin f krafft wrote: > give me an estimate (someone) on how much manpower is required to > provide this service for testing? As usual that is pretty much impossible to say. In busy periods it might be two mandays per week, in more quiet periods (of which there are less and less) no ti

RE: unknown udp port

2002-11-22 Thread Costas Magos
Georgatos Evaggelos wrote: >Well which bind version are you running?? The bind version I am using is the default woody version, that is 9.2.1. > Could it be an rndc or ndc listener?? rndc listens on 953 tcp > Have you made any special configuration in order to set the queries > source port ??

Re: unknown udp port

2002-11-22 Thread Phillip Hofmeister
On Fri, 22 Nov 2002 at 02:56:24PM +0200, Costas Magos wrote: > Some more info: > > I killed and restarted named. > the udp port that named seems to be listening on has now changed to 1026 Just a stretch...but I seem to recall bind uses a high port to receive query answers on so it does not need r0

RE: unknown udp port

2002-11-22 Thread Costas Magos
Some more info: I killed and restarted named. the udp port that named seems to be listening on has now changed to 1026 ~kmag > -Original Message- > From: Costas Magos [mailto:[EMAIL PROTECTED]] > Sent: Friday, November 22, 2002 2:06 PM > To: [EMAIL PROTECTED] > Subject: RE: unknown udp

Re: security updates for testing?

2002-11-22 Thread martin f krafft
also sprach Stephen Gran <[EMAIL PROTECTED]> [2002.11.22.0710 +0100]: > In short, no. Occasionally, though, the security team will quickly move > a fix in for testing if it's something particularly horrendous, and they > have the resources to do it. That's why the repository is there, but I > wou

RE: unknown udp port

2002-11-22 Thread Costas Magos
Georgatos Evaggelos wrote: >Well which bind version are you running?? The bind version I am using is the default woody version, that is 9.2.1. > Could it be an rndc or ndc listener?? rndc listens on 953 tcp > Have you made any special configuration in order to set the queries > source port ??

Re: security updates for testing?

2002-11-22 Thread Stephen Gran
This one time, at band camp, martin f krafft said: > help me clear up a confusion: > > does a line > > deb http://security.debian.org testing/updates main non-free contrib > > in /etc/apt/sources.list provide security updates to testing, or is > that simply carried over from when woody was fro