Re: Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Robert Millan
[ This part doesn't really concern the Debian package or the security bug, so dropping CC to the BTS ] On Thu, Sep 13, 2007 at 11:00:23PM +0200, Moritz Naumann wrote: > > On a side note, a default setting making users take part in a statistic > analysis and gathering users' requests in a singl

Processed: Re: Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > severity 442180 wishlist Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking Severity set to `wishlist' from `critical' > retitle 442180 make the network mode work securely Bug#442180: d-i preseed method allows

Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Robert Millan
severity 442180 wishlist retitle 442180 make the network mode work securely thanks It should be noted that this bug applies only to the customized build used in http://goodbye-microsoft.com/, and not to the version of win32-loader in Debian (where network shouldn't be used at all). Nevertheless I

Bug#442209: making it possible to enable KDE, XFCE, etc (Re: win32-loader)

2007-09-13 Thread Robert Millan
Package: win32-loader Severity: wishlist (let's make a bug entry out of this..) On Thu, Sep 13, 2007 at 05:54:37PM +0200, Thomalla, Martin BS wrote: > Hello, it would be great to add a selection for the preferred desktop > environment, maybe like this: > > -

Processed: tagging 442153

2007-09-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > # Automatically generated email from bts, devscripts version 2.9.26 > tags 442153 pending Bug#442153: win32-loader: [INTL:he] Hebrew PO translation update Tags were: l10n patch Tags added: pending > End of message, stopping processing here. Please con

Bug#442153: win32-loader: [INTL:he] Hebrew PO translation update

2007-09-13 Thread Robert Millan
On Thu, Sep 13, 2007 at 06:09:31PM +0300, Lior Kaplan wrote: > Package: win32-loader > Version: 0.6.0~pre3 > Severity: normal > Tags: patch l10n > > Attached is an update for the Hebrew translation of win32-loader. Applied. Btw, I see that you're the coordinator for Hebrew in D-I. Since win32-l

Bug#179243: Drink it, forget it !

2007-09-13 Thread Justin N. Johnson
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#213013: Lila

2007-09-13 Thread Laverne
Our company buy un-collected Judicial Judgments. We force that fairness happens. Call our company here 303--480--5712 your, Then he turned to Rob and said, wonderingly: You are a boy. That's true, Mr -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble?

Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Joey Hess
Moritz Naumann wrote: > The default boot option used by this package contains the following: > preseed/url=http://goodbye-microsoft.com/runtime/preseed.cfg There is a compile time option (NETWORK_BASE_URL) that can enable this, and maybe it's enabled on the goodbye-microsoft.com version (didn't ch

Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Bastian Blank
On Fri, Sep 14, 2007 at 01:05:24AM +0200, Holger Levsen wrote: > sha*sum please Proper signature. rsa-sha256 or so. Bastian -- I've already got a female to worry about. Her name is the Enterprise. -- Kirk, "The Corbomite Maneuver", stardate 1514.0 -- To UNSUBSCRIBE, email t

Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Holger Levsen
sha*sum please pgpP6G9MNXvJf.pgp Description: PGP signature

Re: Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Otavio Salvador
Bastian Blank <[EMAIL PROTECTED]> writes: > Also i386 and amd64 uses initramfs. You can always append another cpio > archive with additional files. hum, this last option looks better. -- O T A V I OS A L V A D O R - E-mail: [EMAIL PROTECT

Re: Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Bastian Blank
On Thu, Sep 13, 2007 at 06:35:18PM -0300, Otavio Salvador wrote: > One possible way for fixing it is to use md5sum of the preseeding file > and ask d-i to check it. And the md5sum is carried where? And why the md5sum and not the file? Why is this there anyway and does not use popcon? Also i386 an

[g-i] Test image built with directfb 1.0.1-2 and GTK+ 2.11.6-1

2007-09-13 Thread Jérémy Bobbio
Hi! To see how smooth would be the migration to core components of the graphical installer currently in experimental, I have built a test image using directfb 1.0.1-2 and GTK+ 2.11.6-1. I have not noticed any problems so far, but perhaps some of you could. You can get the image at: http://peopl

Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Otavio Salvador
Moritz Naumann <[EMAIL PROTECTED]> writes: > If an attcker is able to hijack or otherwise influence the DNS server > used when Debian GNU/Linux is installed using win32-loader, she may be > able to run any command that is available on the system to be installed > as root by redirecting requests to

Re: Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs

2007-09-13 Thread Bernd Zeimetz
Richard Mortimer wrote: > On Thu, 2007-09-13 at 22:30 +0200, Bernd Zeimetz wrote: >> Well, I've tried to boot a non-SMP kernel (2.6.23-rc5) a few minutes ago >> (... and I had to power-cycle it, it is running selftests now), and >> the machine froze after >> >> Remapping the kernel... done. >>

Bug#422088: [Patch] wish preseed_fetch could distinguish between non-existance of a requested file and other failures to fetch file.

2007-09-13 Thread Alex Owen
On 13/09/2007, Alex Owen <[EMAIL PROTECTED]> wrote: > > I have posted to GNU-wget mailing list: > http://www.mail-archive.com/wget%40sunsite.dk/msg10259.html > proposing wget exits with exit status 4 for 404 errors > Reply already... in summary: planning to implement exit codes in the wget versi

Bug#442180: d-i preseed method allows for remote cmd exec. in combination with DNS hijacking

2007-09-13 Thread Moritz Naumann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: win32-loader Version: 0.6.0~pre3 Severity: critical Tags: security Justification: root security hole The default boot option used by this package contains the following: preseed/url=http://goodbye-microsoft.com/runtime/preseed.cfg As seen

Bug#422088: [Patch] wish preseed_fetch could distinguish between non-existance of a requested file and other failures to fetch file.

