Re: Bullseye debian security support?

2023-05-31 Thread Marc SCHAEFER
Hello, On Wed, May 31, 2023 at 11:37:34AM -0700, John Conover wrote: > How long will Debian Bullseye have debian security team support after > Bookworm is announced? LTS planning is here: https://wiki.debian.org/LTS bullseye will be LTS-supported til june 2026 (not yet clearly defined

Bullseye debian security support?

2023-05-31 Thread John Conover
How long will Debian Bullseye have debian security team support after Bookworm is announced? Thanks, John -- John Conover, cono...@panix.com, http://www.johncon.com/

Re: Debian security team support for Bullseye?

2023-01-07 Thread Sven Joachim
On 2023-01-07 11:22 -0800, John Conover wrote: > How much longer will Debian security team support Bullseye? For one year after the release of Bookworm, whenever that may be. > The LTS Wiki page is kind of confusing as to when I have to upgrade to > Bookworm. It seems to project tha

Debian security team support for Bullseye?

2023-01-07 Thread John Conover
How much longer will Debian security team support Bullseye? The LTS Wiki page is kind of confusing as to when I have to upgrade to Bookworm. Thanks, John -- John Conover, cono...@panix.com, http://www.johncon.com/

Re: does apt upgrade & full-upgrade packages from Security Updates (Debian Security Advisories (DSA))

2022-11-13 Thread jindam, vani
On Sun, Nov 13, 2022 at 09:56:21AM +, jindam, vani wrote: > i have only deb http://deb.debian.org/debian bullseye main contrib non-free > in my sources.list. > > does apt upgrade & full-upgrade packages from Security Updates (Debian > Security Advisories (DSA))? > N

Re: does apt upgrade & full-upgrade packages from Security Updates (Debian Security Advisories (DSA))

2022-11-13 Thread tomas
On Sun, Nov 13, 2022 at 09:56:21AM +, jindam, vani wrote: > i have only deb http://deb.debian.org/debian bullseye main contrib non-free > in my sources.list. > > does apt upgrade & full-upgrade packages from Security Updates (Debian > Security Advisories (DSA))? No,

does apt upgrade & full-upgrade packages from Security Updates (Debian Security Advisories (DSA))

2022-11-13 Thread jindam, vani
i have only deb http://deb.debian.org/debian bullseye main contrib non-free in my sources.list. does apt upgrade & full-upgrade packages from Security Updates (Debian Security Advisories (DSA))? which is correct? deb http://security.debian.org/debian-security bullseye-security main con

Re: debian security for personal box

2021-12-12 Thread Roberto C . Sánchez
On Mon, Dec 13, 2021 at 08:52:55AM +0800, Piper H wrote: >Hello members, >After installation debian. shall I change the default SSH port (22) to a >random port? >Shall I disable the root login? and what other policy should be applied >generally for security? >Thanks >Pip

debian security for personal box

2021-12-12 Thread Piper H
Hello members, After installation debian. shall I change the default SSH port (22) to a random port? Shall I disable the root login? and what other policy should be applied generally for security? Thanks Piper

Re: Debian Security

2021-08-11 Thread Polyna-Maude Racicot-Summerside
, 2021 at 01:07:24AM -0400, Polyna-Maude Racicot-Summerside >> wrote: >>> Hi ! >>> How would you copy the debian security update repository ? >>> I know it's not recommended. >>> But I'd like to do so. >>> -- >>> Polyna-Maude R.-Su

Re: Debian Security

2021-08-11 Thread Polyna-Maude Racicot-Summerside
Hi, On 2021-07-24 5:33 a.m., Andrew M.A. Cater wrote: > On Sat, Jul 24, 2021 at 01:07:24AM -0400, Polyna-Maude Racicot-Summerside > wrote: >> Hi ! >> How would you copy the debian security update repository ? >> I know it's not recommended. >> But I'd

Re: Debian Security

2021-07-24 Thread Polyna-Maude Racicot-Summerside
Hi, On 2021-07-24 5:33 a.m., Andrew M.A. Cater wrote: > On Sat, Jul 24, 2021 at 01:07:24AM -0400, Polyna-Maude Racicot-Summerside > wrote: >> Hi ! >> How would you copy the debian security update repository ? >> I know it's not recommended. >> But I'd

