[Repost: Re: [suse-security] CERT snmp advisory and SuSE]
hello... does Suse has *any* plans releasing fixed snmpd packages? It's probably my 3rd or 4th post with the same question in 3 weeks: it would be very nice if somebody could answer, thx... O. On Fri, Feb 22, 2002 at 11:23:37AM -0800, Christopher Mahmood wrote:
I assume the SNMP packages are not yet finished, or did I miss something?
They're almost finished. The security team did a full audit of version 4.2.3 so we have to update all the SuSE versions to 4.2.3.
well, already 2 weeks: usually SuSE is quicker in security fixes releasing... Are you all working on suse 8.0 or what ? :) Regards, Olivier -- _________________________________________________________________ Olivier Mueller - om@8304.ch - PGPkeyID: 0E84D2EA - Switzerland qmail projects: http://omail.omnis.ch - http://webmail.omnis.ch
* Olivier M. (qmail@orion.8304.ch) [020303 16:58]:
hello... does Suse has *any* plans releasing fixed snmpd packages? It's probably my 3rd or 4th post with the same question in 3 weeks: it would be very nice if somebody could answer, thx...
We did answer, 3 or 4 times. The security team did a complete audit of version 4.2.3 and all of the supported distributions had to be updated. If you'd like to test them you can find preliminary updates for 7.3 here: ftp.suse.com/pub/people/ckm/packages/ucdsnmp -- -ckm
On Monday 04 March 2002 12:00 am, Christopher Mahmood wrote:
* Olivier M. (qmail@orion.8304.ch) [020303 16:58]:
hello... does Suse has *any* plans releasing fixed snmpd packages? It's probably my 3rd or 4th post with the same question in 3 weeks: it would be very nice if somebody could answer, thx...
We did answer, 3 or 4 times. The security team did a complete audit of version 4.2.3 and all of the supported distributions had to be updated.
If you'd like to test them you can find preliminary updates for 7.3 here: ftp.suse.com/pub/people/ckm/packages/ucdsnmp
I don't know about testing....after updating mod_php4, my installation of IMP no longer works. quote() function has disappeared from PHP. Lately, there have ben a lot of such mishaps from SuSE. Cheers, -- Nadeem Hasan nhasan@nadmm.com http://www.nadmm.com/
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At Montag, 4. März 2002 06:33 Nadeem Hasan wrote:
I don't know about testing....after updating mod_php4, my installation of IMP no longer works. quote() function has disappeared from PHP. Lately, there have ben a lot of such mishaps from SuSE.
Cheers,
Dear Nadeem, dear list,
please allow an 57 years old, bald collegue with 35+ years of
stress-experience with computers a somewhat personal response.
1.)
The suse team is doing a good job for my feelings.
Errors occur, but the team seems to be motivated
- - and motivated not by money only, as many of us.
2.)
If you don't know about testing, stop pushing others, who do.
3.)
If you found problems with such an important upate as the mod_php4
(which is mission critical for each internet-server), I ask you to
state your findings under a separate subject and not hide such
comments in a rant about time lines. Or did you already and I overlooked
it? Then excuse me, had a lot of stress myself lately including
lost emails (perhaps) from the list.
Greetings
Michael
- --
Michael Zimmermann (Vegaa Internet Services)
On Monday 04 March 2002 03:43 am, you wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
At Montag, 4. März 2002 06:33 Nadeem Hasan wrote:
I don't know about testing....after updating mod_php4, my installation of IMP no longer works. quote() function has disappeared from PHP. Lately, there have ben a lot of such mishaps from SuSE.
Cheers,
Dear Nadeem, dear list,
please allow an 57 years old, bald collegue with 35+ years of stress-experience with computers a somewhat personal response.
1.) The suse team is doing a good job for my feelings. Errors occur, but the team seems to be motivated - - and motivated not by money only, as many of us.
You should probably go back and look at all the retraction SuSE has done lately. What do you call that? And you know all this about the SuSE team because....?
2.) If you don't know about testing, stop pushing others, who do.
But I pay for the box and I have every right to push for. Its my money and its their duty. Maybe you don't wanna push because you enjoy downloading freebies? I doesn't matter if I know anything about testing. I pay for the service and I am entitled for quality. In any case, it is not your duty to respond to emails directed towards SuSE, so shut up.
3.) If you found problems with such an important upate as the mod_php4 (which is mission critical for each internet-server), I ask you to state your findings under a separate subject and not hide such comments in a rant about time lines. Or did you already and I overlooked it? Then excuse me, had a lot of stress myself lately including lost emails (perhaps) from the list.
The problem was clearly stated. There is no further information that is needed. And oh BTW, I have found the reason for the error thanks to some *constructive* comment on my email/complain/rant from Robert Klein. If you wanna find out more look for another email in this thread by me. Stop flaming or keep quiet. I know you are old....sorry if I disrespected you :) Cheers, -- Nadeem Hasan
Hi Nadeem, Nadeem Hasan wrote: <snip>
2.) If you don't know about testing, stop pushing others, who do.
