AW: DSA 131: Apache Vulnerability

2002-06-21 Thread Marcel Weber
2002 02:49 > An: Marcel Weber > Cc: debian-testing@lists.debian.org; debian-security@lists.debian.org > Betreff: Re: DSA 131: Apache Vulnerability > > > > I have two relative policies: > > 1. Always use a firewall to filter out everything but what is absolutely > necessar

RE: DSA 131: Apache Vulnerability

2002-06-20 Thread Howland, Curtis
I like both. The server gets "stable", but a firewall or at least firewall rules on the "public" interface. Preferrably duel interface, one "inside" on private IP, one "public", and no packet forwarding. And I couldn't agree more about the remarkable efforts of the Debian team members. Curt-

Re: DSA 131: Apache Vulnerability

2002-06-20 Thread Phillip Hofmeister
On Thu, Jun 20, 2002 at 07:49:08PM -0400, Arthur H. Johnson II wrote: > > I have two relative policies: > > 1. Always use a firewall to filter out everything but what is absolutely > necessary, ie web, email, etc. > > 2. Always build stuff filtered to the internet from source that way when a > v

Re: DSA 131: Apache Vulnerability

2002-06-20 Thread Arthur H. Johnson II
I have two relative policies: 1. Always use a firewall to filter out everything but what is absolutely necessary, ie web, email, etc. 2. Always build stuff filtered to the internet from source that way when a vulnerability is released, you can update it rather quickly, no matter what the distro

AW: DSA 131: Apache Vulnerability

2002-06-20 Thread Marcel Weber
Cool, thank you all! Marcel -Ursprungliche Nachricht- Von: Vincent Renardias [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 20. Juni 2002 20:51 An: Marcel Weber Cc: debian-testing@lists.debian.org; debian-security@lists.debian.org Betreff: Re: DSA 131: Apache Vulnerability On Thu, 20

Re: DSA 131: Apache Vulnerability

2002-06-20 Thread Robert van der Meulen
Quoting Ren? Seindal ([EMAIL PROTECTED]): > I don't know about apache-ssl libapache-mod-ssl is in incoming. Greets, Robert -- ( o> Linux Generation

Re: DSA 131: Apache Vulnerability

2002-06-20 Thread Klaus Agnoletti
On Thu, 2002-06-20 at 17:40, Marcel Weber wrote: > Hi there > > I got a little question, a bit silly perhaps. When will there be any > packages of Apache 1.3.26 or a backported patch for 1.3.24 for woody?... As the list archive from 7 hrs and 20 mins ago says - the packages are out. Look above.

Re: DSA 131: Apache Vulnerability

2002-06-20 Thread Vincent Renardias
On Thu, 20 Jun 2002, Marcel Weber wrote: > Hi there > > I got a little question, a bit silly perhaps. When will there be any > packages of Apache 1.3.26 or a backported patch for 1.3.24 for woody? Will > it be in the next time or would it make sense to upgrade by hand, say by > compiling one's o

Re: DSA 131: Apache Vulnerability

2002-06-20 Thread René Seindal
On Thu, 2002-06-20 at 17:40, Marcel Weber wrote: > Hi there > > I got a little question, a bit silly perhaps. When will there be any > packages of Apache 1.3.26 or a backported patch for 1.3.24 for woody? Will > it be in the next time or would it make sense to upgrade by hand, say by > compiling o

DSA 131: Apache Vulnerability

2002-06-20 Thread Marcel Weber
Hi there I got a little question, a bit silly perhaps. When will there be any packages of Apache 1.3.26 or a backported patch for 1.3.24 for woody? Will it be in the next time or would it make sense to upgrade by hand, say by compiling one's own binaries. Well yes I know, that there is some testin