April 2004 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] System Update and Online Update
by Gao, Ruidong 16 Apr '04

16 Apr '04

Hi, excellent answer. Where is patch description file in disk. Is that bundled with fou4s or SUSE. Where can I find a template of it? I came to run fou4s and ended up with following error message: ---------------------------- linux:/home/ben # fou4s -u You are using ftp.gwdg.de and a business product, this will probably not work. Getting patch descriptions from http://ftp.gwdg.de/pub/linux/suse/ftp.suse.com/suse http://ftp.gwdg.de/pub/linux/suse/ftp.suse.com/suse/i386/update/SuSE-SLES/8…: 15:46:36 ERROR 404: Not Found. FINISHED --15:46:36-- Downloaded: 0 bytes in 0 files ---------------------------- What's wrong with it. Ben -----Original Message----- From: Armin Schoech [mailto:armin.schoech@web.de] Sent: 2004年4月16日 15:53 To: suse-security(a)suse.com Subject: RE: [suse-security] System Update and Online Update Hello, > To make it more clear for my last question, How can I find out if my > SUSE box has got specific vulnerability fixed so that I should not > bother to patch it. > --> you have to look at the changelog of the specific package. "rpm -q --changelog k_deflt | more" lists all changes and patches applied to the default kernel. The same can be used for any application e.g. "rpm -q --changelog openssh" > BTW, could this utility check patches for both application and > kernel? Could it install/uninstall application. > --> Fou4s will update all SuSE packages that you have installed on your system. It will not update packages which are not supported by SuSE (unless you write your own patch description files for these packages). Fou4s is used to update packages that are already installed, it is not meant for installing/uninstalling packages. Use "YaST" instead or the "rpm -U/-I" command from the commandline. Cheers, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

3 2

RE: [suse-security] System Update and Online Update
by Gao, Ruidong 16 Apr '04

16 Apr '04

Thanks. To make it more clear for my last question, How can I find out if my SUSE box has got specific vulnerability fixed so that I should not bother to patch it. I just installed fou4s and is reading man pages for usage help. BTW, could this utility check patches for both application and kernel? Could it install/uninstall application. ben -----Original Message----- From: Armin Schoech [mailto:armin.schoech@web.de] Sent: 2004年4月16日 15:14 To: suse-security(a)suse.com Subject: Re: [suse-security] System Update and Online Update Hi, > I come to be working on some stuff of patch on SUSE Linux. And I > wonder if you or someone else out there could recommend some site > or provide some patch artchitecture information on SUSE about how > vulnerabilities are detected and patched. > --> I don't really understand your question. There is no standard way of detecting a vulnerability. In general, someone out there finds a vulnerability either by looking through the source code (code-auditing) or by stumbling upon it when something doesn't work as expected or desired. Most often, the vulnerability is first released to the distributors (like SuSE) so they can fix it before it goes public and can be exploited. Regarding patches: SuSE prepares updated RPM-packages which are published on the SuSE FTP-servers. If you want to get notification about them, subscribe to "suse-security-announce". Minor updates are not announced but simply turn up on the FTP server. To keep your system up-to-date, monitor the FTP-server regularly or run YOU/fou4s regularly (at least once a week). HTH to answer your questions, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

RE: [SPAM] - Re: [suse-security] System Update and Online Update - Email found in subject
by Gao, Ruidong 16 Apr '04

16 Apr '04

Thanks, Armin. I come to be working on some stuff of patch on SUSE Linux. And I wonder if you or someone else out there could recommend some site or provide some patch artchitecture information on SUSE about how vulnerabilities are detected and patched. Ben -----Original Message----- From: Armin Schoech [mailto:armin.schoech@web.de] Sent: 2004年4月16日 14:48 To: suse-security(a)suse.com Subject: [SPAM] - Re: [suse-security] System Update and Online Update - Email found in subject Hi ! > Are there any CLI for patches and software packages maintenances besides > programs like yast? > --> Have a look at fou4s: http://fou4s.gaugusch.at/ Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

