About the security issues affecting fex in Squeeze
Hello Kilian, the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/TEMP-000-AD275E https://security-tracker.debian.org/tracker/source-package/fex We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). That said the squeeze users would most certainly benefit from a fixed package. BTW contrary to what you said in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773751#5 this is the only open security issue in squeeze, the others have been fixed by Thorsten Alteholz in version 20100208+debian1-1+squeeze4, see https://packages.qa.debian.org/f/fex/news/20140930T180401Z.html If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. However please make sure to submit a tested package. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310093605.ga6...@home.ouaza.com
squeeze update of gnutls26?
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Squeeze version of gnutls26: https://security-tracker.debian.org/tracker/CVE-2014-8155 https://security-tracker.debian.org/tracker/CVE-2015-0294 Would you like to take care of this yourself? We are still understaffed so any help is always highly appreciated. If yes, please follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. Indicate clearly whether you have tested the updated package or not. If you don't want to take care of this update, it's not a problem, we will do our best with your package. Just let us know whether you would like to review and/or test the updated package before it gets released. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. PS: A member of the LTS team might start working on this update at any point in time. You can verify whether someone is registered on this update in this file: https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310094832.ga6...@home.ouaza.com
About the security issues affecting libjbcrypt-java in Squeeze
Hello dear maintainer(s), the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/CVE-2015-0886 We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). That said the squeeze users would most certainly benefit from a fixed package. If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. However please make sure to submit a tested package. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310102758.ga8...@home.ouaza.com
libhtp / suricata unusable ?
Hello Moritz, I saw that you marked (in commit 32723[1]) libhtp and suricata as no-dsa on the ground that they are unusable in wheezy and that they will be removed. However I don't have any details about how this assessment has been made and I'm interested to know to have an idea whether it applies to squeeze as well. Cheers, [1] http://anonscm.debian.org/viewvc/secure-testing?view=revision&revision=32723 -- Raphaël Hertzog ◈ Writer/Consultant ◈ Debian Developer Discover the Debian Administrator's Handbook: → http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310101453.ga7...@home.ouaza.com
Please remove me from the list!
Good day, I have been trying to remove my self from this list for months. It just does not work. Please help me. Regards Abel On 03/10/2015 12:27 PM, Raphael Hertzog wrote: Hello dear maintainer(s), the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/CVE-2015-0886 We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). That said the squeeze users would most certainly benefit from a fixed package. If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. However please make sure to submit a tested package. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54fecb7f.3070...@abelworld.com
Re: Please remove me from the list!
Hello Abel, On Tue, 10 Mar 2015, Abel Guzman wrote: > I have been trying to remove my self from this list for months. It just does > not work. Please help me. Did you try the unsubscription form at https://lists.debian.org/debian-lts/ ? And/or the instructions at the bottom of each mail: > To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org And last resort, please get in touch with the listmasters as detailed in the above instructions... by sending a mail to listmas...@lists.debian.org, they can help you more effectively. Regards, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310110754.gb8...@home.ouaza.com
Re: Please remove me from the list!
Good day, Thank you for your answer. I have done the unsubscription procedure using both methods a few times and it does not work for me. I just did it again, so if your receive this message there should be a problem, isnt it? Regards Abel On 03/10/2015 01:07 PM, Raphael Hertzog wrote: Hello Abel, On Tue, 10 Mar 2015, Abel Guzman wrote: I have been trying to remove my self from this list for months. It just does not work. Please help me. Did you try the unsubscription form at https://lists.debian.org/debian-lts/ ? And/or the instructions at the bottom of each mail: To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org And last resort, please get in touch with the listmasters as detailed in the above instructions... by sending a mail to listmas...@lists.debian.org, they can help you more effectively. Regards, -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54fed2be.7030...@abelworld.com
Bug#780201: new codename needed for oldstable (due to squeeze-lts) when stable becomes oldstable
package: ftp.debian.org x-debbugs-cc: debian-lts@lists.debian.org, debian-rele...@lists.debian.org Hi, when jessie will be released, wheezy will become oldstable and we'll need a new alias for squeeze, as various tools internally work with aliases. (The security tracker comes to my mind, but also the Release files it seems. And probably more.) I believe it's the ftp teams duty / joy to decide this name and would like to ask you to do soon, so that various places can be prepared for the joyful day we release jessie. Current suggestions I've heard (and liked) are "oldoldstable" and "veryoldstable". I *dislike* "obsoletestable" and "stalestable" as they are either wrong (squeeze is not obsolete) or carry a bad connotation. cheers, Holger signature.asc Description: This is a digitally signed message part.
