You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(55) |
Oct
(44) |
Nov
(156) |
Dec
(123) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(130) |
Feb
(156) |
Mar
(162) |
Apr
(171) |
May
(97) |
Jun
(127) |
Jul
(58) |
Aug
(81) |
Sep
(86) |
Oct
(45) |
Nov
(41) |
Dec
(84) |
| 2003 |
Jan
(71) |
Feb
(87) |
Mar
(133) |
Apr
(152) |
May
(151) |
Jun
(232) |
Jul
(320) |
Aug
(237) |
Sep
(271) |
Oct
(536) |
Nov
(301) |
Dec
(393) |
| 2004 |
Jan
(393) |
Feb
(184) |
Mar
(314) |
Apr
(225) |
May
(139) |
Jun
(77) |
Jul
(87) |
Aug
(75) |
Sep
(139) |
Oct
(50) |
Nov
(8) |
Dec
(28) |
| 2005 |
Jan
(66) |
Feb
(63) |
Mar
(14) |
Apr
(14) |
May
(8) |
Jun
(23) |
Jul
(21) |
Aug
(6) |
Sep
(29) |
Oct
(55) |
Nov
(38) |
Dec
(8) |
| 2006 |
Jan
(5) |
Feb
(10) |
Mar
(1) |
Apr
(15) |
May
(32) |
Jun
(44) |
Jul
(11) |
Aug
(8) |
Sep
(9) |
Oct
(14) |
Nov
(4) |
Dec
(3) |
| 2007 |
Jan
(3) |
Feb
(3) |
Mar
(2) |
Apr
|
May
|
Jun
|
Jul
(35) |
Aug
(49) |
Sep
(8) |
Oct
(42) |
Nov
(44) |
Dec
(7) |
| 2008 |
Jan
(2) |
Feb
(7) |
Mar
(8) |
Apr
(80) |
May
(74) |
Jun
(29) |
Jul
(5) |
Aug
(7) |
Sep
(6) |
Oct
(1) |
Nov
|
Dec
|
| 2009 |
Jan
(8) |
Feb
(19) |
Mar
(3) |
Apr
(24) |
May
(22) |
Jun
(23) |
Jul
(8) |
Aug
(23) |
Sep
(8) |
Oct
(27) |
Nov
(52) |
Dec
(27) |
| 2010 |
Jan
(36) |
Feb
(29) |
Mar
(17) |
Apr
(28) |
May
(21) |
Jun
(4) |
Jul
|
Aug
(28) |
Sep
(18) |
Oct
(6) |
Nov
(34) |
Dec
(16) |
| 2011 |
Jan
(18) |
Feb
(12) |
Mar
|
Apr
|
May
(9) |
Jun
(1) |
Jul
(5) |
Aug
(5) |
Sep
(7) |
Oct
(16) |
Nov
(26) |
Dec
(17) |
| 2012 |
Jan
(6) |
Feb
(34) |
Mar
(52) |
Apr
(10) |
May
(3) |
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
(4) |
Nov
(1) |
Dec
(4) |
| 2013 |
Jan
(5) |
Feb
|
Mar
|
Apr
(5) |
May
(4) |
Jun
|
Jul
|
Aug
(14) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2014 |
Jan
|
Feb
(2) |
Mar
(5) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(3) |
Dec
(11) |
| 2015 |
Jan
(5) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(1) |
Oct
(1) |
Nov
|
Dec
|
| 2016 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(2) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2017 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2018 |
Jan
(2) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Bruce S. <bw...@re...> - 2009-08-28 11:39:38
|
>> Syslog-ng works fine with the default config, but not if you upgrade >> an older system. >> Can we add something simple to upgrade-config to make the upgrade life easier? > > Hmm... Probably we can try to apply the diff for syslog-ng config, I think on > most systems the diff should apply, because the changes affect only main options. It shouldn't be a problem unless they customized their syslog-ng config. And if they customized it, there is a really good chance a patch would fail. I'm not sure of the best solution for this. - BS |
|
From: Serge L. <fi...@in...> - 2009-08-28 03:24:59
|
Heiko Zuerker wrote: > Syslog-ng works fine with the default config, but not if you upgrade > an older system. > Can we add something simple to upgrade-config to make the upgrade life easier? > Hmm... Probably we can try to apply the diff for syslog-ng config, I think on most systems the diff should apply, because the changes affect only main options. Serge |
|
From: Heiko Z. <he...@zu...> - 2009-08-27 18:43:47
|
Quoting Serge Leschinsky <fi...@in...>:
> Heiko Zuerker wrote:
>> Quoting Serge Leschinsky <fi...@in...>:
>>
>>> Hello,
>>>
>>> I'm still not sure, but it seems to be correlated: if syslog-ng
>>> starts before an
>>> attempt to login (ssh or console - it doesn't matter) the login process is
>>> getting stuck.
