Re: [SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting

2008-03-18 Thread Ronny Adsetts
Axel Beckert said at 18/03/2008 14:56: On Tue, Mar 18, 2008 at 10:00:18AM +, Ronny Adsetts wrote: For the unstable distribution (sid), this problem has been fixed in version 2.31.1. Ehm, that's strange somehow since unstable, testing and even etch-backports already have ikwiki 2.40:

Re: [SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting

2008-03-18 Thread Ronny Adsetts
2.40: http://packages.debian.org/ikiwiki See here for the fix which was in v 2.31.1: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465110 Ronny -- Ronny Adsetts Technical Director Amazing Internet Ltd, London t: +44 20 8607 9535 f: +44 20 8607 9536 w: www.amazinginternet.com Registered offic

Re: Strange problem with mail...

2004-08-27 Thread Ronny Adsetts
Resending to correct address this time - list sender gets me every damn time. Stephen Gran said at 27/08/04 02:53: > This one time, at band camp, Jan Luehr said: > >> Greetings,... >> >> Am Donnerstag, 26. August 2004 22:18 schrieb Thomas Sjögren: >> >>> On Thu, Aug 26, 2004 at 09:44:51PM +0200, Ja

Re: Checking what running program are using old libraries

2004-03-18 Thread Ronny Adsetts
Werner Macho was heard to utter, at roughly 18/03/04 12:27: On Thu, 2004-03-18 at 12:31, Dale Amon wrote: On Thu, Mar 18, 2004 at 12:03:29PM +0100, Jan Dittberner wrote: Such a script exists in testing yep it does, but unfortunately with dependencies, and i don't want my stable system gett

Re: Checking what running program are using old libraries

2004-03-18 Thread Ronny Adsetts
Werner Macho was heard to utter, at roughly 18/03/04 12:27: On Thu, 2004-03-18 at 12:31, Dale Amon wrote: On Thu, Mar 18, 2004 at 12:03:29PM +0100, Jan Dittberner wrote: Such a script exists in testing yep it does, but unfortunately with dependencies, and i don't want my stable system getting co

Re: Checking what running program are using old libraries

2004-03-18 Thread Ronny Adsetts
Stefan Neufeind was heard to utter, at roughly 18/03/04 10:24: On 18 Mar 2004 at 10:03, Ronny Adsetts wrote: Whilst doing security upgrades this morning for openssl, it occurred to me that lots of software that uses the openssl libraries will not automatically get restarted and will

Checking what running program are using old libraries

2004-03-18 Thread Ronny Adsetts
Hi all. Whilst doing security upgrades this morning for openssl, it occurred to me that lots of software that uses the openssl libraries will not automatically get restarted and will therefore still be running with old libraries and therefore be vulnerable. I usually do this by hand for the mo

Re: Checking what running program are using old libraries

2004-03-18 Thread Ronny Adsetts
Stefan Neufeind was heard to utter, at roughly 18/03/04 10:24: On 18 Mar 2004 at 10:03, Ronny Adsetts wrote: Whilst doing security upgrades this morning for openssl, it occurred to me that lots of software that uses the openssl libraries will not automatically get restarted and will therefore

Checking what running program are using old libraries

2004-03-18 Thread Ronny Adsetts
Hi all. Whilst doing security upgrades this morning for openssl, it occurred to me that lots of software that uses the openssl libraries will not automatically get restarted and will therefore still be running with old libraries and therefore be vulnerable. I usually do this by hand for the mos

Re: Big VPN

2004-03-03 Thread Ronny Adsetts
Milan P. Stanic was heard to utter, at roughly 03/03/04 00:25: On Tue, Mar 02, 2004 at 03:37:52PM -0600, Jacques Normand wrote: On Tue, Mar 02, 2004 at 10:08:22PM +0100, J.H.M. Dassen (Ray) wrote: If you're looking for a VPN solution, by all means look at FreeS/WAN (or its likely successor,

Re: Big VPN

2004-03-03 Thread Ronny Adsetts
Milan P. Stanic was heard to utter, at roughly 03/03/04 00:25: On Tue, Mar 02, 2004 at 03:37:52PM -0600, Jacques Normand wrote: On Tue, Mar 02, 2004 at 10:08:22PM +0100, J.H.M. Dassen (Ray) wrote: If you're looking for a VPN solution, by all means look at FreeS/WAN (or its likely successor, Open

Re: mod_rewrite for no www. prefix (was: certificate server)

2003-11-04 Thread Ronny Adsetts
Nikolai Buer said the following on 04/11/03 13:46: An alternative would be to use mod_rewrite on the server and rewrite all requests for xxx.com to www.xxx.com, but I haven't got around to this yet, hopefully it will be a simple thing. This does it for me: RewriteEngine on RewriteCond %{HTTP_

Re: mod_rewrite for no www. prefix (was: certificate server)