Re: Debian Security

2021-07-24 Thread The Wanderer
On 2021-07-24 at 13:44, Polyna-Maude Racicot-Summerside wrote: > Hi, > > On 2021-07-24 12:11 p.m., Georgi Naplatanov wrote: > >> On 7/24/21 6:47 PM, Polyna-Maude Racicot-Summerside wrot >> >>> I simply want to have a local copy of the security updates so I >>> can install machine really fast wi

Re: Debian Security

2021-07-24 Thread Polyna-Maude Racicot-Summerside
Hi, On 2021-07-24 12:11 p.m., Georgi Naplatanov wrote: > On 7/24/21 6:47 PM, Polyna-Maude Racicot-Summerside wrot >> >> I simply want to have a local copy of the security updates so I can >> install machine really fast with some limited bandwidth. And I can't use >> apt-cache because I want this t

Re: Debian Security

2021-07-24 Thread tomas
On Sat, Jul 24, 2021 at 11:47:41AM -0400, Polyna-Maude Racicot-Summerside wrote: > Hi, > > > On 2021-07-24 4:49 a.m., to...@tuxteam.de wrote: [...] > Yes, I'm talking about doing a local copies of all packages in > debian-security. I see. > I've tried using

Re: Debian Security

2021-07-24 Thread Georgi Naplatanov
On 7/24/21 6:47 PM, Polyna-Maude Racicot-Summerside wrot > > I simply want to have a local copy of the security updates so I can > install machine really fast with some limited bandwidth. And I can't use > apt-cache because I want this to be on a hard disk and independant of > the network. > In

Re: Debian Security

2021-07-24 Thread Polyna-Maude Racicot-Summerside
Hi, On 2021-07-24 4:49 a.m., to...@tuxteam.de wrote: > On Sat, Jul 24, 2021 at 01:07:24AM -0400, Polyna-Maude Racicot-Summerside > wrote: >> Hi ! >> How would you copy the debian security update repository ? > > What do you mean by "copy the repository"? Make

Re: Debian Security

2021-07-24 Thread Andrew M.A. Cater
On Sat, Jul 24, 2021 at 01:07:24AM -0400, Polyna-Maude Racicot-Summerside wrote: > Hi ! > How would you copy the debian security update repository ? > I know it's not recommended. > But I'd like to do so. > -- > Polyna-Maude R.-Summerside > -Be smart, Be wise,

Re: Debian Security

2021-07-24 Thread basti
hello, what are your intentions? would an apt-cacher be an option? so you can download it once and distribute it several times. Am 24.07.21 um 07:07 schrieb Polyna-Maude Racicot-Summerside: > Hi ! > How would you copy the debian security update repository ? > I know it's not reco

Re: Debian Security

2021-07-24 Thread tomas
On Sat, Jul 24, 2021 at 01:07:24AM -0400, Polyna-Maude Racicot-Summerside wrote: > Hi ! > How would you copy the debian security update repository ? What do you mean by "copy the repository"? Make local copies of all the packages in debian-security? In that case, perhaps debmirro

Debian Security

2021-07-23 Thread Polyna-Maude Racicot-Summerside
Hi ! How would you copy the debian security update repository ? I know it's not recommended. But I'd like to do so. -- Polyna-Maude R.-Summerside -Be smart, Be wise, Support opensource development OpenPGP_signature Description: OpenPGP digital signature

Not able to checkout Debian Security Testing Project from Debian SVN Repository

2017-10-06 Thread Chittari Pabba
Dear Debian Security Team, I am facing the problem to checking out of Debian Secure-Testing project. I followed exact steps mentioned in the Debian Security tracker document still also I am not able to download Debian Secure testing project. My Allioth User Name: chittari-ami-guest Here are

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-22 Thread Gener Badenas
On Wed, Feb 17, 2016 at 10:08 PM, Tom Browder wrote: > I have several remote Debian 7 servers and would like to secure it in > the following manner: > > 1. root will not be allowed any external access (access is only via a > user becoming root while logged in) > > 2. after initial setup, no ssh a

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-22 Thread Jeremy T. Bouse
On 2/18/2016 5:05 PM, Roman wrote: > Seriously, you have to trust someone to achieve goals. So accessing > server via ssh keys is pretty normal and secure + ldaps auth of course > (centralized account management), so if someone leaves, just disable > his account. sudo supports ldap auth, kind of