2007-09-13 Thread Alex Owen
This mail is mostly a note to myself in a safe place! On 08/05/2007, Alex Owen <[EMAIL PROTECTED]> wrote: > On 06/05/07, Joey Hess <[EMAIL PROTECTED]> wrote: > > Alex Owen wrote: > > > + elifgrep "server returned error 404" $log >/dev/null ; > > > then > > > > It's generally not a

Re: Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs

2007-09-13 Thread Richard Mortimer
On Thu, 2007-09-13 at 22:30 +0200, Bernd Zeimetz wrote: > Well, I've tried to boot a non-SMP kernel (2.6.23-rc5) a few minutes ago > (... and I had to power-cycle it, it is running selftests now), and > the machine froze after > > Remapping the kernel... done. > OF stdout device is: /[EMAIL PR

Re: Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs

2007-09-13 Thread Bernd Zeimetz
Hi, >>> Bernd, can you test lastest 2.6.23 snapshot and see if it works? Check >>> at http://wiki.debian.org/DebianKernel for more information where to >>> find them. >> I've installed the machine using a 2.6.23-rc5 _smp_ kernel, all older >> non-smp kernels failed to boot, and as Ihad to build m

Re: Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs

2007-09-13 Thread Otavio Salvador
Bernd Zeimetz <[EMAIL PROTECTED]> writes: > Hi, > >> Looks like we need to discuss the available options for this >> problem. Other issue is to know if current snapshots of 2.6.23 does >> work or not on this hardware. >> >> Bernd, can you test lastest 2.6.23 snapshot and see if it works? Check >>

[SRM] cdebconf 0.114etch1 (was: Candidate patches to d-i for Etch r2)

2007-09-13 Thread Jérémy Bobbio
On Wed, Sep 12, 2007 at 06:13:43PM +0200, Martin Zobel-Helas wrote: > I heared from Otavio, that there was a testing image was produced and > reported to work fine, so please go ahead. Attached is the proposed patch updating cdebconf to version 0.114etch1. With these changes, on a usual installati

Processed: Re: Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs

2007-09-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > reassign 440720 linux-2.6 Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs Bug reassigned from package `debian-installer' to `linux-2.6'. > found 440720 2.6.21-6 Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs Bug

Bug#440720: [SPARC]: non-SMP kernel fail on SunFIres with >= 2 CPUs

2007-09-13 Thread Otavio Salvador
reassign 440720 linux-2.6 found 440720 2.6.21-6 thanks > On the SunFirev880 all SMP kernels >= 2.6.21 booted, with the only > problem that the qla2xxx module of 2.6.21 had hickups with the FC > controller in the machine, but I guess the kernel would have worked > otherwise. The installer from lenn

Bug#442153: win32-loader: [INTL:he] Hebrew PO translation update

2007-09-13 Thread Lior Kaplan
Package: win32-loader Version: 0.6.0~pre3 Severity: normal Tags: patch l10n Attached is an update for the Hebrew translation of win32-loader. -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.22-2-k

Bug#303902: US $ 69.95 Pice for 100mg x 10 pills

2007-09-13 Thread Miguel Fountain
buy now 100mg x 90 pills $159.95 http://afterstick.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#369212: US $ 59.95 50mg x 10 pills buy now

2007-09-13 Thread Sang Whaley
50mg x 10 pills $59.95 buy now http://afterstick.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#264530: Price for 100mg x 60 pills US $ 129.95

2007-09-13 Thread Thomas Simpson
50mg x 60 pills http://afterstick.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#307622: US $ 69.95 100mg x 10 pills price

2007-09-13 Thread Gus Akers
100mg x 90 pills US $ 1.78 Per Pill http://afterstick.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#303182: 100mg x 10 pills $69.95

2007-09-13 Thread Audra Corcoran
50mg x 10 pills $59.95 buy now http://afterstick.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#442098: win32-loader: [INTL:sv] Swedish PO translation update

2007-09-13 Thread Robert Millan
On Thu, Sep 13, 2007 at 08:13:35AM +0200, Daniel Nylander wrote: > Package: win32-loader > Severity: wishlist > Tags: patch l10n > > > Here is the updated Swedish translation for win32-loader Applied. Btw, I see that you're the coordinator for Swedish in D-I. Since win32-loader is in the D-I r

Processed: tagging 442098

2007-09-13 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]: > # Automatically generated email from bts, devscripts version 2.9.26 > tags 442098 pending Bug#442098: win32-loader: [INTL:sv] Swedish PO translation update Tags were: l10n patch Tags added: pending > End of message, stopping processing here. Please co

Bug#405098: When you reach the growth size that you want to achieve, you no longer need to take Manster

2007-09-13 Thread Elinor Hahn
Highly secure 128bit order processing http://budhipps.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#380351: An increase in Girth (Width) of 5%, plus all the benefits of the first month.

2007-09-13 Thread Howard Hinkle
Valeriana wallichii 25 mg http://budhipps.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]