>>>
>>> As a workaround you can add "--no-caps" to the daemon parameters.
>>>
>>> I'm trying to update syslog-ng to 3.0.4 and verify if the problem
>>> goes away.
>>
>> Syslog-ng is not happy in the current DL CVS version, it's complaining
>> a lot about the config file.
> Heiko, are you sure it's new config file? I modified it for new
> syslog and it's
> OK ( at least on my system ).
>
> It should be like the following:
>
> root@gw:~ # cat /etc/syslog-ng/syslog-ng.conf
> @version: 3.0
>
> #####################################################################
> # define options for syslog
> #####################################################################
> options { long_hostnames(on); flush_lines(0); time_reopen(60);
> use_dns (no); };
>
> #####################################################################
> # define the source pipe for all local messages
> #####################################################################
> source src { file("/proc/kmsg" program_override("kernel: "));
> unix-stream("/dev/log" max-connections(1000)); internal(); };
> ....
Syslog-ng works fine with the default config, but not if you upgrade
an older system.
Can we add something simple to upgrade-config to make the upgrade life easier?
--
Regards
Heiko Zuerker
http://www.devil-linux.org
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
|
|
From: Heiko Z. <he...@zu...> - 2009-08-27 13:25:48
|
Quoting Heiko Zuerker <he...@zu...>: > Quoting Serge Leschinsky <fi...@in...>: > >> Heiko Zuerker wrote: >> >>> >>> It may be the grsecurity version I used, my patch is a couple of days >>> newer than the one on the FTP server. >>> I'll keep you posted about the results. >>> >> >> Maybe we can try out 2.6.30.5, what do you think? grsecurity patch >> is available >> since yesterday. > > Yes that's a good idea. I tried with the old grsecurity patch and the system booted fine. I'm recompiling with 2.6.30.5, let's hope that one works. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Heiko Z. <he...@zu...> - 2009-08-26 19:02:33
|
Quoting Serge Leschinsky <fi...@in...>: > Heiko Zuerker wrote: > >> >> It may be the grsecurity version I used, my patch is a couple of days >> newer than the one on the FTP server. >> I'll keep you posted about the results. >> > > Maybe we can try out 2.6.30.5, what do you think? grsecurity patch > is available > since yesterday. Yes that's a good idea. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Serge L. <fi...@in...> - 2009-08-26 18:30:29
|
Heiko Zuerker wrote: > > It may be the grsecurity version I used, my patch is a couple of days > newer than the one on the FTP server. > I'll keep you posted about the results. > Maybe we can try out 2.6.30.5, what do you think? grsecurity patch is available since yesterday. Serge |
|
From: Heiko Z. <he...@zu...> - 2009-08-26 14:04:26
|
Quoting Heiko Zuerker <he...@zu...>: > Quoting Serge Leschinsky <fi...@in...>: > >> Serge Leschinsky wrote: >>> Heiko Zuerker wrote: >>>> I turned off grsecurity and the kernel boots fine now. >>>> Serge, were you able to boot yours? >>>> >>>> Heiko >>> Yes, but it's not a VM, but a real harware - VIA C3 based PC. >>> Let me compile it once again and verify because my kernel now is 2.6.30.5. >>> >> Rebuilt, loaded. It seems to be OK. >> >> root@Devil:~ # uname -a >> Linux Devil 2.6.30.4-grsec #1 SMP Tue Aug 25 17:43:19 EST 2009 i686 >> i686 i386 >> GNU/Linux > > Thanks for trying it out. > I'll need to take a closer look a this issue on my side, this is > probably going to take a few days. > I did update some programs, I'll revert those changes and see if it'll > work afterwards. It may be the grsecurity version I used, my patch is a couple of days newer than the one on the FTP server. I'll keep you posted about the results. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Heiko Z. <he...@zu...> - 2009-08-26 12:45:03
|
Quoting Serge Leschinsky <fi...@in...>: > Serge Leschinsky wrote: >> Heiko Zuerker wrote: >>> I turned off grsecurity and the kernel boots fine now. >>> Serge, were you able to boot yours? >>> >>> Heiko >> Yes, but it's not a VM, but a real harware - VIA C3 based PC. >> Let me compile it once again and verify because my kernel now is 2.6.30.5. >> > Rebuilt, loaded. It seems to be OK. > > root@Devil:~ # uname -a > Linux Devil 2.6.30.4-grsec #1 SMP Tue Aug 25 17:43:19 EST 2009 i686 i686 i386 > GNU/Linux Thanks for trying it out. I'll need to take a closer look a this issue on my side, this is probably going to take a few days. I did update some programs, I'll revert those changes and see if it'll work afterwards. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Serge L. <fi...@in...> - 2009-08-26 05:54:23