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-22 Thread Jonathan Dowland
On Fri, Feb 19, 2016 at 09:30:20AM +1300, Richard Hector wrote: > That then means that you don't get to choose which people have root on > which boxes - anyone who gets the rule gets the lot. And that includes > anyone who leaves, of course. Yes, but a leaked root password for one host does not tr

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-22 Thread Jonathan Dowland
On Wed, Feb 17, 2016 at 02:24:02PM +, Darac Marjal wrote: > On Wed, Feb 17, 2016 at 08:08:26AM -0600, Tom Browder wrote: > >2. after initial setup, no ssh access will be allowed via a password > > $ echo "PasswordAuthentication No" | sudo tee -a /etc/ssh/sshd_config Convenient for writing in

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-21 Thread Dominique Dumont
On Wednesday 17 February 2016 14:24:02 Darac Marjal wrote: > >2. after initial setup, no ssh access will be allowed via a password > > $ echo "PasswordAuthentication No" | sudo tee -a /etc/ssh/sshd_config That's a bad idea: You may end up with 2 PasswordAuthentication entries in sshd_config. Tha

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-18 Thread Richard Hector
[Please don't cc me; I'm on the list] On 19/02/16 11:05, Roman wrote: > 2016-02-18 22:30 GMT+02:00 Richard Hector >: > > > > I think a better solution in the end is to generate a random password > for each box, and leave it, on paper, in a safe or similar.

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-18 Thread Roman
2016-02-18 22:30 GMT+02:00 Richard Hector : > > > I think a better solution in the end is to generate a random password > for each box, and leave it, on paper, in a safe or similar. It's very > rare anyone needs to use it. > > > Here is a hint (joke), how to secure root password for servers that a

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-18 Thread Richard Hector
On 18/02/16 11:02, Jeremy T. Bouse wrote: >>> I do agree locking the root password isn't advisable. As I use >>> >> configuration management/automation to handle my servers I simply set the >>> >> root password to generated password that only I know the algorithm to >>> >> reproduce it when I n

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Tom Browder
On Wed, Feb 17, 2016 at 4:02 PM, Jeremy T. Bouse wrote: > On 2/17/2016 3:31 PM, Tom Browder wrote: >> On Wed, Feb 17, 2016 at 9:33 AM, Jeremy T. Bouse >> wrote: ... >>> I do agree locking the root password isn't advisable. As I use >>> configuration management/automation to handle my servers

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Jeremy T. Bouse
On 2/17/2016 3:31 PM, Tom Browder wrote: > On Wed, Feb 17, 2016 at 9:33 AM, Jeremy T. Bouse > wrote: >> Setting SSH "PermitRoot no" and "PasswordAuthentication no" are good >> starts... I'd also check that "ChallengeResponseAuthentication no" is set as >> well as some PAM modules will utiliz

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Tom Browder
On Wed, Feb 17, 2016 at 9:33 AM, Jeremy T. Bouse wrote: > Setting SSH "PermitRoot no" and "PasswordAuthentication no" are good > starts... I'd also check that "ChallengeResponseAuthentication no" is set as > well as some PAM modules will utilize it and be able to get around passwords > being e

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Jeremy T. Bouse
Setting SSH "PermitRoot no" and "PasswordAuthentication no" are good starts... I'd also check that "ChallengeResponseAuthentication no" is set as well as some PAM modules will utilize it and be able to get around passwords being entered as well as "UsePAM no" I do agree locking the root pa

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Feb 17, 2016 at 04:26:28PM +0100, Peter Ludikovsky wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > More or less. What I wouldn't agree with is locking the root account > completely, because, like Thomas said, you'll be locked out

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Peter Ludikovsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 More or less. What I wouldn't agree with is locking the root account completely, because, like Thomas said, you'll be locked out should you ever be dropped to a rescue shell due to an hardware error. Regards, /peter Am 17.02.2016 um 15:56 schrieb Tom

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Tom Browder
On Wed, Feb 17, 2016 at 8:24 AM, Darac Marjal wrote: > On Wed, Feb 17, 2016 at 08:08:26AM -0600, Tom Browder wrote: >> >> I have several remote Debian 7 servers and would like to secure it in >> the following manner: ... I can follow that! Thanks so much, Darac. Best, -Tom

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Tom Browder
On Wed, Feb 17, 2016 at 8:23 AM, Peter Ludikovsky wrote: > -BEGIN PGP SIGNED MESSAGE- ... Thanks, Peter. Do you agree with Darac's solution? Best, -Tom