Re: Please remove me from the list!
On Tue, 10 Mar 2015, Abel Guzman wrote: > Good day, > > Thank you for your answer. > I have done the unsubscription procedure using both methods a few times and > it does not work for me. > > I just did it again, so if your receive this message there should be a > problem, isnt it? Thats wrong. You can post to the list without beeing a subscriber. And I checked the subscriber lists, noone from your domain is subscribed to any of our lists. Alex - Debian Listmaster -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310115920.ge14...@formorer.de
Re: Bug#780201: new codename needed for oldstable (due to squeeze-lts) when stable becomes oldstable
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 10 Mar 2015 12:38:29 +0100 Holger Levsen wrote: > Hi, > > when jessie will be released, wheezy will become oldstable and we'll need a > new alias for squeeze, as various tools internally work with aliases. (The > security tracker comes to my mind, but also the Release files it seems. And > probably more.) > > I believe it's the ftp teams duty / joy to decide this name and would like to > ask you to do soon, so that various places can be prepared for the joyful day > we release jessie. > > Current suggestions I've heard (and liked) are "oldoldstable" and > "veryoldstable". > > I *dislike* "obsoletestable" and "stalestable" as they are either wrong > (squeeze is not obsolete) or carry a bad connotation. > > > cheers, > Holger What about 'extremely-stable' ?? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iEYEARECAAYFAlT+7YsACgkQ5+rBHyUt5wswlQCgoTTsQR5jUK3Om45xcPsD2Fgp HdcAoIPmig3g9GkHaezwK9ASpJJbn047 =cwuW -END PGP SIGNATURE-
About the security issues affecting macchanger in Squeeze
Hello dear maintainer(s), the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/source-package/macchanger We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). That said the squeeze users would most certainly benefit from a fixed package. If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. However please make sure to submit a tested package. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310144342.ga13...@home.ouaza.com
Re: Bug#780201: new codename needed for oldstable (due to squeeze-lts) when stable becomes oldstable
On 10/03/2015, Andreas Glaeser wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Tue, 10 Mar 2015 12:38:29 +0100 > Holger Levsen wrote: > >> Hi, >> >> when jessie will be released, wheezy will become oldstable and we'll need >> a >> new alias for squeeze, as various tools internally work with aliases. (The >> >> security tracker comes to my mind, but also the Release files it seems. >> And >> probably more.) >> >> I believe it's the ftp teams duty / joy to decide this name and would like >> to >> ask you to do soon, so that various places can be prepared for the joyful >> day >> we release jessie. >> >> Current suggestions I've heard (and liked) are "oldoldstable" and >> "veryoldstable". >> >> I *dislike* "obsoletestable" and "stalestable" as they are either wrong >> (squeeze is not obsolete) or carry a bad connotation. >> >> >> cheers, >> Holger > > What about 'extremely-stable' ?? > Why not simply use the states experimental unstable testing and for the stable version stable and version number (eg Debian7) and all preceding versions, version number eg Debian6 LTS Debian 5 Debian4 etc Seems logical, and, meaningful, and, simple enough to me. -- Bret Busby Armadale West Australia .. "So once you do know what the question actually is, you'll know what the answer means." - Deep Thought, Chapter 28 of Book 1 of "The Hitchhiker's Guide to the Galaxy: A Trilogy In Four Parts", written by Douglas Adams, published by Pan Books, 1992 -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/cacx6j8octpd6fj4n2eje6t3jyqpsaggub3v+jn1y6+gu0bn...@mail.gmail.com
Does CVE-2015-1609 apply to squeeze's version of mongodb?
