Re: debian testing, confusing message during upgrade openjdk-17-jre-headless

2025-01-29 Thread songbird
Cindy Sue Causey wrote: ... > In my case these days, I have two things I would do to take a poke at > this in hopes something obvious presents itself: > > $ apt-cache policy openjdk-9 > > I might even try the much busier "apt-cache policy openjdk-*" to see if > anything else is lingering. My setup

Re: Zoom

2025-01-29 Thread tomas
On Wed, Jan 29, 2025 at 12:28:55PM -0800, Donald MacDougall wrote: > I've been using Zoom from the beginning of the Corona virus epidemic [...] > and haven't had any trouble that I think could be related to Zoom [...] Thanks for your report. Prompted by this thread I went to the Wikipedia. After

Re: how to prevent evolution from archiving mails?

2025-01-29 Thread hw
On Sun, 2025-01-26 at 18:30 +0300, Andrii Kalashnykov wrote: > On Sun, 2025-01-26 at 14:08 +0100, hw wrote: > > --- 8< -- cut -- 8< --- > > > Yes, I did that and before that, the folder used to be called > > 'archive'. However, I have other users on

Re: Hugh Problem with Firefox and Debian 12

2025-01-29 Thread David Christensen
On 1/28/25 20:12, Maureen Thomas wrote: On 1/28/25 9:58 PM, David Christensen wrote: On 1/26/25 17:11, Maureen Thomas wrote: I am using an updated Debian 12 with Thurderbird and Firefox. Since the updated firefox I can not use it as it freezes my computer to the point that I have to hold the of

Re: remark related about package removal on bookworm providing a systemd service

2025-01-29 Thread Max Nikulin
On 29/01/2025 19:16, Greg Wooledge wrote: dbus-org.freedesktop.timesync1.service symlink is a service name alias for systemd-timesyncd.service. I have no idea *why* this alias was desired, but that's apparently what it is. systemd.unit(5) explains that it is to start the service on demand in

Re: debian testing, confusing message during upgrade openjdk-17-jre-headless

2025-01-29 Thread Max Nikulin
On 29/01/2025 17:52, songbird wrote: update-binfmts: warning: current package is openjdk-21, but binary format already installed by openjdk-9 Likely it is related to running of .jar files without explicit java command. In a similar way wine may install a handler for .exe files in addition to

Re: Zoom

2025-01-29 Thread Donald MacDougall
I've been using Zoom from the beginning of the Corona virus epidemic on a couple of Debian computers as well as a couple of Android phones and have found them to work very well and haven't had any trouble that I think could be related to Zoom. I know there have been an incident or two that were

Re: Zoom

2025-01-29 Thread Jeffrey Walton
On Wed, Jan 29, 2025 at 11:07 AM Gregory Forster wrote: > > Hi, I've been using Debian for about 3 months, still a newbie. I'm > trying to get totally off of Windows.One program I'm not sure about is > Zoom.If you go to their web site, they detect you're using Linux and ask > which distro you're u

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Steve McIntyre
ra...@siliconet.pl wrote: > >On 29.01.2025 4:16 PM, Roberto C. Sánchez wrote: >> Yes, it still means that. The minizip binary package you are seeing >> comes from a different source package, also called minizip: >> >> https://packages.debian.org/source/bookworm/minizip > >Aha! Got it :-) > >And th

Re: Zoom

2025-01-29 Thread Klaus Singvogel
Steve Witt wrote: [...] > I have had no problems with it and it did not > affect those computers in any way so I believe that it is totally safe > to install it and use it. [...] No, isn't totally safe on Linux, for instance see: https://cybersecuritynews.com/zoom-app-vulnerability/ Note

Re: Zoom

2025-01-29 Thread Bret Busby
On 29/1/25 21:39, Gregory Forster wrote: Hi, I've been using Debian for about 3 months, still a newbie. I'm trying to get totally off of Windows.One program I'm not sure about is Zoom.If you go to their web site, they detect you're using Linux and ask which distro you're using.  I'm a little ap

Re: Zoom

2025-01-29 Thread Jerome BENOIT
On 29/01/2025 16:33, Steve Witt wrote: On 01/29, Gregory Forster wrote: Hi, I've been using Debian for about 3 months, still a newbie. I'm trying to get totally off of Windows.One program I'm not sure about is Zoom.If you go to their web site, they detect you're using Linux and ask which dist

Re: Non packaged hplip on trixie (testing) ?