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Feb 17, 2016 at 02:24:02PM +, Darac Marjal wrote: > On Wed, Feb 17, 2016 at 08:08:26AM -0600, Tom Browder wrote: > >I have several remote Debian 7 servers and would like to secure it in > >the following manner: > > > >1. root will not be al

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Peter Ludikovsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, The first requirement is simple. Add the line PermitRootLogin no or change it accordingly, and reload the SSH daemon. For the second: do you want to disallow any logins via passwords, or are the to be allowed once to set up the keys? The first

Re: Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Darac Marjal
On Wed, Feb 17, 2016 at 08:08:26AM -0600, Tom Browder wrote: I have several remote Debian 7 servers and would like to secure it in the following manner: 1. root will not be allowed any external access (access is only via a user becoming root while logged in) Ensure all users who may be allowed

Debian security: need recipe for blocking root ssh access AND all ssh password access

2016-02-17 Thread Tom Browder
I have several remote Debian 7 servers and would like to secure it in the following manner: 1. root will not be allowed any external access (access is only via a user becoming root while logged in) 2. after initial setup, no ssh access will be allowed via a password I have seen much documentatio

Re: mirroring debian-security, sharing package pool with stable/testing/sid pool

2014-04-12 Thread bob
On 04/11/2014 02:56 AM, Zenaan Harkness wrote: 8< snip Thus my question: Is it possible to use debmirror, to mirror stable,testing,sid as well as debian-security for stable and testing, and have them all share the same package pool? I can't see it, and I'm hoping I am simply not

Re: mirroring debian-security, sharing package pool with stable/testing/sid pool

2014-04-11 Thread Tony van der Hoff
On 11/04/14 15:25, Lisi Reisz wrote: ("One" is very clumsy in > English, but in this case I felt that the second person would appear > to target Zenaan.) Best Queen's English, Lisi ;) -- Tony van der Hoff | mailto:t...@vanderhoff.org Ariège, France | -- To UNSUBSCRIBE, email to debia

Re: mirroring debian-security, sharing package pool with stable/testing/sid pool

2014-04-11 Thread Lisi Reisz
On Friday 11 April 2014 03:46:49 Zenaan Harkness wrote: > In my foggy memory, that at least for debian stable, I seem to > remember something about security updates all get collected up, > possibly with other updates (??) and they become the next stable > point release. Erm... No! I can accept th

Re: mirroring debian-security, sharing package pool with stable/testing/sid pool

2014-04-10 Thread Zenaan Harkness
On 4/11/14, Zenaan Harkness wrote: > On 4/11/14, Zenaan Harkness wrote: >> Thus my question: >> Is it possible to use debmirror, to mirror stable,testing,sid as well >> as debian-security for stable and testing, and have them all share the >> same package pool? >

Re: mirroring debian-security, sharing package pool with stable/testing/sid pool

2014-04-10 Thread Zenaan Harkness
On 4/11/14, Zenaan Harkness wrote: > Thus my question: > Is it possible to use debmirror, to mirror stable,testing,sid as well > as debian-security for stable and testing, and have them all share the > same package pool? In particular, for example, I stopped my initial debian-secu

mirroring debian-security, sharing package pool with stable/testing/sid pool

2014-04-10 Thread Zenaan Harkness
m updating, that an apt-get update would also update from a local debian-security mirror? I could create a mirror from, eg, mirror.aarnet.edu.au (I'm in Australia, and our ISP peers its free zone with aarnet). I just began this process now, but stopped it when I realized that there may be over

Re: Update problems with Debian security repository

2013-03-20 Thread Lisi Reisz
On Wednesday 20 March 2013 10:16:32 Andreas Rönnquist wrote: > >My sources.list is: > >deb http://security.debian.org/squeeze/updates main contrib non-free > >deb-src http://security.debian.org/squeeze/updates main contrib > >non-free > > This should be > > # Security > deb http://security.debian.o

Re: Update problems with Debian security repository

2013-03-20 Thread Andreas Rönnquist
On Wed, 20 Mar 2013 10:12:02 +, Lisi Reisz wrote: >I have the following problem when updating (or trying to use Squeeze's >security repository): > -8<- > >This has been consistent over a period of time, tho' I am not sure how >

Update problems with Debian security repository

2013-03-20 Thread Lisi Reisz
I have the following problem when updating (or trying to use Squeeze's security repository): -- Err http://security.debian.org main/contrib Sources 404 Not Found [IP: 212.211.132.32 80] Err http://security.debian.org main/non-free Sources 4

Re: something happened to debian security repo?