Hello Laszlo, I'm wondering whether CVE-2015-1609 is affecting the squeeze version. The code base is vastly different between 1.4.4 and the current supported releases. The upstream announces mentions that it affects all "production releases" but 1.4.4 is not part of the current production releases AFAIU. I don't have any specific knowledge of that codebase and would like to have your analysis on this issue. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310152437.ga14...@home.ouaza.com
About the security issues affecting openldap in Squeeze
Hello dear maintainer(s), the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/CVE-2015-1545 We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). (Note there are a few older issues that have been classified in the same way: https://security-tracker.debian.org/tracker/source-package/openldap) That said the squeeze users would most certainly benefit from a fixed package. If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. However please make sure to submit a tested package. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150310153350.ga14...@home.ouaza.com
Re: About the security issues affecting openldap in Squeeze
On Tue, Mar 10, 2015 at 04:33:50PM +0100, Raphael Hertzog wrote: Hello dear maintainer(s), Hi, the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/CVE-2015-1545 We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). OK. That said the squeeze users would most certainly benefit from a fixed package. If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development We currently have a few patches pending or under discussion for wheezy. After the changes for stable are finalized, I hope to backport them to squeeze as well, when time permits. Thanks for your work on LTS! Ryan signature.asc Description: Digital signature
About the security issues affecting tcllib in Squeeze
Hello dear maintainer(s), the Debian LTS team recently reviewed the security issue(s) affecting your package in Squeeze: https://security-tracker.debian.org/tracker/source-package/tcllib We decided that we would not prepare a squeeze security update (usually because the security impact is low and that we concentrate our limited resources on higher severity issues and on the most widely used packages). That said the squeeze users would most certainly benefit from a fixed package. If you want to work on such an update, you're welcome to do so. Please try to follow the workflow we have defined here: http://wiki.debian.org/LTS/Development If that workflow is a burden to you, feel free to just prepare an updated source package and send it to debian-lts@lists.debian.org (via a debdiff, or with an URL pointing to the the source package, or even with a pointer to your packaging repository), and the members of the LTS team will take care of the rest. However please make sure to submit a tested package. Thank you very much. Raphaël Hertzog, on behalf of the Debian LTS team. -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/2015031016.ga15...@home.ouaza.com
Re: Bug#780100: About the security issues affecting tcllib in Squeeze
Hi Raphael, On Tue, Mar 10, 2015 at 7:00 PM, Raphael Hertzog wrote: > Hello dear maintainer(s), > > the Debian LTS team recently reviewed the security issue(s) affecting your > package in Squeeze: > https://security-tracker.debian.org/tracker/source-package/tcllib > > We decided that we would not prepare a squeeze security update (usually > because the security impact is low and that we concentrate our limited > resources on higher severity issues and on the most widely used packages). > That said the squeeze users would most certainly benefit from a fixed > package. > > If you want to work on such an update, you're welcome to do so. Please I'll prepare the package for squeeze LTS. Cheers! -- Sergei Golovan -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/caoq2pxh-v3oggdlnbyh_wrgp3rwh0fftbeywt5kj6skzg7w...@mail.gmail.com
Re: About the security issues affecting tcllib in Squeeze
Hi Raphael, On Tue, Mar 10, 2015 at 7:00 PM, Raphael Hertzog wrote: > Hello dear maintainer(s), > > the Debian LTS team recently reviewed the security issue(s) affecting your > package in Squeeze: > https://security-tracker.debian.org/tracker/source-package/tcllib I've prepared an updated package. I can upload it to squeeze-lts. What else should I do? Cheers! -- Sergei Golovan -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/CAOq2pXGv_Rp1XOs-c2XupamW5fE=M9oAjxj8apbdEBLonc=m...@mail.gmail.com
Re: Does CVE-2015-1609 apply to squeeze's version of mongodb?
