Re: about bash and Debian Lenny

[David Dejaeghere <david.dejaeghere@gmail.com>]

Also about not thrusting people, you are sending to this list with your company email address and tell everyone here you have an exploitable qmail setup running. Be carefull with the information you make public.

Regards,

David

2014-10-01 14:17 GMT+02:00 David Dejaeghere <david.dejaeghere@gmail.com>:

With Qmail exposed and being an attack vector I would advice to build your own updated bash package.

You wont get official security updates.

2014-10-01 14:06 GMT+02:00 Nikolay Hristov <geroy@stemo.bg>:

On 10/01/2014 02:58 PM, Konstantin Khomoutov wrote:

On Wed, 1 Oct 2014 14:45:55 +0300
Nikolay Hristov <geroy@stemo.bg> wrote:

I made lenny packages for my machines. I could share them if you
want?

[...]

Which part of "I don't want to use deb packages from different
sources because I cannot trust them" you didnt understand? ;-)

Still, when someone offers their help there really is no need
to play a smart ass as you did.  The only thing you might achieve doing
that is a) direct rebuttals (my e-mail) and b) mild propositions to
build patched packages yourself.

Yes you are right but what if the person offering me help is someone who wants to take advantage of me.
No offence but do you trust everyone who offers help to you?

Nikolay Hristov


--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: [🔎] 542BEE2B.3020007@stemo.bg" target="_blank">https://lists.debian.org/[🔎] 542BEE2B.3020007@stemo.bg