System Update and Online Update
by Gao, Ruidong 16 Apr '04

16 Apr '04

Are there any CLI for patches and software packages maintenances besides programs like yast? Benjamin Gao

3 2

Kernel source for SuSE 8.1 2.4.21-203
by William Cutshall 15 Apr '04

15 Apr '04

I just performed the YaST update to pick up the latest kernel patch. "uname -r" now reports "2.4.21-203-default". "rpm -qa | grep kernel" shows that I have "kernel-source-2.4.21-201" - which is what is on the SuSE FTP site. This mismatch between binary and source is preventing me from rebuilding my winmodem driver. Any suggestions on how I can resolve this? Thanks, Bill Cutshall wrcutshall(a)yahoo.com __________________________________ Do you Yahoo!? Yahoo! Tax Center - File online by April 15th http://taxes.yahoo.com/filing.html

1 0

Re: [suse-security] Limits in /etc/group and useradd infinity loop
by Roland Hilkenbach 15 Apr '04

15 Apr '04

Am Mittwoch, 14. April 2004 18:22 schrieb Michael Ströder: > Maxim Cherniavsky wrote: > > I've found strange problems with useradd program. Suddenly useradd stops > > to work and begins to eat memory till system crash. > > Sad but true that there's absolutely no response from SuSE. :-( > > Which kernel are you using? > > Please check with: rpm -qf /boot/vmlinuz > > Ciao, Michael. Hello, I encountered the same problem: I was creating some useraccounts and out of a sudden useradd starts looping. Since then this happens reproducably even after reboot. Also groupadd behaves the same way. Now I have to create the accounts with vipw! My kernel version: k_athlon-2.4.21-202 Number of users: 600+ I even deleted some unused accounts to check if I hit some magic boundary in number of accounts. The sometimes infamous nscd is not running. Is there any workaround/fix for this? Ciao Roland

2 2

ssh and X11 help
by calind＠earthlink.net 14 Apr '04

14 Apr '04

PRODUCT: SuSE Linux (I386) 9.0 I have a problem opening an Xterm window on my Suse linux machine (SL) after I ssh (with X11 forwarding) to a remote machine (RM). The display is set correctly, I see the xterm process running on the remote machine but the xterm does not pop up on my Suse linux machine (SL). In fact I lose keyboard input capabilities in the window where I typed 'xterm' and I only get it back one the connection times out. The IMPORTANT part is that I can accomplish the same thing from a Windows machine from the same network as my SL machine via putty (win ssh client) and Exceed. That indicates that the issue is with my local SUSE setup. The last line of the verbosed ouput is identical in both cases: "confirm x11" except on the Suse machine my xterm window doesn't pop up, on the windows machine it does. This leads me to believe that tI have a Suse ssh (maybe X) related problem. One other important issue: to reach to my remote machine I ssh twice: 1. Linux to remote account management machine (RAM). 2. RAM to RM ( where I finally want the xterm to run) In all cases the displays are set correctly. I also verified the xauth -list and my display is in the output and has a magic cookie. Please let me know if you have any ideeas about how to solve this problem. Any suggestions will be highly appreciated. Additional info below: ** my SUSE (SL) machine suse{cduma}41: ssh -V OpenSSH_3.7.1p2, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003 ** the RAM machine (after the 1st ssh from SL to RAM) gatekeeper% ssh -V OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f gatekeeper% echo $DISPLAY gatekeeper:14.0 ** the RM machine (where I want to do the work and start the xterm) shaman{cduma}1: echo $DISPLAY shaman:10.0 ** the RC machine ouput after I start the Xterm shaman{cduma}2: debug2: client_check_window_change: changed debug2: channel 0: request window-change debug2: client_check_window_change: changed debug1: channel request 0: window-change shaman{cduma}4: xterm debug1: client_input_channel_open: ctype x11 rchan 3 win 65536 max 16384 debug1: client_request_x11: request from 155.157.86.16 42287 debug2: fd 7 setting O_NONBLOCK debug2: fd 7 is O_NONBLOCK debug1: channel 1: new [x11] debug1: confirm x11 debug1: client_input_channel_open: ctype x11 rchan 1 win 30000 max 1024 debug1: client_request_x11: request from 155.157.121.230 45345 debug1: fd 7 setting TCP_NODELAY debug1: fd 7 setting O_NONBLOCK debug2: fd 7 is O_NONBLOCK debug1: channel 1: new [x11] debug1: confirm x11 ** above is where the xterm window pops uo on my Windows machine, it doesn't on my SUSE machine ** below is the logging after connection TIMEOUT debug1: channel 0: free: client-session, nchannels 2 debug3: channel 0: status: The following connections are open: #0 client-session (t4 r0 i0/0 o0/0 fd 4/5) #1 x11 (t4 r3 i0/0 o0/0 fd 7/7) debug3: channel 0: close_fds r 4 w 5 e 6 debug1: channel 1: free: x11, nchannels 1 debug3: channel 1: status: The following connections are open: #1 x11 (t4 r3 i0/0 o0/0 fd 7/7) debug3: channel 1: close_fds r 7 w 7 e -1 Read from remote host gatekeeper.east.hitc.com: Connection timed out Connection to gatekeeper.east.hitc.com closed. debug1: Transferred: stdin 0, stdout 0, stderr 118 bytes in 1327.8 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.1 debug1: Exit status -1