2009-12-06 Thread Umarzuki Mochlis
2009/12/6 Celejar > On Sun, 6 Dec 2009 18:32:19 +0800 > Umarzuki Mochlis wrote: > > > i could not resolve http://security.debian.org/ (ping and aptitude > update). > > Something happened to the repo or it is just my dns? > > Working here. > > it's definitely my ISP. I redialled the connection a

Re: something happened to debian security repo?

2009-12-06 Thread Celejar
On Sun, 6 Dec 2009 18:32:19 +0800 Umarzuki Mochlis wrote: > i could not resolve http://security.debian.org/ (ping and aptitude update). > Something happened to the repo or it is just my dns? Working here. Celejar -- foffl.sourceforge.net - Feeds OFFLine, an offline RSS/Atom aggregator mailmin.

Re: something happened to debian security repo?

2009-12-06 Thread Umarzuki Mochlis
) > ;; WHEN: Sun Dec 6 11:49:39 2009 > ;; MSG SIZE rcvd: 85 > > > --- On *Sun, 12/6/09, Umarzuki Mochlis * wrote: > > > From: Umarzuki Mochlis > Subject: something happened to debian security repo? > To: "Debian Users" > Date: Sunday, December 6,

Re: something happened to debian security repo?

2009-12-06 Thread Tudod Ki
ty.debian.org. 253 IN A 149.20.20.6 ;; Query time: 98 msec;; SERVER: 8.8.8.8#53(8.8.8.8);; WHEN: Sun Dec  6 11:49:39 2009;; MSG SIZE  rcvd: 85 --- On Sun, 12/6/09, Umarzuki Mochlis wrote: From: Umarzuki Mochlis Subject: something happened to debian security repo? To: &quo

something happened to debian security repo?

2009-12-06 Thread Umarzuki Mochlis
i could not resolve http://security.debian.org/ (ping and aptitude update). Something happened to the repo or it is just my dns? -- Regards, Umarzuki Mochlis http://debmal.my

Re: Wondering about Debian security????????

2009-10-02 Thread Charlie
On Sat, 3 Oct 2009 11:52:52 +0900 Osamu Aoki sent this information: >On Sat, Oct 03, 2009 at 08:47:27AM +1000, Charlie wrote: >> >> Hello Everyone, >> >> I get this message with aptitude update: >> >> Reading package lists... Done >> W: GPG error: http://security.debian.org testi

Re: Wondering about Debian security????????

2009-10-02 Thread Osamu Aoki
On Sat, Oct 03, 2009 at 08:47:27AM +1000, Charlie wrote: > > Hello Everyone, > > I get this message with aptitude update: > > Reading package lists... Done > W: GPG error: http://security.debian.org testing/updates Release: The > following signatures were invalid: BADSIG 9AA38DCD55B

Wondering about Debian security????????

2009-10-02 Thread Charlie
Hello Everyone, I get this message with aptitude update: Reading package lists... Done W: GPG error: http://security.debian.org testing/updates Release: The following signatures were invalid: BADSIG 9AA38DCD55BE302B Debian Archive Automatic Signing Key (5.0/lenny) Have CC'd this t

Re: ftp access for debian security updates

2009-08-19 Thread Sven Joachim
On 2009-08-19 12:41 +0200, Kamaraju S Kusumanchi wrote: > Is there any ftp mirror for debian security updates? When I looked at > http://www.debian.org/security/ it just lists an http mirror. However, on > this machine http is not allowed, but ftp is enabled. That is why I am > lookin

ftp access for debian security updates

2009-08-19 Thread Kamaraju S Kusumanchi
Is there any ftp mirror for debian security updates? When I looked at http://www.debian.org/security/ it just lists an http mirror. However, on this machine http is not allowed, but ftp is enabled. That is why I am looking for an ftp repository. Any ideas/comments/suggestions? thanks raju

Debian security announcements now on twitter

2009-03-03 Thread Douglas J Hunley
Hi everyone: I really wanted to let everyone know that I've created @Debian_Security on Twitter and setup a cron job to parse the DSA feed and post it to Twitter. It's been working for a little while now and I think it's stable enough to announce to the world. Forgive me if this isn't the way t

