- wlug - University of Waikato Mail Lists

Jpegs a security risk?
by Oliver Jones 14 Dec '03

14 Dec '03

A while back M$ produced a host fix for IE/OE that deems JPEG files a security risk and stops users from opening or displaying them. Is this a problem that exists for all attached images or is it just images sent from Linux mail clients? I only use Evolution for email so I'm not sure how to works between OE and OE. Anyone else seen this sort of errant behaviour from OE? Regards -- Oliver Jones » Director » oliver.jones(a)deeperdesign.com » +64 (21) 41 2238 Deeper Design Limited » +64 (7) 377 3328 » www.deeperdesign.com

3 2

fedora core
by Stephen Pearce 14 Dec '03

14 Dec '03

Hi Has anyone got the 6 disk version of this that they would be prepared to send to me for media and psotage cost please (3 iso binary images and 3 iso srpm images) Thanks Stephen

2 1

BBQ Postponed
by Jamie Curtis 13 Dec '03

13 Dec '03

Hi there, Due to the unpredictability of the weather out there today, we have decided that it is best to postpone the Xmas BBQ until a day where we have a bit more faith in the weather holding up. So, our revised plan is 6pm, Wednesday 17th. Same deal applies, BYO meat and drink, some salads, bread and softdrink provided. Location still at 3 Liston Crescent. Fingers crossed the weather will be fine ! Hope to see you all there, Cheers, Jamie

1 0

Audio Recording
by Daniel Lawson 10 Dec '03

10 Dec '03

As part of a holiday project, I was going to transfer soem vinyls I have to CD. Has anyone done anything like this, and have any preferred tools? Recording the audio isn't really a problem. What I would like some recommendations on are tools which will remove at least some of the record hiss. I know I wont get it all, but i should be able to remove a fair bit. I'll also need to split the vinyls up into tracks, so a wav editor would be a good start. I seem to remember a linux journal article on this recently, so I'm looking through the archives, but if anyone has any recommendations / experiences they wish to share, it would be good :) Thanks, Daniel

2 1

hardware
by David Nicholls 10 Dec '03

10 Dec '03

hi guys, im looking to get my hands on a PII bix (or higher) as cheaply as possible to replacement for my awful sounding linux router/webserver. anyone got anything that might be of interest? cheers & thanks... David Nicholls Computer Support Consultant School of Science & Technology/Dept of Chemistry The University of Waikato, Hamilton, New Zealand

3 2

WLUG Christmas BBQ
by Daniel Lawson 09 Dec '03

09 Dec '03

Hey folks, sorry for the late notice. Busy time of year :) WLUG Christmas BBQ: Where: 3 Liston Cres, Hillcrest (we'll put a map on the wiki soon) When: 4pm onwards, Sunday 14 December BBQ starts at 6 or so. BYO meat and drinks. Some salad, bread and softdrink will be provided. If its raining, we don't really have room to have this inside or in the garage. We'll post a confirmation email to the list on the day as to whether its going ahead or not. Please check your email on the day!

1 0

chat/pppd dropping DTR
by Jonathan Purvis 08 Dec '03

08 Dec '03

Hello, I have a problem with chat and/or pppd. Run via "pon" on Debian 3.0, pppd dials ok and then hangs up just after making the connection. If i change the authentication from PAP to Chat, then it hangs up after logging in. If i dial up with minicom, login manually and then run "pppd /dev/modem noauth defaultroute", everything is fine. This suggests that the hangup is occuring during the handover from chat to pppd. Swapping the Dynalink 56k modem i was using for my trusty battery powered 14k4 which has the DTR line control the power revealed that pppd was dropping the DTR line, causing the modem to hang up. So how do i stop it doing this? Setting the "local" option on pppd (instead of "modem") had no effect (other than it not noticing the modem had hung up), nor did playing with the "close_delay" option of setserial. The serial ports on this machine come from a Dolphin twin serial PCI card (currently on clearance for $10 at DSE), if anyone is familar with them. Thanks, Jon