2 1

Limits in /etc/group and useradd infinity loop
by Maxim Cherniavsky 14 Apr '04

14 Apr '04

Hi all I've found strange problems with useradd program. Suddenly useradd stops to work and begins to eat memory till system crash. After some hours of experiments, I've found that I reached some strange limit in /etc/group file. I cannot add more than 85 users to one group. When adding 86'th user useradd stops to work, and due to strace, loops in open("/etc/passwd", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=6105, ...}) = 0 mmap2(NULL, 6105, PROT_READ, MAP_SHARED, 4, 0) = 0x4036f000 _llseek(4, 6105, [6105], SEEK_SET) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=6105, ...}) = 0 munmap(0x4036f000, 6105) = 0 close(4) and so on. First question - what the limit of number of users in one group? And where I can read about this? Second question - why useradd works so terribly? Why it eats memory? It calls mmap2 and then munmap on the same address in a loop .... Third question - why kernel dont kill proccess which eats all of avaliable memory? On other systems swap pager must kill it! I'm using ----- cat /etc/SuSE-release SuSE Linux 9.0 (i586) VERSION = 9.0 ----- uname -a Linux Guantanamo 2.4.21-192-Guantanamo #1 Tue Apr 6 15:32:17 MSD 2004 ----- Thanx -- Best regards, Maxim Cherniavsky MTU-Intel, Internet Department mailto:maxim@mtu.ru