2025-01-29 Thread Brad Rogers
On Wed, 29 Jan 2025 08:50:41 +0100 Erwan David wrote: Hello Erwan, >I see in https://tracker.debian.org/pkg/hplip that hplip has been >removed from testing... That's bad news. It's been gone for ages. There *is* a solution mentioned on the bug tracker, but it assumes knowledge of how to go ab

Re: debian testing, confusing message during upgrade openjdk-17-jre-headless

2025-01-29 Thread Cindy Sue Causey
On Wed, 2025-01-29 at 12:10 +, Brad Rogers wrote: > On Wed, 29 Jan 2025 05:52:34 -0500 > songbird wrote: > > Hello songbird, > > > warning: current package is openjdk-21, but binary format already > > installed by openjdk-9 > > I've seen similar messages.  Certainly about openjdk, maybe oth

Re: Zoom

2025-01-29 Thread Steve Witt
On 01/29, Gregory Forster wrote: > Hi, I've been using Debian for about 3 months, still a newbie. I'm trying to > get totally off of Windows.One program I'm not sure about is Zoom.If you go > to their web site, they detect you're using Linux and ask which distro > you're using.  I'm a little appreh

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 4:16 PM, Roberto C. Sánchez wrote: Yes, it still means that. The minizip binary package you are seeing comes from a different source package, also called minizip: https://packages.debian.org/source/bookworm/minizip Aha! Got it :-) And there are no binary components in Debian b

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Roberto C . Sánchez
On Wed, Jan 29, 2025 at 04:15:16PM +0100, Rafał Lichwała wrote: > >But still don;t understand "Debian itself does *not* build the affected >component" as I can find "minizip" (and maybe other) package based on that >vulnerable library - see my previous post above as Re- to Hanno. > Yo

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Roberto C . Sánchez
On Wed, Jan 29, 2025 at 04:04:26PM +0100, Rafał Lichwała wrote: > > On 29.01.2025 3:35 PM, Hanno 'Rince' Wagner wrote: > > > The notes say: > > > [bookworm] - zlib (contrib/minizip not built and src:zlib not > > > producing binary packages) > > > In other words, there's no point in fixing it bec

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 3:30 PM, Roberto C. Sánchez wrote: On Wed, Jan 29, 2025 at 03:22:02PM +0100, Rafał Lichwała wrote: On 29.01.2025 2:43 PM, Dan Ritter wrote: CVSS are often bogus. Hmmm... I'm not sure what you mean. All security announcements in DSAs are referring to CVSS, so... what's

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 3:35 PM, Hanno 'Rince' Wagner wrote: The notes say: [bookworm] - zlib (contrib/minizip not built and src:zlib not producing binary packages) In other words, there's no point in fixing it because Debian doesn't build the vulnerable binary component. Very low priority. so, this

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Roberto C . Sánchez
On Wed, Jan 29, 2025 at 03:22:02PM +0100, Rafał Lichwała wrote: >On 29.01.2025 2:43 PM, Dan Ritter wrote: > > CVSS are often bogus. > > Hmmm... I'm not sure what you mean. All security announcements in DSAs are > referring to CVSS, so... what's the source of such opinion? > > > Most rec