Re: dsc.py: Automated warnings for Debian security updates

2007-07-03 Thread Adam Hupp
> Is this targeted at systems running testing/unstable? I ask because > on stable, running cron-apt is effectively what you are describing. Thanks for the pointer. It looks like the difference is that dsc.py is able to send a summary of the advisory in the notification, while cron-apt has much m

Re: dsc.py: Automated warnings for Debian security updates

2007-07-02 Thread Roberto C . Sánchez
On Mon, Jul 02, 2007 at 01:22:40AM -0500, Adam Hupp wrote: > > dsc.py compares the set of currently upgradable packages with the > security advisories RSS feed. Any matches are written to stdout along > with a description of the issue. When run via cron this will send the > warning to the admini

Re: dsc.py: Automated warnings for Debian security updates

2007-07-01 Thread Alan Ianson
On Sun July 1 2007 11:22:40 pm Adam Hupp wrote: > (Sorry if you see this twice, but I never saw the first copy come > through) > > Hello, > I'm announcing a program I've written for notifying the administrator > about necessary security updates on a Debian box. It'

dsc.py: Automated warnings for Debian security updates

2007-07-01 Thread Adam Hupp
(Sorry if you see this twice, but I never saw the first copy come through) Hello, I'm announcing a program I've written for notifying the administrator about necessary security updates on a Debian box. It's called Debian Security Check (dsc.py). Often it's not obvious that

Re: I recieve spam "Debian security."

2006-04-15 Thread Michelle Konzack
Hi Gene, Unfortunatly I am Off-Line curently and must download my Message via an Internet Cafe. But however, I allready do such stuff. Becasue My laptop is not fast enough, to fetch the messages and do online-scanning (I get 1600-3500 messages per day) I do it at home. next day, back in the Int

Re: I recieve spam "Debian security."

2006-04-07 Thread Michelle Konzack
Hi Gene, Unfortunatly I am Off-Line curently and must download my Message via an Internet Cafe. But however, I allready do such stuff. Becasue My laptop is not fast enough, to fetch the messages and do online-scanning (I get 1600-3500 messages per day) I do it at home. next day, back in the Int

Re: Re: I recieve spam "Debian security."

2006-04-04 Thread Johannes Wiedersich
That's what we call the petsupermaket spammer. It seems to be replying to most people who post on debian-devel, debian-user and sometimes some of our other lists. We haven't been able to match a subscriber to this, and it's not happening all the time. If anyone can find something that makes is c

Re: I recieve spam "Debian security."

2006-04-04 Thread Greg Folkert
On Tue, 2006-04-04 at 08:28 +1000, Pascal Hakim wrote: > Hi, > > On Mon, Apr 03, 2006 at 03:28:14PM +0700, Surachai Locharoen wrote: > > Where this spam come form? > > > > > > That's what we call the petsupermaket spammer. > > It seems to be replying to most people who post on debian-devel, >

Re: Debian security.

2006-04-04 Thread Andrei Popescu
On Mon, 3 Apr 2006 18:10:57 -0500 "Dan Sheffner" <[EMAIL PROTECTED]> wrote: > The only security that you can guarantee is what you do to the server to > secure it. Even Microsoft doesn't guarantee security. "Even"??? That's about the most unsecure computer environment! But still many people fals

Re: I recieve spam "Debian security."

2006-04-03 Thread Gene Heskett
On Monday 03 April 2006 19:44, Matthew R. Dempsky wrote: >On Tue, Apr 04, 2006 at 08:27:56AM +1000, Pascal Hakim wrote: >> That's what we call the petsupermaket spammer. > >Maybe we need a FAQ entry or something for this. By now its the top item in the FAQ at most of these linux related lists, th

Re: I recieve spam "Debian security."

2006-04-03 Thread Matthew R. Dempsky
On Tue, Apr 04, 2006 at 08:27:56AM +1000, Pascal Hakim wrote: > That's what we call the petsupermaket spammer. Maybe we need a FAQ entry or something for this. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Debian security.

2006-04-03 Thread Dan Sheffner
;> Is there any body guarantee debian security. I want to install debian as>> my server instead of redhat as3 server which just attack by Phishing.>> >> Kan>Nope no guaranties! But you won't get such guaranties from ANY other os>supplier either.>Security of software is mu

Re: I recieve spam "Debian security."