2 1

Trying to decifer sendmail logs....
by Oliver Jones 08 Dec '03

08 Dec '03

Lately I've noticed I've been getting a lot of these in my maillog: Losing ./qfhB7AvXZ20553: savemail panic SYSERR(root): savemail: cannot save rejected email anywhere Sendmail mail logs make little sense to me.... Here is an example: hB438B623222: to=oliver(a)deeper.co.nz, delay=3+07:49:20, xdelay=00:00:00, mailer=cyrus, pri=121146, relay=localhost, dsn=5.6.0, stat=Service unavailable hB438B623222: hB7AvXZ20553: DSN: Service unavailable hB7AvXZ20553: to=<jimmiegodwinan(a)yahoo.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=30985, relay=mx1.mail.yahoo.com. [64.157.4.78], dsn=5.0.0, stat=Service unavailable hB7AvXZ20553: hB7AvXa20553: return to sender: Service unavailable hB7AvXa20553: to=postmaster, delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=31085, relay=localhost [[UNIX: /var/imap/socket/lmtp]], dsn=5.6.0, stat=Service unavailable hB7AvXZ20553: Losing ./qfhB7AvXZ20553: savemail panic hB7AvXZ20553: SYSERR(root): savemail: cannot save rejected email anywhere >From what I can tell it all looks like spam bounces that are getting bounced back and then getting lost for some reason. Or something. It is just concerning me that maybe I'm loosing legitimate mail. I doubt this but it is a worry. I did a search on the web for error messages like this and they indicated that I might not have a postmaster alias setup. Well I don't. I have a "postmaster" mail account setup in cyrus so that spam bounces didn't fill up my personal mailbox. I get enough spam as it is. Which is why stuff like "to=postmaster, ... mailer=cyrus, ... stat=Service unavailable" worries me. If someone can help me identify what the fsck is wrong (if anything) and make those worrisome message go away I'd be most grateful (ie gifts would be dolled out). Regards -- Oliver Jones <oliver(a)deeper.co.nz> Deeper Design Limited

2 4

Software Patents (What's going on in EEC)
by Lindsay Druett 02 Dec '03

02 Dec '03

http://cord.de/tools/squid/calamaris/ http://swpat.ffii.org/index.en.html _____ Lindsay Druett CCNP CCDP NZTC (Elect) Network Engineer Network Administration and Development ITS Network Infrastructure The University of Waikato Private Bag 3105 Hamilton, New Zealand Telephone 64-7-838 4999 Mobile 027-276 0700 lindsayd(a)waikato.ac.nz http://www.waikato.ac.nz <http://www.waikato.ac.nz/> AS/NZS 3000:2000 : The official guide to playing Aussie Rules. www.230.volts.ac.nz <http://www.230.volts.ac.nz/>

