On Sat, Aug 10, 2002 at 05:22:55AM -0400, Len Rose wrote:
FYI: http://lists.netsys.com/pipermail/full-disclosure/2002-August/000950.html
We've been preparing a security update for this problem and are in the process of releasing it. It seems this leaked somehow :-( Olaf -- Olaf Kirch | Anyone who has had to work with X.509 has probably okir@suse.de | experienced what can best be described as ---------------+ ISO water torture. -- Peter Gutmann
That was the very reason we wanted full disclosure list created because things like this do get leaked, and if people are armed with knowledge, they can defend. I am sorry that the public leak may cause SuSE problems, I can appreciate the pressure it places on the team. I know that with the current team at SuSE we're in good hands :) Len On Sat, Aug 10, 2002 at 01:13:58PM +0200, Olaf Kirch wrote:
On Sat, Aug 10, 2002 at 05:22:55AM -0400, Len Rose wrote:
FYI: http://lists.netsys.com/pipermail/full-disclosure/2002-August/000950.html
We've been preparing a security update for this problem and are in the process of releasing it.
It seems this leaked somehow :-(
Olaf -- Olaf Kirch | Anyone who has had to work with X.509 has probably okir@suse.de | experienced what can best be described as ---------------+ ISO water torture. -- Peter Gutmann
That was the very reason we wanted full disclosure list created because things like this do get leaked, and if people are armed with knowledge, they can defend. I am sorry that the public leak may cause SuSE problems, I can appreciate the pressure it places on the team.
I know that with the current team at SuSE we're in good hands :)
Thanks, Len. :-) Unfortunately, the gobbles people fail to mention some details. There is no leak. * We have published the new i4l package on Thursday at short past 6pm. * The bug is fixed in these packages. * Sebastian Krahmer has found the bugs. More to come in the next announcement.
Len
FYI: http://lists.netsys.com/pipermail/full-disclosure/2002-August/000950.html
We've been preparing a security update for this problem and are in the process of releasing it.
It seems this leaked somehow :-(
Olaf
Grüße,
Roman.
--
- -
| Roman Drahtmüller
On Sat, 10 Aug 2002, Len Rose wrote: GOBBLES is probably monitoring the ftp servers. They probably got to know about the bug by diffing the updated packages which are already available for one or two days. Sebastian
That was the very reason we wanted full disclosure list created because things like this do get leaked, and if people are armed with knowledge, they can defend. I am sorry that the public leak may cause SuSE problems, I can appreciate the pressure it places on the team.
I know that with the current team at SuSE we're in good hands :)
Len
On Sat, Aug 10, 2002 at 01:13:58PM +0200, Olaf Kirch wrote:
On Sat, Aug 10, 2002 at 05:22:55AM -0400, Len Rose wrote:
FYI: http://lists.netsys.com/pipermail/full-disclosure/2002-August/000950.html
We've been preparing a security update for this problem and are in the process of releasing it.
It seems this leaked somehow :-(
Olaf -- Olaf Kirch | Anyone who has had to work with X.509 has probably okir@suse.de | experienced what can best be described as ---------------+ ISO water torture. -- Peter Gutmann
-- ~ ~ perl self.pl ~ $_='print"\$_=\47$_\47;eval"';eval ~ krahmer@suse.de - SuSE Security Team ~
Hello Len, On Sat, 10 Aug 2002, Len Rose wrote:
FYI: http://lists.netsys.com/pipermail/full-disclosure/2002-August/000950.html
Figures that it's Gobbles. (Though I'll say that his messages are always entertaining, at least...) Makes me happy that I always go through "individual packages" in a SuSE install, though. Since I don't have ISDN, nothing having to do with it had been selected. (I verified this pretty quickly, however...) Best regards, Ken Parker (devel@kparker.org) Happy SuSE customer since 2000.
Hi.. though lately with 8.0 it's harder to pick and choose.. I miss Yast1, but I don't want to start the arguments again :) Len On Sat, Aug 10, 2002 at 06:46:51AM -0700, De Velopment wrote: [snippage]
Figures that it's Gobbles. (Though I'll say that his messages are always entertaining, at least...)
Makes me happy that I always go through "individual packages" in a SuSE install, though. Since I don't have ISDN, nothing having to do with it had been selected. (I verified this pretty quickly, however...)
[snippage]
participants (5)
-
De Velopment
-
Len Rose
-
Olaf Kirch
-
Roman Drahtmueller
-
Sebastian Krahmer