2006-04-03 Thread Pascal Hakim
Hi, On Mon, Apr 03, 2006 at 03:28:14PM +0700, Surachai Locharoen wrote: > Where this spam come form? > > That's what we call the petsupermaket spammer. It seems to be replying to most people who post on debian-devel, debian-user and sometimes some of our other lists. We haven't been able to m

Re: I recieve spam "Debian security."

2006-04-03 Thread Tony Godshall
... > I'm not sure when or why the messages go the original paster vs the > entire list, though. Because on this list (like many) the messages retain their original From: line, and they are using that. Don't you just hate those clueless halfwit ISPs? They've got to be losing business. Best

Re: Debian security.

2006-04-03 Thread Steve Block
On Mon, Apr 03, 2006 at 01:44:16PM +0200, Jan Schledermann wrote: Surachai Locharoen wrote: Is there any body guarantee debian security. I want to install debian as my server instead of redhat as3 server which just attack by Phishing. Kan Nope no guaranties! But you won't get such guara

Re: Debian security.

2006-04-03 Thread David Kirchner
On 4/3/06, Surachai Locharoen <[EMAIL PROTECTED]> wrote: > Is there any body guarantee debian security. I want to install debian as > my server instead of redhat as3 server which just attack by Phishing. > > Kan As stated already, this sort of problem usually comes about becaus

Re: Debian security.

2006-04-03 Thread Roberto C. Sanchez
Andrew Sackville-West wrote: > On Mon, 03 Apr 2006 15:15:38 +0700 > Surachai Locharoen <[EMAIL PROTECTED]> wrote: > > >>Is there any body guarantee debian security. I want to install debian as >>my server instead of redhat as3 server which just attack by Phishing

Re: Debian security.

2006-04-03 Thread Andrew Sackville-West
On Mon, 03 Apr 2006 15:15:38 +0700 Surachai Locharoen <[EMAIL PROTECTED]> wrote: > Is there any body guarantee debian security. I want to install debian as > my server instead of redhat as3 server which just attack by Phishing. > > Kan > just out of curiosity, how was y

Re: I recieve spam "Debian security."

2006-04-03 Thread hendrik
On Mon, Apr 03, 2006 at 03:28:14PM +0700, Surachai Locharoen wrote: > Where this spam come form? Chances are you've posted on a Debian list recently. It looks like spam. It isn't technically spam. But it is annoying. Some ISP somewhere has the idea that it has to challenge all incoming email to

Re: Debian security.

2006-04-03 Thread Jan Schledermann
Surachai Locharoen wrote: > Is there any body guarantee debian security. I want to install debian as > my server instead of redhat as3 server which just attack by Phishing. > > Kan Nope no guaranties! But you won't get such guaranties from ANY other os supplier either. Securi

Re: I recieve spam "Debian security."

2006-04-03 Thread Surachai Locharoen
Where this spam come form? AntiSpam UOL wrote: ANTISPAM UOL » TIRA-TEIMA     Olá, Você enviou uma mensagem para [EMAIL PROTECTED] Para que sua mensagem seja

Debian security.

2006-04-03 Thread Surachai Locharoen
Is there any body guarantee debian security. I want to install debian as my server instead of redhat as3 server which just attack by Phishing. Kan begin:vcard fn:Surachai Locharoen n:Locharoen;Surachai email;internet:[EMAIL PROTECTED] note:If you can't explain it simply, you don't und

announcing dsafilter: filter debian security advisories

2005-12-17 Thread Jon Dowland
Seasons-greetings list, A quick mail to announce my pet mail filter `dsafilter': a program to manage filtering debian security advisory (DSA) email. Anyone using a debian system would be wise to subscribe to the `debian-security-announce' mailing list. However, when you get a DSA you ne

Re: The state of debian security

2004-07-18 Thread Jaldhar H. Vyas
On Sat, 17 Jul 2004 [EMAIL PROTECTED] wrote: > Quote from debian’s security website: > > Debian takes security very seriously. Most security problems brought to > our attention are corrected within 48 hours. > > Debian has yet to release security patches for two major vulnerabilities > in php. >

Re: The state of debian security

2004-07-17 Thread Paul Johnson
Please fix your character set, your apostrophies don't appear correctly. [EMAIL PROTECTED] writes: > Quote from debian's security website: > > Debian takes security very seriously. Most security problems brought to > our attention are corrected within 48 hours. Key word is most. > Debian has y

