Re: Following security issues found upstream

2002-01-15 Thread Wichert Akkerman
Previously Jean-Marc Boursot wrote: > Like the last postfix DoS? Am I wrong or there wasn't any bugtraq > report for that? There was, Wietse announced it to bugtraq. Wichert. -- _ /[EMAIL PROTECTED] This space intention

Re: Following security issues found upstream

2002-01-15 Thread Wichert Akkerman
Previously Jean-Marc Boursot wrote: > Like the last postfix DoS? Am I wrong or there wasn't any bugtraq > report for that? There was, Wietse announced it to bugtraq. Wichert. -- _ [EMAIL PROTECTED] This space intention

Re: Following security issues found upstream

2001-12-15 Thread Wichert Akkerman
Previously Jean-Marc Boursot wrote: > Like the last postfix DoS? Am I wrong or there wasn't any bugtraq > report for that? There was. Wichert. -- _ /[EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL PR

Re: Following security issues found upstream

2001-12-15 Thread Jean-Marc Boursot
On Thursday 13 December 2001 20:41, Wichert Akkerman wrote: > Previously Javier Fern?ndez-Sanguino Pe?a wrote: > > I guess a public database could be useful both for > > We have a private database (well, a status-file in which we keep > track of things). A public database can't be used since we

Re: Following security issues found upstream

2001-12-15 Thread Wichert Akkerman
Previously Jean-Marc Boursot wrote: > Like the last postfix DoS? Am I wrong or there wasn't any bugtraq > report for that? There was. Wichert. -- _ [EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL PR

Re: Following security issues found upstream

2001-12-15 Thread Jean-Marc Boursot
On Thursday 13 December 2001 20:41, Wichert Akkerman wrote: > Previously Javier Fern?ndez-Sanguino Pe?a wrote: > > I guess a public database could be useful both for > > We have a private database (well, a status-file in which we keep > track of things). A public database can't be used since w

Re: Following security issues found upstream

2001-12-13 Thread Javier Fernández-Sanguino Peña
On Thu, Dec 13, 2001 at 08:41:38PM +0100, Wichert Akkerman wrote: > Previously Javier Fern?ndez-Sanguino Pe?a wrote: > > I guess a public database could be useful both for > > We have a private database (well, a status-file in which we keep track > of things). A public database can't be used s

Re: Following security issues found upstream

2001-12-13 Thread Wichert Akkerman
Previously Javier Fern?ndez-Sanguino Pe?a wrote: > I guess a public database could be useful both for We have a private database (well, a status-file in which we keep track of things). A public database can't be used since we frequently get private info we can't share. Wichert. -- _

Re: Following security issues found upstream

2001-12-13 Thread Javier Fernández-Sanguino Peña
On Thu, Dec 13, 2001 at 08:41:38PM +0100, Wichert Akkerman wrote: > Previously Javier Fern?ndez-Sanguino Pe?a wrote: > > I guess a public database could be useful both for > > We have a private database (well, a status-file in which we keep track > of things). A public database can't be used

Following security issues found upstream

2001-12-13 Thread Javier Fernández-Sanguino Peña
How do the Debian Security team currently follow the vulnerabilities posted upstream? I guess that's easy when the upstream maintainer (or the one that found the bug) tells Debian's team before posting. But what if somebody posts in bugtraq a security issue around a software available at

Re: Following security issues found upstream

2001-12-13 Thread Wichert Akkerman
Previously Javier Fern?ndez-Sanguino Pe?a wrote: > I guess a public database could be useful both for We have a private database (well, a status-file in which we keep track of things). A public database can't be used since we frequently get private info we can't share. Wichert. --

Following security issues found upstream

2001-12-13 Thread Javier Fernández-Sanguino Peña
How do the Debian Security team currently follow the vulnerabilities posted upstream? I guess that's easy when the upstream maintainer (or the one that found the bug) tells Debian's team before posting. But what if somebody posts in bugtraq a security issue around a software available at