But I pay for the box and I have every right to push for. Its my money and its their duty. Maybe you don't wanna push because you enjoy downloading freebies? I doesn't matter if I know anything about testing. I pay for the service and I am entitled for quality. In any case, it is not your duty to respond to emails directed towards SuSE, so shut up.
<snip> I do agree with a lot of stuff you've said before. But: Your mail was sent to the whole list, not only to the suse-team, so be prepared that somebody might have a different opinion and thus might answer you. So don't tell anybody to shut up or do it yourself. Just my 2 cent, Ralf Ronneburger
** On Mon, 4 Mar 2002 12:35:18 -0500 Nadeem Hasan
At Montag, 4. März 2002 18:35 Nadeem Hasan
I know you are old....sorry if I disrespected you :)
I don't need your respect, thank you.
Well, it's your choice, whom you want to have help from.
Obviously you prefer relationships between somebody
who pays and thinks he has therefore the right to push
others around and somebody who does his work (only)
because he gets paid for it. It's your choice and your life
and your ambition which pushes you accordingly.
This email list is not for this kind of relationship in my opinion.
If you want to bully suse around because you pay for a
support contract, then please do so in direct email with the
suse support. This email list is based on free participation
for all of us - including the suse team members, I think.
I'm pretty sure, that I don't want to help people or ask
people for help who behave as if they have a right for it.
I don't like to spend my time reading emails which
are hiding as questions, but are in fact complaints.
Such things are not a positive contribution to this email list
from my point of view.
Don't forget, I'm not getting payed by you, no chance.
Greetings
Michael
--
Michael Zimmermann (Vegaa Internet Services)
On Monday, 4. March 2002 06:33, Nadeem Hasan wrote:
I don't know about testing....after updating mod_php4, my installation of IMP no longer works. quote() function has disappeared from PHP. Lately, there have ben a lot of such mishaps from SuSE.
There's no IMP package in either SuSE personal or professional. The SuSE email-server uses another product (Skyrix?). That's probably the reason IMP didn't get tested. BTW, I think there's been some discussion about quote() missing on some IMP mailing list.. Something about "PEAR". Robert
On Monday 04 March 2002 06:07 am, you wrote:
On Monday, 4. March 2002 06:33, Nadeem Hasan wrote:
I don't know about testing....after updating mod_php4, my installation of IMP no longer works. quote() function has disappeared from PHP. Lately, there have ben a lot of such mishaps from SuSE.
There's no IMP package in either SuSE personal or professional. The SuSE email-server uses another product (Skyrix?).
That's probably the reason IMP didn't get tested. BTW, I think there's been some discussion about quote() missing on some IMP mailing list.. Something about "PEAR".
Ahh!!! you hit the bullseye Robert. I run IMP 3.0 and it required me to upgrade to PEAR 4.1 which the mod_php4 update promptly overwrote. I have not upgraded PEAR again yet but I know that is the problem. I have lost some faith in SuSE quality lately so I didn't try to look beyond for other possibilities. But hey...thats what this list is for :) Thanks a lot Robert. Cheers, -- Nadeem Hasan
* Nadeem Hasan (nhasan@nadmm.com) [020304 09:39]:
mailing list.. Something about "PEAR".
Ahh!!! you hit the bullseye Robert. I run IMP 3.0 and it required me to upgrade to PEAR 4.1 which the mod_php4 update promptly overwrote. I have not upgraded PEAR again yet but I know that is the problem. I have lost some faith in SuSE quality lately so I didn't try to look beyond for other possibilities. But hey...thats what this list is for :)
I don't see how the update could have overwritten your version of PEAR unless you installed it in /usr/bin and /usr/share instead of /usr/local/bin and /usr/local/share. If you did that then you shouldn't be surprised that rpm overwrote it. -- -ckm
*** Christopher Mahmood (ckm@suse.com) wrote in suse-security on Mar 4, 2002:
[...] I don't see how the update could have overwritten your version of PEAR unless you installed it in /usr/bin and /usr/share instead of /usr/local/bin and /usr/local/share. If you did that then you shouldn't be surprised that rpm overwrote it.
And isn't there also the option to build rpm archives from what you install by your own and be warned if an other package is going to overwrite a file of another - your - package? In the meantime I build rpms from what I've installed from tar balls and developed by myself since it's easy as nothing. Best regards Henning Hucke -- It wasn't that she had a rose in her teeth, exactly. It was more like the rose and the teeth were in the same glass.
On Mon, 4 Mar 2002, Olivier M. wrote:
hello... does Suse has *any* plans releasing fixed snmpd packages? It's probably my 3rd or 4th post with the same question in 3 weeks: it would be very nice if somebody could answer, thx...
Yes, we will release it. Stay tuned....
Thanks for you patience.
Bye,
Thomas
--
Thomas Biege
participants (9)
-
Christopher Mahmood -
Henning Hucke -
jfweber＠bellsouth.net -
Michael Zimmermann -
Nadeem Hasan -
Olivier M. -
Ralf Ronneburger -
Robert Klein -
Thomas Biege