2003-11-04 Thread Ronny Adsetts
Nikolai Buer said the following on 04/11/03 13:46: An alternative would be to use mod_rewrite on the server and rewrite all requests for xxx.com to www.xxx.com, but I haven't got around to this yet, hopefully it will be a simple thing. This does it for me: RewriteEngine on RewriteCond %{HTTP_HOST}

Re: Debian + Verisign's .com/.net hijack

2003-09-17 Thread Ronny Adsetts
US government intervened, IIRC, to get it changed back (.biz?). Regards, Ronny Adsetts -- Technical Director Amazing Internet Ltd, London t: +44 20 8607 9535 f: +44 20 8607 9536 w: www.amazinginternet.com

Re: Debian + Verisign's .com/.net hijack

2003-09-17 Thread Ronny Adsetts
nment intervened, IIRC, to get it changed back (.biz?). Regards, Ronny Adsetts -- Technical Director Amazing Internet Ltd, London t: +44 20 8607 9535 f: +44 20 8607 9536 w: www.amazinginternet.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: Configuration problems with pam_smb, mod_auth_pam

2002-05-30 Thread Ronny Adsetts
> Do you happen to know if debs are available? I don't see any > using apt-cache search. Thanks. You could try using libapache-mod-auth-pam and libpam-smb[pass]. Not tried apache with smb (it works fine with PAM and LDAP) so YMMV. Regards, Ronny Adsetts -- To UNSUBSCRIBE, emai

RE: Configuration problems with pam_smb, mod_auth_pam

2002-05-30 Thread Ronny Adsetts
> Do you happen to know if debs are available? I don't see any > using apt-cache search. Thanks. You could try using libapache-mod-auth-pam and libpam-smb[pass]. Not tried apache with smb (it works fine with PAM and LDAP) so YMMV. Regards, Ronny Adsetts -- To UNSUBSCRIBE, emai

RE: Mailserver HDD organization

2002-01-17 Thread Ronny Adsetts
> I know, I know, use what you feel comfortable with, but how comfortable > are you guys with Exim? I use Exim here for a low throughput small office mail server, grabbing aliases from LDAP. I'm very happy with it - the documentation is extensive, and the configuration is a doddle. The Exim user m

RE: Mailserver HDD organization

2002-01-17 Thread Ronny Adsetts
> I know, I know, use what you feel comfortable with, but how comfortable > are you guys with Exim? I use Exim here for a low throughput small office mail server, grabbing aliases from LDAP. I'm very happy with it - the documentation is extensive, and the configuration is a doddle. The Exim user

RE: Secure Network Filesystem

2001-08-28 Thread Ronny Adsetts
> The point is: we are with new requirements of sharing > some filesystems accross the network (Intranet and DMZ). > > I would like to know from you what is suggested in > terms of use X security. I really would not like to > use NFS. Any clues? Coda? How 'bout running a VPN between the networks t

RE: Secure Network Filesystem

2001-08-28 Thread Ronny Adsetts
> The point is: we are with new requirements of sharing > some filesystems accross the network (Intranet and DMZ). > > I would like to know from you what is suggested in > terms of use X security. I really would not like to > use NFS. Any clues? Coda? How 'bout running a VPN between the networks

RE: CGI Buffer Overflow?

2001-07-19 Thread Ronny Adsetts
> Anyone seen this before? [snip] This is the IIS worm 'Code Red'. See Buqtraq archives at the following URI for a fill analysis: http://www.securityfocus.com/templates/archive.pike?fromthread=0&list=1&star t=2001-07-15&threads=0&mid=197828&end=2001-07-21& I've seen about 20 or so requests for t

RE: CGI Buffer Overflow?

2001-07-19 Thread Ronny Adsetts
> Anyone seen this before? [snip] This is the IIS worm 'Code Red'. See Buqtraq archives at the following URI for a fill analysis: http://www.securityfocus.com/templates/archive.pike?fromthread=0&list=1&star t=2001-07-15&threads=0&mid=197828&end=2001-07-21& I've seen about 20 or so requests for

RE: How can I help ?

2000-06-13 Thread Ronny Adsetts
ogether with LDAP might be a place to start. Have perl, shell (bash) and some c skills, but always willing to learn. Ronny Adsetts -BEGIN PGP SIGNATURE- Version: PGP 6.5.1i for non-commercial use <http://www.pgpi.com/> iQA/AwUBOUawvP4+LjEVAJSfEQJMUQCcDdBLxD1S7fkYhM9sniPedA

RE: How can I help ?

2000-06-13 Thread Ronny Adsetts
mba together with LDAP might be a place to start. Have perl, shell (bash) and some c skills, but always willing to learn. Ronny Adsetts -BEGIN PGP SIGNATURE- Version: PGP 6.5.1i for non-commercial use <http://www.pgpi.com/> iQA/AwUBOUawvP4+LjEVAJSfEQJMUQCcDdBLxD1S7fkYhM9sniPedA