|
Serge Leschinsky wrote: > Heiko Zuerker wrote: >> I turned off grsecurity and the kernel boots fine now. >> Serge, were you able to boot yours? >> >> Heiko > Yes, but it's not a VM, but a real harware - VIA C3 based PC. > Let me compile it once again and verify because my kernel now is 2.6.30.5. > Rebuilt, loaded. It seems to be OK. root@Devil:~ # uname -a Linux Devil 2.6.30.4-grsec #1 SMP Tue Aug 25 17:43:19 EST 2009 i686 i686 i386 GNU/Linux Serge |
|
From: Serge L. <fi...@in...> - 2009-08-25 02:56:29
|
Heiko Zuerker wrote: > I turned off grsecurity and the kernel boots fine now. > Serge, were you able to boot yours? > > Heiko Yes, but it's not a VM, but a real harware - VIA C3 based PC. Let me compile it once again and verify because my kernel now is 2.6.30.5. Serge |
|
From: Serge L. <fi...@in...> - 2009-08-25 02:45:38
|
Heiko Zuerker wrote:
> Quoting Serge Leschinsky <fi...@in...>:
>
>> Hello,
>>
>> I'm still not sure, but it seems to be correlated: if syslog-ng
>> starts before an
>> attempt to login (ssh or console - it doesn't matter) the login process is
>> getting stuck.
>>
>> As a workaround you can add "--no-caps" to the daemon parameters.
>>
>> I'm trying to update syslog-ng to 3.0.4 and verify if the problem goes away.
>
> Syslog-ng is not happy in the current DL CVS version, it's complaining
> a lot about the config file.
Heiko, are you sure it's new config file? I modified it for new syslog and it's
OK ( at least on my system ).
It should be like the following:
root@gw:~ # cat /etc/syslog-ng/syslog-ng.conf
@version: 3.0
#####################################################################
# define options for syslog
#####################################################################
options { long_hostnames(on); flush_lines(0); time_reopen(60); use_dns (no); };
#####################################################################
# define the source pipe for all local messages
#####################################################################
source src { file("/proc/kmsg" program_override("kernel: "));
unix-stream("/dev/log" max-connections(1000)); internal(); };
....
> It may be worth sticking with the old version for now. What do you think?
>
3.0.4 working correctly. I'm quite limited in testing options, but with 3.0.4
everything looks fine.
So, I'd suggest moving forward...
The changes will be committed tonight (PST).
Sincerely,
Serge
|
|
From: Heiko Z. <he...@zu...> - 2009-08-24 21:07:27
|
Quoting Serge Leschinsky <fi...@in...>: > Hello, > > I'm still not sure, but it seems to be correlated: if syslog-ng > starts before an > attempt to login (ssh or console - it doesn't matter) the login process is > getting stuck. > > As a workaround you can add "--no-caps" to the daemon parameters. > > I'm trying to update syslog-ng to 3.0.4 and verify if the problem goes away. Syslog-ng is not happy in the current DL CVS version, it's complaining a lot about the config file. It may be worth sticking with the old version for now. What do you think? -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Heiko Z. <he...@zu...> - 2009-08-24 21:03:19
|
I turned off grsecurity and the kernel boots fine now. Serge, were you able to boot yours? Heiko Quoting Heiko Zuerker <he...@zu...>: > Hey, > > does anyone have the current cvs version (with kernel 2.6.30.4) > running in a VM ? > I see the extracting kernel message on the screen and then it freezes up. > > -- > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop > -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Heiko Z. <he...@zu...> - 2009-08-24 14:51:03
|
Hey, does anyone have the current cvs version (with kernel 2.6.30.4) running in a VM ? I see the extracting kernel message on the screen and then it freezes up. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Heiko Z. <he...@zu...> - 2009-08-24 11:42:36
|
Quoting Serge Leschinsky <fi...@in...>: > Hello, > > I'm still not sure, but it seems to be correlated: if syslog-ng > starts before an > attempt to login (ssh or console - it doesn't matter) the login process is > getting stuck. > > As a workaround you can add "--no-caps" to the daemon parameters. > > I'm trying to update syslog-ng to 3.0.4 and verify if the problem goes away. This is interesting, I never saw this behavior before.... Could it have something to do with a kernel update or another program we recently updated? -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Serge L. <fi...@in...> - 2009-08-24 04:49:51