Re: The state of debian security

2004-07-17 Thread dmargoli
[EMAIL PROTECTED] wrote: Quote from debian’s security website: Debian takes security very seriously. Most security problems brought to our attention are corrected within 48 hours. Debian has yet to release security patches for two major vulnerabilities in php. In fact they haven’t released an adv

Re: The state of debian security

2004-07-17 Thread Jon Dowland
On Sat, 17 Jul 2004 11:05:37 -0500, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Quote from debian's security website: > > Debian takes security very seriously. Most security problems brought to our > attention are corrected within 48 hours. > > Debian has yet to release security patches for t

The state of debian security

2004-07-17 Thread gfmurphy
Quote from debian’s security website: Debian takes security very seriously. Most security problems brought to our attention are corrected within 48 hours. Debian has yet to release security patches for two major vulnerabilities in php. In fact they haven’t released an advisory of any kind in ov

AW: Debian security for home user

2004-04-21 Thread Jens Simmoleit
> > Debian certainly has lots of help files for security, > so many that I got overwhelmed. > > Can someone point me to a simple document for a home > user using Debian 3.0 testing on one machine with > dialup connection? That is, just a simple intro or > maybe checklist with pointers. > > Iptables

Re: Debian security for home user

2004-04-20 Thread Paul Johnson
[EMAIL PROTECTED] (Wanda Round) writes: > Can someone point me to a simple document for a home > user using Debian 3.0 testing on one machine with > dialup connection? That is, just a simple intro or > maybe checklist with pointers. Make sure you have a line in your /etc/apt/sources.list that men

Re: Debian security for home user

2004-04-20 Thread Katipo
Wanda Round wrote: Debian certainly has lots of help files for security, so many that I got overwhelmed. Can someone point me to a simple document for a home user using Debian 3.0 testing on one machine with dialup connection? That is, just a simple intro or maybe checklist with pointers. Iptables

Re: Debian security for home user

2004-04-20 Thread Florian Ernst
Hello Wanda! On Tue, Apr 20, 2004 at 11:25:51AM -0700, Wanda Round wrote: > Debian certainly has lots of help files for security, > so many that I got overwhelmed. > > Can someone point me to a simple document for a home > user using Debian 3.0 testing on one machine with > dialup connection? Tha

Debian security for home user

2004-04-20 Thread Wanda Round
Debian certainly has lots of help files for security, so many that I got overwhelmed. Can someone point me to a simple document for a home user using Debian 3.0 testing on one machine with dialup connection? That is, just a simple intro or maybe checklist with pointers. Iptables just lost my poor

Re: Debian security prb

2003-08-27 Thread Colin Watson
On Tue, Aug 26, 2003 at 09:03:26AM +0200, Fr?d?ric Aliotti wrote: > I have installed Debian GNU/Linux 3.0 rl "Woody" Official i386. > I'm trying to use an application called Cyberdocs on this computer : this > application have to open OpenOffice.org to convert word documents to XML. > This proces

Re: Debian security prb

2003-08-27 Thread Greg Folkert
gt; >Debian package? Or from a tarball? > >I've installed the Java SDK 1.4.2 from sun, this is a *.bin file very easy > >to install. I have changed my environment settings properly : when I use > >the "java -version" command, I get the expected message. >

Re: Debian security prb

2003-08-26 Thread Greg Folkert
On Tue, 2003-08-26 at 03:03, Frédéric Aliotti wrote: > I have installed Debian GNU/Linux 3.0 rl "Woody" Official i386. > I'm trying to use an application called Cyberdocs on this computer > : this application have to open OpenOffice.org to convert word > documents to XML. This process is triggered

Debian security prb

2003-08-26 Thread Frédéric Aliotti
To: [EMAIL PROTECTED] I have installed Debian GNU/Linux 3.0 rl "Woody" Official i386. I'm trying to use an application called Cyberdocs on this computer : this application have to open OpenOffice.org to convert word documents to XML. This process is triggered by a java application. Everything

Re: Debian security support for older versions

2003-03-01 Thread Svenn Are Bjerkem
On Saturday 01 March 2003 22:44, Nathan E Norman wrote: > I don't think you could have chosen a worse analogy. Read the thread again. I was replying to Paul Johnson who could not understand that people can need security support for more than three years. To you I would say that Moores law relate

  1   2   >