Re: [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities

2008-05-03 Thread Dominic Hargreaves
On Sat, May 03, 2008 at 10:57:38PM +0200, Mike Gerber wrote: > Given a system with the package "linux-image-2.6.18-6-686" installed, > version "2.6.18.dfsg.1-18etch3" and: > > # uname -r > 2.6.18-6-686 > > How do I decide that the fixed kernel is actually booted? Other than by > uptime? cat /

Re: [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities

2008-05-03 Thread Mike Gerber
Hi, > Package: linux-2.6 > Vulnerability : several vulnerabilities > Problem type : local > Debian-specific: no > CVE Id(s) : CVE-2007-6694 CVE-2008-0007 CVE-2008-1294 CVE-2008-1375 > [...] > For the stable distribution (etch), this problem has been fixed in version > 2.6.18.dfsg.1

Re: apt-get may accept inconsistent data

2008-05-03 Thread Goswin von Brederlow
Stefan Tichy <[EMAIL PROTECTED]> writes: > Hi, > > the problem may be the result of proxy usage or even improper proxy > configuration, but apt-get should complain if something is wrong. > > Etch is installed on the system and "apt-get update" did fetch > Release and Release.gpg from security.debi

apt-get may accept inconsistent data

2008-05-03 Thread Stefan Tichy
Hi, the problem may be the result of proxy usage or even improper proxy configuration, but apt-get should complain if something is wrong. Etch is installed on the system and "apt-get update" did fetch Release and Release.gpg from security.debian.org (modification date 2008-05-02). The packages fi