|
Hello, I'm still not sure, but it seems to be correlated: if syslog-ng starts before an attempt to login (ssh or console - it doesn't matter) the login process is getting stuck. As a workaround you can add "--no-caps" to the daemon parameters. I'm trying to update syslog-ng to 3.0.4 and verify if the problem goes away. Sincerely, Serge |
|
From: Dick M. <di...@fo...> - 2009-08-14 09:30:34
|
http://www.theregister.co.uk/2009/08/14/critical_linux_bug/ Dick |
|
From: Heiko Z. <he...@zu...> - 2009-07-30 18:40:30
|
Could you create a bug report in Mantis, this way we won't forget about it (since it's kinda important). Heiko > -----Original Message----- > From: Bruce Smith [mailto:bw...@re...] > Sent: Thursday, July 30, 2009 12:45 PM > To: dev...@li... > Subject: Re: [Devil-linux-develop] New Vulnerability In All Versions of > BIND 9 > > I will eventually, unless someone beats me to it (hopefully). :-) > > It will be awhile before I can get around to it... > > - BS > > > > Are you planning to update bind? > > > > Heiko > > > > Quoting Bruce Smith <bw...@re...>: > > > >> Just saw this notice about a new _remotely_ _exploitable_ BIND > vulnerability: > >> > >> https://www.isc.org/node/474 > >> http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability- > In-All-Versions-of-BIND-9 > >> > >> - BS > > ----------------------------------------------------------------------- > ------- > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 > 30-Day > trial. Simplify your report design, integration and deployment - and > focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop |
|
From: Bruce S. <bw...@re...> - 2009-07-30 17:44:49
|
I will eventually, unless someone beats me to it (hopefully). :-) It will be awhile before I can get around to it... - BS > Are you planning to update bind? > > Heiko > > Quoting Bruce Smith <bw...@re...>: > >> Just saw this notice about a new _remotely_ _exploitable_ BIND vulnerability: >> >> https://www.isc.org/node/474 >> http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability-In-All-Versions-of-BIND-9 >> >> - BS |
|
From: Heiko Z. <he...@zu...> - 2009-07-30 17:20:51
|
Are you planning to update bind? Heiko Quoting Bruce Smith <bw...@re...>: > Just saw this notice about a new _remotely_ _exploitable_ BIND vulnerability: > > https://www.isc.org/node/474 > http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability-In-All-Versions-of-BIND-9 > > - BS > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop > -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Bruce S. <bw...@re...> - 2009-07-29 12:57:46
|
Just saw this notice about a new _remotely_ _exploitable_ BIND vulnerability: https://www.isc.org/node/474 http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability-In-All-Versions-of-BIND-9 - BS |
|
From: Heiko Z. <he...@zu...> - 2009-07-24 17:29:01
|
Just run it from within the build directory. Heiko Quoting Bruce Smith <bw...@re...>: > Do we just run it to create the new checksum file? > Any parameters or anything? > > - BS > > > On Fri, Jul 24, 2009 at 11:11, Heiko Zuerker<he...@zu...> wrote: >> Hey, >> >> I added the script update_md5sum to ensure we're all using the same >> method to create the md5 checksums. >> >> -- >> >> Regards >> Heiko Zuerker >> http://www.devil-linux.org > > ------------------------------------------------------------------------------ > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop > -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Bruce S. <bw...@re...> - 2009-07-24 16:34:30
|
Do we just run it to create the new checksum file? Any parameters or anything? - BS On Fri, Jul 24, 2009 at 11:11, Heiko Zuerker<he...@zu...> wrote: > Hey, > > I added the script update_md5sum to ensure we're all using the same > method to create the md5 checksums. > > -- > > Regards > Heiko Zuerker > http://www.devil-linux.org |
|
From: Heiko Z. <he...@zu...> - 2009-07-24 16:25:57
|
I uploaded a new testing release to the FTP server. If you did submit bugs, please download and test if they're resolved now. Please respond to your bugs, so we can close them if they're fixed. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |
|
From: Heiko Z. <he...@zu...> - 2009-07-24 15:11:40
|
Hey, I added the script update_md5sum to ensure we're all using the same method to create the md5 checksums. -- Regards Heiko Zuerker http://www.devil-linux.org ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. |