Re: Two HDD on Desktop PC

; mount Debian HDD. In that case you have to encrypt both Debian and Mint drives, or physically disconnect them. -- Best Regards Vladislav Kurz > > MyWebSite http://mfaridi.com > > On Mon, 5 Aug 2019, 13:14 Vladislav Kurz, <mailto:vladislav.k...@webstep.net>> wrote: > >

Re: Two HDD on Desktop PC

each time -- Best Regards Vladislav Kurz

Re: Two HDD on Desktop PC

rds Vladislav Kurz

Re: APT vulnerability [DSA 4371-1]

On 1/22/19 3:43 PM, Evgeny Kapun wrote: > On 22.01.2019 16:59, Vladislav Kurz wrote: >> Hello everybody, >> >> I'm also encountering many errors when using >>   apt -o Acquire::http::AllowRedirect=false update >>   apt -o Acquire::http::AllowRedirect=false upgrade

APT vulnerability [DSA 4371-1]

::148:14 80] Err:8 http://http.debian.net/debian stretch-updates Release 302 Found [IP: 2001:67c:2564:a119::148:14 80] Err:9 http://http.debian.net/debian stretch-backports Release 302 Found [IP: 2001:67c:2564:a119::148:14 80] -- Best Regards Vladislav Kurz

Re: samba security update - workaround does not start

b context [0x228cc20] on tdb:///var/lib/samba/private/sam.ldb --dry-dun runs nicely, listing all users from LDAP. Has anyone idea what's wrong? Maybe some python modules? -- Best Regards Vladislav Kurz

Re: vulnerability in 8.6

kernel? > > Can someone explain to me what to do next? I have the assumption that a > 'apt-get install "name-of-required-kerne-package"' would be sufficient? apt-get update; apt-get upgrade followed by reboot should be sufficient. -- Best Regards Vladislav Kurz

Re: [SECURITY] [DSA 3567-1] libpam-sshauth security update

On Friday 06 of May 2016 Jason Fisher wrote: > Unsubscribe Sorry, I could not resist... http://xkcd.com/1675/

Re: [SECURITY] [DSA 3548-2] samba regression update [SA-DEBIAN #61116]

mba 2:4.2.10+dfsg-0+deb8u1 dpkg-deb: error: subprocess paste was killed by signal (Broken pipe) Subsequent run of apt-get -f install, finished successfully -- S pozdravem Vladislav Kurz Centrála: Celní 17/5, 63900 Brno, CZ Web: http://www.webstep.net E-Mail: i...@webstep.net Tel: 840

Re: Call for testing: upcoming samba security update

Hi, I have noticed that samba-common-bin now depends on samba. It didn't before the upgrade. Is there any special reason for that? I just need nmblookup on some servers (and smbclient/cifs) but not the server package. -- Best Regards Vladislav Kurz

Re: SSL/TLS still seems to be screwed up (retrieving Mail with Thunderbird)

t is still from the same country, and GeoIP databases are IMHO not very precise. But I cannot resist one question - why you use suspicious VPNs at all? -- Best Regards Vladislav Kurz

Re: Changing the "Reply-To:" for debian-security-announce

Hi all, what about pointing reply-to to address that will automatically unsubscribe? Most of replies are either unsubscribe attempts or misconfigured vacation autoresponders. I know it maybe pretty harsh, but will do away with trolls ;) -- Regards Vladislav Kurz

Re: DSA 2896-2 openssl - Apache 2 not detected as service to restart by postinst?

like dropbear as they are not using TLS in SSH Protocol. So, why does openssh-server depend on libssl ? ldd /usr/sbin/sshd says it needs libcrypto.so, which is part of openssl? -- S pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address: Mezirka 1

Re: iptable mac address not showing in log

chain? -- S pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address: Mezirka 1, 602 00 Brno, CZ, tel: +420 548 214 711 === www.webstep.net === vladislav.k...@webstep.net === -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org

Re: [SECURITY] [DSA 2318-1] cyrus-imapd-2.2 security update

problems. -- Best Regards Vladislav Kurz -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201110101204.21526.vladislav.k...@webstep.net

Long Exim break-in analysis

folks -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201012212307.37241.vladislav.k...@webstep.net

Re: exim4 router problems since 2 days / sucpicous process zinit is pstree

binary was modified to hide the presence of rootkit named zinit. Do I have a security issue here? Any other idea? IMHO yes, you have a security issue. -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble

Re: exim4 router problems since 2 days / sucpicous process zinit is pstree

On Friday 17 of December 2010, Carlos Alberto Lopez Perez wrote: On 12/17/2010 12:35 PM, Vladislav Kurz wrote: On Friday 17 of December 2010, Thorsten Göllner wrote: Hi, The other point is that pstree reports a process zinit I never saw in the past: snip But I do not have any

Re: exim4 router problems since 2 days / sucpicous process zinit is pstree

repository then you should be OK. Check your /etc/apt/sources.list if it contains this line: deb http://security.debian.org/ lenny/updates main contrib non-free And check version of exim4 using dpkg -l exim*. It should be: 4.69-9+lenny1. -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email