2 2

SUSE Security Announcement: cvs (SuSE-SA:2004:008)
by krahmer＠suse.de 14 Apr '04

14 Apr '04

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SUSE Security Announcement Package: cvs Announcement-ID: SuSE-SA:2004:008 Date: Wed Apr 14 16:00:00 MEST 2004 Affected products: 8.0, 8.1, 8.2, 9.0 SuSE Firewall on CD 2 SuSE Linux Enterprise Server 7, 8 SLES 8 for IBM iSeries and IBM pSeries SuSE Linux Office Server UnitedLinux 1.0 Vulnerability Type: remote code execution Severity (1-10): 5 SUSE default package: No Cross References: Content of this advisory: 1) security vulnerability resolved: arbitrary file creation in cvs problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds: - neon - tcpdump - openssh - kdeprint/kdelibs3 - MPlayer - mailman - systat - apache2 - emil 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The Concurrent Versions System (CVS) offers tools which allow developers to share and maintain large software projects. During the analyzation of the CVS protocol and their implementation, the SuSE Security Team discovered a flaw within the handling of pathnames. Evil CVS servers could specify absolute pathnames during checkouts and updates, which allows to create arbitrary files with the permissions of the user invoking the CVS client. This could lead to a compromise of the system. Please download the update package for your distribution and verify its integrity by the methods listed in section 3) of this announcement. Then, install the package using the command "rpm -Fhv file.rpm" to apply the update. Our maintenance customers are being notified individually. The packages are being offered to install from the maintenance web. Intel i386 Platform: SuSE-9.0: ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/cvs-1.11.6-79.i586.rpm 392353d02948dee01fa98832841699be patch rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/cvs-1.11.6-79.i586.pat… fd287ccde902d5a93ce54c141f4f888d source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/cvs-1.11.6-79.src.rpm f094e09f54e176747f7441d44c20e12c SuSE-8.2: ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/cvs-1.11.5-103.i586.rpm a690613adaf637365f8b99a91373f5cf patch rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/cvs-1.11.5-103.i586.pa… 844400ec62905d78b9e196c311f49207 source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/cvs-1.11.5-103.src.rpm 202d2afd939caff003fbe73f65977ee6 SuSE-8.1: ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/cvs-1.11.1p1-326.i586.… 90401ed5771c3570310c23efcd503bee patch rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/cvs-1.11.1p1-326.i586.… 42335546a7937ccc0fc6173ba1697ed9 source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/cvs-1.11.1p1-326.src.rpm ca6cb008ba8004635f9892552ed3e569 SuSE-8.0: ftp://ftp.suse.com/pub/suse/i386/update/8.0/d3/cvs-1.11.1p1-326.i386.rpm b24bca587706433d0cfa81ae96822e81 patch rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.0/d3/cvs-1.11.1p1-326.i386.patch.