1 0

DSA-403-1
by Kim Shepherd 01 Dec '03

01 Dec '03

This e-mail of Greig's was auto-discarded... Luckily I get a copy of all discarded messages, so here it is: (another reminder -- remember the address you subscribed with, or subscribe them all!) ----begin-forward---- For those using custom kernels...update! :) -----Original Message----- From: debian-security-announce(a)lists.debian.org [mailto:debian-security-announce@lists.debian.org] Sent: Tuesday, 2 December 2003 9:17 a.m. To: full-disclosure(a)lists.netsys.com Subject: [Full-Disclosure] [SECURITY] [DSA-403-1] userland can access Linux kernel memory -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-403-1 security(a)debian.org http://www.debian.org/security/ Wichert Akkerman December 1, 2003 - ------------------------------------------------------------------------ Package : kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 Vulnerability : userland can access full kernel memory Problem type : local Debian-specific: no CVE Id(s) : CAN-2003-0961 Recently multiple servers of the Debian project were compromised using a Debian developers account and an unknown root exploit. Forensics revealed a burneye encrypted exploit. Robert van der Meulen managed to decrypt the binary which revealed a kernel exploit. Study of the exploit by the RedHat and SuSE kernel and security teams quickly revealed that the exploit used an integer overflow in the brk system call. Using this bug it is possible for a userland program to trick the kernel into giving access to the full kernel address space. This problem was found in September by Andrew Morton, but unfortunately that was too late for the 2.4.22 kernel release. This bug has been fixed in kernel version 2.4.23 for the 2.4 tree and 2.6.0-test6 kernel tree. For Debian it has been fixed in version 2.4.18-12 of the kernel source packages, version 2.4.18-14 of the i386 kernel images and version 2.4.18-11 of the alpha kernel images. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian 3.0 (stable) - ------------------- Source archives: http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-i386_2.4.18-12.tar.gz Size/MD5 checksum: 69746 a4b642e03732748d6820524746ba2265 http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/kernel-s ource-2.4.18_2.4.18.orig.tar.gz Size/MD5 checksum: 29818323 24b4c45a04a23eb4ce465eb326a6ddf2 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-image-2.4.18-1-alpha_2.4.18-11.dsc Size/MD5 checksum: 874 6fe1a9a759850570f1609b77502c13bc http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-image-2.4.18-1-alpha_2.4.18-11.tar.gz Size/MD5 checksum: 24210 11373e2cf7e659f5a69c33f3f143fcaf http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/kernel-s ource-2.4.18_2.4.18-14.dsc Size/MD5 checksum: 798 14840782d3ae928fd453a7dba225bb7f http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-i386_2.4.18-12.dsc Size/MD5 checksum: 1325 a77acb0743f3d3a16c00fa1cd4520e89 http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/kernel-s ource-2.4.18_2.4.18-14.diff.gz Size/MD5 checksum: 66878 916d16dd46c59dd4314c45e48f33f043 Architecture independent packages: http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/kernel-d oc-2.4.18_2.4.18-14_all.deb Size/MD5 checksum: 1710438 5e6cb496150391a93558652c97fb214b http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/kernel-s ource-2.4.18_2.4.18-14_all.deb Size/MD5 checksum: 23903282 9d5cb5159bf76451dd32e75467ca6240 alpha architecture (DEC Alpha) http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-headers-2.4.18-1-smp_2.4.18-11_alpha.deb Size/MD5 checksum: 3514858 ec88046377537587469e5527f3633c65 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-headers-2.4.18-1_2.4.18-11_alpha.deb Size/MD5 checksum: 3362836 f91eb5ef18c3413ae200c5b1679264cc http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-headers-2.4.18-1-generic_2.4.18-11_alpha.deb Size/MD5 checksum: 3512244 a46de1359655b3a05c99cd8211edd41f http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-image-2.4.18-1-smp_2.4.18-11_alpha.deb Size/MD5 checksum: 12799424 966ecceeb16c5bf87cc31b9178d6add9 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-alpha/k ernel-image-2.4.18-1-generic_2.4.18-11_alpha.deb Size/MD5 checksum: 12425696 27b4defd9326ed5bac3a765977437354 i386 architecture (Intel ia32) http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-k7_2.4.18-12_i386.deb Size/MD5 checksum: 8863312 17a9c0323f06ed3eda1d17bdaf443d50 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-pcmcia-modules-2.4.18-1-k7_2.4.18-12_i386.deb Size/MD5 checksum: 230194 9e347c03ffaf24762ec8ad86f3c3c482 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-386_2.4.18-12_i386.deb Size/MD5 checksum: 8797832 00ab7c9bf64614112684e60595e1fe30 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-12_i386.deb Size/MD5 checksum: 230960 8ba2a811fb753a4b5083254c5ab402c2 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-pcmcia-modules-2.4.18-1-686_2.4.18-12_i386.deb Size/MD5 checksum: 227302 63e4524d17cb0dcf34774637293d2700 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1-586tsc_2.4.18-12_i386.deb Size/MD5 checksum: 3525452 7f0208aa3bc2e9974590839d141c4ca3 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1-686-smp_2.4.18-12_i386.deb Size/MD5 checksum: 3527346 6b321ce7efdc5d1f641ca4e14db1807e http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-pcmcia-modules-2.4.18-1-386_2.4.18-12_i386.deb Size/MD5 checksum: 228266 e05c768db8f79e76db1dbf39200075cc http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-12_i386.deb Size/MD5 checksum: 227834 3799038b55f03ea7fcacef73e50a7b02 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-586tsc_2.4.18-12_i386.deb Size/MD5 checksum: 8704448 f8531f0d6173228a2f952e4ca80ee618 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1-386_2.4.18-12_i386.deb Size/MD5 checksum: 3524656 c40e3230e071e5917f3c82ef8d8a3b79 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-k6_2.4.18-12_i386.deb Size/MD5 checksum: 8661138 121c4860a88e6e0ef84941b044e655ee http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-pcmcia-modules-2.4.18-1-k6_2.4.18-12_i386.deb Size/MD5 checksum: 226934 f29016331da939466d99fde7e6dbf0c4 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1_2.4.18-12_i386.deb Size/MD5 checksum: 3431968 37d14ba3820e331c7701c6dbc65440c7 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1-686_2.4.18-12_i386.deb Size/MD5 checksum: 3525938 0b4f3c22d96777bd95673e8c6ceb45a9 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1-k7_2.4.18-12_i386.deb Size/MD5 checksum: 3525194 89b06e76e46487a2708317a7d2643519 http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-686-smp_2.4.18-12_i386.deb Size/MD5 checksum: 8960026 e01cd0b938c75a247cc111855632934c http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-headers-2.4.18-1-k6_2.4.18-12_i386.deb Size/MD5 checksum: 3524794 43c7a34c6428e7d79fb660b4a434aaae http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i386/ke rnel-image-2.4.18-1-686_2.4.18-12_i386.deb Size/MD5 checksum: 8703034 a6d0829412575a9f7e6c227c5275a47b - -- - ---------------------------------------------------------------------------- Debian Security team <team(a)security.debian.org> http://www.debian.org/security/ Mailing-List: debian-security-announce(a)lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQE/y6HGPLiSUC+jvC0RAnd9AKCKvn969KiqvmErdGNv1iJSgzTVxwCbBkWB IZdDr8fKKloX6PSe+tPOW68= =nGzM -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html -- Kim Shepherd Systems Operator/Administrator ITS Systems & Development The University of Waikato, NZ DDI: +64-7-838-4681 Mob: +64-27-240-8682 Mail: kims(a)waikato.ac.nz

1 0