Hi Raphaël, others, On Tue, Mar 10, 2015 at 4:24 PM, Raphael Hertzog wrote: > I'm wondering whether CVE-2015-1609 is affecting the squeeze version. The > code base is vastly different between 1.4.4 and the current supported > releases. I think it's not affected, but I'm not a security expert and don't have the exploit to test it against 1.4.x versions. I think neither the Wheezy version (v2.0) is affected. BSON support is modularized in it, but can't find the affected file nor the function in the source. It would be much better if someone with more security knowledge approve or refute me in this matter. > The upstream announces mentions that it affects all "production releases" > but 1.4.4 is not part of the current production releases AFAIU. Sure, 1.4.4 is way too old, released in June, 2010. As I know, 2.4 to 3.0 versions are supported. But to answer your question, BSON support was already part of MongoDB that time. It was integrated and was not a separate part of the project that it's now. I think the modularity came somewhere before the 2.0 versions (it was incremental in between, 1.5, 1.6 to 1.9 and so on). > I don't have any specific knowledge of that codebase and would like to > have your analysis on this issue. Beware, me neither have knowledge of the source in detail as I'm in no affiliate with MongoDB, Inc. in any way. Regards, Laszlo/GCS -- To UNSUBSCRIBE, email to debian-lts-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/CAKjSHr1uSiQzroVEBijq7i7zmTbe6z=dwb9xwsn+lkwzc5x...@mail.gmail.com
Re: About the security issues affecting tcllib in Squeeze
Hi Sergei, On Dienstag, 10. März 2015, Sergei Golovan wrote: > I've prepared an updated package. I can upload it to squeeze-lts. What > else should I do? please follow the procedure as described on https://wiki.debian.org/LTS/Development & thanks for your contributions to LTS! cheers, Holger signature.asc Description: This is a digitally signed message part.
Re: squeeze update of axis?
Hi Markus, On Mittwoch, 18. Februar 2015, Markus Koschany wrote: > > I think this is a trivial update, the version of Axis hasn't changed > > since Squeeze and it should be as simple as dropping the CVE-2014-3596 > > patch from axis/1.4-22 into the version 1.4-12 currently in Squeeze (it > > also addresses CVE-2012-5784). > I agree with Emmanuel. I have successfully built axis in Squeeze with > the CVE patch. Please find attached the debdiff against the version in > Squeeze. Thanks! I've just uploaded a fixed axis package to squeeze-lts and will send out the announcement shortly! cheers, Holger signature.asc Description: This is a digitally signed message part.
Re: Please remove me from the list!
On Tue, 2015-03-10 at 12:59 +0100, Alexander Wirt wrote: > On Tue, 10 Mar 2015, Abel Guzman wrote: > > > Good day, > > > > Thank you for your answer. > > I have done the unsubscription procedure using both methods a few times and > > it does not work for me. > > > > I just did it again, so if your receive this message there should be a > > problem, isnt it? > Thats wrong. You can post to the list without beeing a subscriber. > > And I checked the subscriber lists, noone from your domain is subscribed to > any of our lists. So I would guess Abel is subscribed under another address that is forwarding to his current one. The forwarding address should appear somewhere in the 'Received' header lines. Ben. -- Ben Hutchings Any smoothly functioning technology is indistinguishable from a rigged demo. signature.asc Description: This is a digitally signed message part
Re: Please remove me from the list!
On Tue, 10 Mar 2015, Ben Hutchings wrote: > On Tue, 2015-03-10 at 12:59 +0100, Alexander Wirt wrote: > > On Tue, 10 Mar 2015, Abel Guzman wrote: > > > > > Good day, > > > > > > Thank you for your answer. > > > I have done the unsubscription procedure using both methods a few times > > > and > > > it does not work for me. > > > > > > I just did it again, so if your receive this message there should be a > > > problem, isnt it? > > Thats wrong. You can post to the list without beeing a subscriber. > > > > And I checked the subscriber lists, noone from your domain is subscribed to > > any of our lists. > > So I would guess Abel is subscribed under another address that is > forwarding to his current one. The forwarding address should appear > somewhere in the 'Received' header lines. If he still receives mail he should check the Return-Path of a mail received from the list. It includes the subscriber address. Alex pgp9mkuJRrsIi.pgp Description: PGP signature