libsnmp security update

2008-05-27 Thread Alex Samad
Hi I have noticed the latest libsnmp15 update, but I have been unable to install, because this has dependancies on perl >= 5.10 which eventual leads me to ldap-utils. ldap-utils version 2.3.38-1+lenny1 is the last (that I have) version compiled against the openssl libraries, the ones after that a

Re: [SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code

2008-05-27 Thread Nico Golde
Hi, * urug <[EMAIL PROTECTED]> [2008-05-27 19:43]: > On Mon, 26 May 2008 13:37:48 +0100 > > For the stable distribution (etch), this problem has been fixed in [...] > > version 0.71-2etch1. > > > > For the unstable distribution (sid), this problem has been fixed in > > version 0.73-1. > > > > We

Re: [SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code

2008-05-27 Thread urug
On Mon, 26 May 2008 13:37:48 +0100 Steve Kemp <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > - > > Debian Security Advisory DSA-1587-1 > [EMAIL PROTECTED] > http://www.debian.org/security/

Re: DSA-1571 and GSSAPI

2008-05-27 Thread Juha Jäykkä
> yet confirmed whether that includes using it for the generation of random > session keys, but that would be the conservative assumption. Given that, Has this been investigated further by you or anyone else? Or should I bother the heimdal guys about this? -Juha -- --

Re: lm-sensors update for sarge

2008-05-27 Thread Vladislav Kurz
On Tuesday 27 of May 2008, dann frazier wrote: > On Mon, May 26, 2008 at 03:56:21PM +0200, Vladislav Kurz wrote: > > Hello all, > > > > A few days ago I was surprised that there is an update for lm-sensors > > (and libsensors3) for sarge. It is available from security.debian.org. I > > know that sa

Re: lm-sensors update for sarge

2008-05-27 Thread dann frazier
On Mon, May 26, 2008 at 03:56:21PM +0200, Vladislav Kurz wrote: > Hello all, > > A few days ago I was surprised that there is an update for lm-sensors (and > libsensors3) for sarge. It is available from security.debian.org. I know that > sarge does not have any security support any more, and the