[Seznam #76865] [Support] [SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

http://www.seznam.cz -- S pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address: Mezirka 1, 602 00 Brno, CZ, tel: +420 548 214 711 === www.webstep.net === vladislav.k...@webstep.net === -- Radovan Vrzdiak System support Seznam.cz, a.s. fax

security support for etch?

team for their valuable work. -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Re: Securing my PC at a Wireless Hotspot?

is an important but often overlooked aspect of security. So, is is possible to do that sort of thing with a Linux laptop? OpenVPN can do that as well - look for option --redirect-gateway -- regards Vladislav Kurz -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org

Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

? Can someone confirm or oppose this? -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Find installed contrib and non-free packages

. Maybe aptitude will do the same, but I don't use it ;-) -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: lm-sensors update for sarge

On Tuesday 27 of May 2008, dann frazier wrote: On Mon, May 26, 2008 at 03:56:21PM +0200, Vladislav Kurz wrote: Hello all, A few days ago I was surprised that there is an update for lm-sensors (and libsensors3) for sarge. It is available from security.debian.org. I know that sarge does

lm-sensors update for sarge

what is going on? -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

ssh-vulnkey and authorized_keys

of ssh-vulnkey or dokuwd.pl ? -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator

pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address: Mezirka 1, 602 00 Brno, CZ, tel: +420 548 214 711 === www.webstep.net === [EMAIL PROTECTED] === -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Re: Kernel upgrade for 3Ware Driver issues?

is a security issue ? Once I learned that security consists of confidentiality, integrity and availability. And data corruption destroys integrity and availability. -- Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues

On Monday 03 of March 2008, Martin Geier wrote: Hi On Fri, Feb 29, 2008 at 05:06:18PM +0100, Vladislav Kurz wrote: [snip] Yesterday I have upgraded and rebooted couple of machines that still use kernel version 2.4.27, and one of them crashed after 5 and half hours. It still responded

Re: [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues

the issue may have been with VMWare. My server does not use VMWare so I think we can ignore that. -- S pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address: Mezirka 1, 602 00 Brno, CZ, tel: +420 548 214 711 === www.webstep.net === [EMAIL PROTECTED

Re: [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues

and read a corrupted ext2 filesystem. Anyway, big thanks to the security team for the work that thay do. -- Regards Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: iptables and nmap

not understand how iptables work. You should visit http://www.netfilter.org/ and read man iptables. -- S pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address: Mezirka 1, 602 00 Brno, CZ, tel: +420 548 214 711 === www.webstep.net === [EMAIL

Re: Security risks due to packages that are no longer part of Debian?

Is that what you need? -- S pozdravem Vladislav Kurz === WebStep, s.r.o. (Ltd.) = a step to the Web === address : Turgenevova 18, 61800 Brno, CZ, tax-id: 289-25528262 office : Veveri 9, 60200 Brno, CZ, tel fax: +420 541 128 341 === www.webstep.net === [EMAIL

Re: local root exploit

-2.4.18-bf2.4 (left from installation) compiled with: gcc-2.95 2.95.4-11woody1 So, now the qustion is, if backporting the patch is on the way and when we can expect a DSA. -- Best regards Vladislav Kurz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe

Re: local root exploit

On Monday 10 of January 2005 15:29, Jacques Lav!gnotte wrote: On Mon, 10 Jan 2005 15:19:33 +0100 Vladislav Kurz [EMAIL PROTECTED] wrote: mount -t tmpfs tmpfs /dev/shm Only root can do that. But it can be already mounted, and the exploit can be modified to use any writeable directory

Re: Running/Compiling latest snort on potato

of DMZ. Very stable desision, I have no problem with it. = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com

Re: Running/Compiling latest snort on potato

of DMZ. Very stable desision, I have no problem with it. = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com

Re: read-write to stdin-stdout or to a file?

is to use freopen() function to reassign stdin, stdout and stderr. This is more secure and shell-independant desision... = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail http

Re: read-write to stdin-stdout or to a file?

is to use freopen() function to reassign stdin, stdout and stderr. This is more secure and shell-independant desision... = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail http

Re: Snort

Hello, --- dude [EMAIL PROTECTED] wrote: Is there any way to get snort to send more than daily reports from snort? You can set up logging into database (i.e. mysql), the use acid (http://www.andrew.cmu.edu/~rdanyliw/snort/). This way you can get reports in any time, by request. Unfortunely,

Re: Snort

Hello, --- dude [EMAIL PROTECTED] wrote: Is there any way to get snort to send more than daily reports from snort? You can set up logging into database (i.e. mysql), the use acid (http://www.andrew.cmu.edu/~rdanyliw/snort/). This way you can get reports in any time, by request. Unfortunely,

Re: detecting portscanning

file, or even to a Windows computer via Samba. When I installed snort on my computer, I delete tcplogd, icmplog, and other such systems. = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Yahoo! Auctions - buy the things you

Re: detecting portscanning

file, or even to a Windows computer via Samba. When I installed snort on my computer, I delete tcplogd, icmplog, and other such systems. = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Yahoo! Auctions - buy the things you

Re: detecting portscanning

). = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble

Re: detecting portscanning

). = Regards, Vladislav. --- http://cybervlad.port5.com __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/