… b5df706c6862ade002714607ba6027f6 source rpm(s): ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/cvs-1.11.1p1-326.src.rpm 26b4e34fb562fdccf33f35bfde16a403 Opteron x86_64 Platform: SuSE-9.0: ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/cvs-1.11.6-78.x86_… dae12f94ea7eb35ed9b5172a8288d032 patch rpm(s): ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/cvs-1.11.6-78.x86_… 07ca7acf86abd38e617a60e28dedfb0c source rpm(s): ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/cvs-1.11.6-78.src.rpm 02d1e7f89a0f5372dc8a702032f4f4c2 ______________________________________________________________________________ 2) Pending vulnerabilities in SUSE Distributions and Workarounds: - neon The neon package contained various format string vulnerabilities which have been fixed. New packages are available on our FTP servers. Maintained products do not contain the neon package and are therefore not affected. (CAN-2004-0179) - tcpdump The tcpdump program contains a remotely exploitable denial of service condition in its ISAKMP packet handling. New tcpdump packages are currently being tested and will soon be available on our FTP servers. - openssh The scp program which is part of the openssh package allowed evil servers to trick clients into creating arbitrary files with permissions of the user invoking scp. New packages are available on our FTP servers. - kdeprint/kdelibs3 The kdeprint system called the ghostscript program without the -dSAFER option. This has been fixed. New packages are available on our FTP servers. The package is named "kdelibs3". Maintained products are not affected. - MPlayer The mplayer program contained a buffer overflow while escaping large URLs. This has been fixed. New MPlayer packages are currently being tested and will be available soon on our FTP servers. - mailman The mailing list manager mailman can be tricked to deny service by remote attackers. (CAN-2003-0991) New packages are available on our FTP servers. - sysstat This update close two cases of insecure temporary file handling in the isag code. New packages are available on our FTP servers. - apache2 This update fixes a memory leak in the mod_ssl module of apache2 (CAN-2004-0113), a possible remote DoS attack on accessing rarely used listening ports (CAN-2004-0174), and a problem with unescaped special characters in log files that could present a security hazard for terminal emulators (CAN-2003-0020). New packages are available on our FTP servers. - emil The emil mail filter conatins buffer overflows and format-string bugs that can be exploited remotely if emil is used in conjunction with procmail, sendmail and alike. (CAN-2004-0152, CAN-2004-0153) New packages are available on our FTP servers. ______________________________________________________________________________ 3) standard appendix: authenticity verification, additional information - Package authenticity verification: SUSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum <name-of-the-file.rpm> after you downloaded the file from a SUSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key security(a)suse.de) the checksums show proof of the authenticity of the package. We disrecommend to subscribe to security lists which cause the email message containing the announcement to be modified so that the signature does not match after transport through the mailing list software. Downsides: You must be able to verify the authenticity of the announcement in the first place. If RPM packages are being rebuilt and a new version of a package is published on the ftp server, all md5 sums for the files are useless. 2) rpm package signatures provide an easy way to verify the authenticity of an rpm package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, where <file.rpm> is the filename of the rpm package that you have downloaded. Of course, package authenticity verification can only target an un-installed rpm package file. Prerequisites: a) gpg is installed b) The package is signed using a certain key. The public part of this key must be installed by the gpg program in the directory ~/.gnupg/ under the user's home directory who performs the signature verification (usually root). You can import the key that is used by SUSE in rpm packages for SUSE Linux by saving this announcement to a file ("announcement.txt") and running the command (do "su -" to be root): gpg --batch; gpg < announcement.txt | gpg --import SUSE Linux distributions version 7.1 and thereafter install the key "build(a)suse.de" upon installation or upgrade, provided that the package gpg is installed. The file containing the public key is placed at the top-level directory of the first CD (pubring.gpg) and at ftp://ftp.suse.com/pub/suse/pubring.gpg-build.suse.de . - SUSE runs two security mailing lists to which any interested party may subscribe: suse-security(a)suse.com - general/linux/SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an email to <suse-security-subscribe(a)suse.com>. suse-security-announce(a)suse.com - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an email to <suse-security-announce-subscribe(a)suse.com>. For general information or the frequently asked questions (faq) send mail to: <suse-security-info(a)suse.com> or <suse-security-faq(a)suse.com> respectively. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, it is desired that the clear-text signature shows proof of the authenticity of the text. SUSE Linux AG makes no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org mQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCkYS3yEKeueNWc+z/0Kvff 4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP+Y0PFPboMvKx0FXl/A0d M+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR8xocQSVCFxcwvwCglVcO QliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U8c/yE/vdvpN6lF0tmFrK XBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0ScZqITuZC4CWxJa9GynBE D3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEhELBeGaPdNCcmfZ66rKUd G5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtBUVKn4zLUOf6aeBAoV6NM CC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOoAqajLfvkURHAeSsxXIoE myW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1nKFvF+rQoU3VTRSBQYWNr YWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohcBBMRAgAcBQI57vSBBQkD wmcABAsKAwQDFQMCAxYCAQIXgAAKCRCoTtronIAKyl8sAJ98BgD40zw0GHJHIf6d NfnwI2PAsgCgjH1+PnYEl7TFjtZsqhezX7vZvYCIRgQQEQIABgUCOnBeUgAKCRCe QOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lxyoAejACeOO1HIbActAevk5MUBhNe LZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWnB/9An5vfiUUE1VQnt+T/EYklES3t XXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDVwM2OgSEISZxbzdXGnqIlcT08TzBU D9i579uifklLsnr35SJDZ6ram51/CWOnnaVhUzneOA9gTPSr+/fT3WeVnwJiQCQ3 0kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF5Yryk23pQUPAgJENDEqeU6iIO9Ot 1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3D3EN8C1yPqZd5CvvznYvB6bWBIpW cRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGuzgpJt9IXSzyohEJB6XG5+D0BiF0E ExECAB0FAjxqqTQFCQoAgrMFCwcKAwQDFQMCAxYCAQIXgAAKCRCoTtronIAKyp1f AJ9dR7saz2KPNwD3U+fy/0BDKXrYGACfbJ8fQcJqCBQxeHvt9yMPDVq0B0W5Ag0E Oe70khAIAISR0E3ozF/la+oNaRwxHLrCet30NgnxRROYhPaJB/Tu1FQokn2/Qld/ HZnh3TwhBIw1FqrhWBJ7491iAjLR9uPbdWJrn+A7t8kSkPaF3Z/6kyc5a8fas44h t5h+6HMBzoFCMAq2aBHQRFRNp9Mz1ZvoXXcI1lk1l8OqcUM/ovXbDfPcXsUVeTPT tGzcAi2jVl9hl3iwJKkyv/RLmcusdsi8YunbvWGFAF5GaagYQo7YlF6UaBQnYJTM 523AMgpPQtsKm9o/w9WdgXkgWhgkhZEeqUS3m5xNey1nLu9iMvq9M/iXnGz4sg6Q 2Y+GqZ+yAvNWjRRou3zSE7Bzg28MI4sAAwYH/2D71Xc5HPDgu87WnBFgmp8MpSr8 QnSs0wwPg3xEullGEocolSb2c0ctuSyeVnCttJMzkukL9TqyF4s/6XRstWirSWaw JxRLKH6Zjo/FaKsshYKf8gBkAaddvpl3pO0gmUYbqmpQ3xDEYlhCeieXS5MkockQ 1sj2xYdB1xO0ExzfiCiscUKjUFy+mdzUsUutafuZ+gbHog1CN/ccZCkxcBa5IFCH ORrNjq9pYWlrxsEn6ApsG7JJbM2besW1PkdEoxak74z1senh36m5jQvVjA3U4xq1 wwylxadmmJaJHzeiLfb7G1ZRjZTsB7fyYxqDzMVul6o9BSwO/1XsIAnV1uuITAQY EQIADAUCOe70kgUJA8JnAAAKCRCoTtronIAKyksiAJsFB3/77SkH3JlYOGrEe1Ol 0JdGwACeKTttgeVPFB+iGJdiwQlxasOfuXyITAQYEQIADAUCPGqpWQUJCgCCxwAK CRCoTtronIAKyofBAKCSZM2UFyta/fe9WgITK9I5hbxxtQCfX+0ar2CZmSknn3co SPihn1+OBNyZAQ0DNuEtBAAAAQgAoCRcd7SVZEFcumffyEwfLTcXQjhKzOahzxpo omuF+HIyU4AGq+SU8sTZ/1SsjhdzzrSAfv1lETACA+3SmLr5KV40Us1w0UC64cwt A46xowVq1vMlH2Lib+V/qr3b1hE67nMHjysECVx9Ob4gFuKNoR2eqnAaJvjnAT8J /LoUC20EdCHUqn6v+M9t/WZgC+WNR8cq69uDy3YQhDP/nIan6fm2uf2kSV9A7ZxE GrwsWl/WX5Q/sQqMWaU6r4az98X3z90/cN+eJJ3vwtA+rm+nxEvyev+jaLuOQBDf ebh/XA4FZ35xmi+spdiVeJH4F/ubaGlmj7+wDOF3suYAPSXT2QAFEbQlU3VTRSBT ZWN1cml0eSBUZWFtIDxzZWN1cml0eUBzdXNlLmRlPokBFQMFEDbhLUfkWLKHsco8 RQEBVw4H/1vIdiOLX/7hdzYaG9crQVIk3QwaB5eBbjvLEMvuCZHiY2COUg5QdmPQ 8SlWNZ6k4nu1BLcv2g/pymPUWP9fG4tuSnlUJDrWGm3nhyhAC9iudP2u1YQY37Gb B6NPVaZiYMnEb4QYFcqv5c/r2ghSXUTYk7etd6SW6WCOpEqizhx1cqDKNZnsI/1X 11pFcO2N7rc6byDBJ1T+cK+F1Ehan9XBt/shryJmv04nli5CXQMEbiqYYMOu8iaA 8AWRgXPCWqhyGhcVD3LRhUJXjUOdH4ZiHCXaoF3zVPxpeGKEQY8iBrDeDyB3wHmj qY9WCX6cmogGQRgYG6yJqDalLqrDOdmJARUDBRA24S0Ed7LmAD0l09kBAW04B/4p WH3f1vQn3i6/+SmDjGzUu2GWGq6Fsdwo2hVM2ym6CILeow/K9JfhdwGvY8LRxWRL hn09j2IJ9P7H1Yz3qDf10AX6V7YILHtchKT1dcngCkTLmDgC4rs1iAAl3f089sRG BafGPGKv2DQjHfR1LfRtbf0P7c09Tkej1MP8HtQMW9hPkBYeXcwbCjdrVGFOzqx+ AvvJDdT6a+oyRMTFlvmZ83UV5pgoyimgjhWnM1V4bFBYjPrtWMkdXJSUXbR6Q7Pi RZWCzGRzwbaxqpl3rK/YTCphOLwEMB27B4/fcqtBzgoMOiaZA0M5fFoo54KgRIh0 zinsSx2OrWgvSiLEXXYKiEYEEBECAAYFAjseYcMACgkQnkDjEAAKq6ROVACgjhDM /3KM+iFjs5QXsnd4oFPOnbkAnjYGa1J3em+bmV2aiCdYXdOuGn4ZiQCVAwUQN7c7 whaQN/7O/JIVAQEB+QP/cYblSAmPXxSFiaHWB+MiUNw8B6ozBLK0QcMQ2YcL6+Vl D+nSZP20+Ja2nfiKjnibCv5ss83yXoHkYk2Rsa8foz6Y7tHwuPiccvqnIC/c9Cvz dbIsdxpfsi0qWPfvX/jLMpXqqnPjdIZErgxpwujas1n9016PuXA8K3MJwVjCqSKI RgQQEQIABgUCOhpCpAAKCRDHUqoysN/3gCt7AJ9adNQMbmA1iSYcbhtgvx9ByLPI DgCfZ5Wj+f7cnYpFZI6GkAyyczG09sE= =LRKC - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iQEVAwUBQH1dEHey5gA9JdPZAQFt1Af9G1LkLrTC/LAyaTE9qn6XS2gD5HXmN3Tc hWFlO9i9ZsVyn/9GJJsnFq1Grd9s3ka9SPrYKSadi4UxOKDGTp0y4on+rOQZKZo8 7aOs84BG+EMVLBgQ288i5VsngazvT2xcc1AhnAE7oph26QlAevv6j1jEqBITPWou Fmy49I2z/yif9ZDAyw6qzm5khvaSjw5uk922VohjNBec3nLLs+ev+sb8pwPvdN2A jlu7Vo2nclCmSMGM4N4+LWr/0HMUdkoajyuscdZ9+igz50XXjswS6U89LKVmrS59 5IMEJa7h14x+D9rU8dEJKm6qCPB2Dig3N9dfzV8d+0pLmEOQHgEOJA== =I/9T -----END PGP SIGNATURE-----

1 0

RE: [suse-security] List down?
by sematin＠mtn.co.ug 14 Apr '04

14 Apr '04

Must be the latter...:-D Noah. > -----Original Message----- > From: Andreas Bock [mailto:Andreas.Bock@nupis.de] > Sent: 14 April 2004 16:56 > To: suse-security(a)suse.com > Subject: [suse-security] List down? > > > Is the list down, or is everyone still in Easter vacation? > > Andreas > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

3 2