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Roberto C . Sánchez
On Wed, Jan 29, 2025 at 08:43:12AM -0500, Dan Ritter wrote: > > Most recently: https://daniel.haxx.se/blog/2025/01/23/cvss-is-dead-to-us/ I was going to post a link to this very article when I saw that you already had :-) Regards, -Roberto -- Roberto C. Sánchez

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 2:43 PM, Dan Ritter wrote: CVSS are often bogus. Hmmm... I'm not sure what you mean. All security announcements in DSAs are referring to CVSS, so... what's the source of such opinion? Most recently:https://daniel.haxx.se/blog/2025/01/23/cvss-is-dead-to-us/ Yeah, another blog and

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 2:39 PM, Hanno 'Rince' Wagner wrote: How does your "automatically scanned for possible vulnerabilites" actually work? I don't know, but it does not matter in that context. It does matter because you have to interpret the output of your scanner and understand it. Well, not really

Re: Zoom

2025-01-29 Thread Dan Ritter
Gregory Forster wrote: > Hi, I've been using Debian for about 3 months, still a newbie. I'm trying to > get totally off of Windows.One program I'm not sure about is Zoom.If you go > to their web site, they detect you're using Linux and ask which distro > you're using.  I'm a little apprehensive ab

Re: Zoom

2025-01-29 Thread Eric S Fraga
I've had to use Zoom (and others) since the pandemic, on Debian based systems. For zoom, I usually connect through the browser (there's usually a not emphasised link somewhere on the zoom web page) and it works quite well typically. I have used the application but found it worked less well. --

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Dan Ritter
Rafał Lichwała wrote: > > On 29.01.2025 2:12 PM, Dan Ritter wrote: > > The notes say: > > > > [bookworm] - zlib (contrib/minizip not built and src:zlib not > > producing binary packages) > > > > In other words, there's no point in fixing it because Debian > > doesn't build the vulnerable bina

Re: debian testing, confusing message during upgrade openjdk-17-jre-headless

2025-01-29 Thread Brad Rogers
On Wed, 29 Jan 2025 05:52:34 -0500 songbird wrote: Hello songbird, >warning: current package is openjdk-21, but binary format already >installed by openjdk-9 I've seen similar messages. Certainly about openjdk, maybe others, I can't recall. As everything seems to be working as expected, I don

Zoom

2025-01-29 Thread Gregory Forster
Hi, I've been using Debian for about 3 months, still a newbie. I'm trying to get totally off of Windows.One program I'm not sure about is Zoom.If you go to their web site, they detect you're using Linux and ask which distro you're using.  I'm a little apprehensive about downloading from a vendo

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 1:57 PM, David wrote: How does your "automatically scanned for possible vulnerabilites" actually work? I don't know, but it does not matter in that context. The fact is, that the result of this "magic scan" properly found and points out the real critical security vulnerabilitie

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
On 29.01.2025 2:12 PM, Dan Ritter wrote: The notes say: [bookworm] - zlib (contrib/minizip not built and src:zlib not producing binary packages) In other words, there's no point in fixing it because Debian doesn't build the vulnerable binary component. Very low priority. Could you please

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread Dan Ritter
Rafał Lichwała wrote: > Hi, > > I've prepared some docker image based on Debian 12 (bookworm, fully updated) > and after upload it to local registry it has been automatically scanned for > possible vulnerabilities. > Then I was really surprised when discovered that according to this scan > there

Re: Debian 12 security issue - please help to understand

2025-01-29 Thread David
On Wed, 29 Jan 2025 at 12:40, Rafał Lichwała wrote: > I've prepared some docker image based on Debian 12 (bookworm, fully > updated) and after upload it to local registry it has been automatically > scanned for possible vulnerabilities. > Then I was really surprised when discovered that according

Debian 12 security issue - please help to understand

2025-01-29 Thread Rafał Lichwała
Hi, I've prepared some docker image based on Debian 12 (bookworm, fully updated) and after upload it to local registry it has been automatically scanned for possible vulnerabilities. Then I was really surprised when discovered that according to this scan there are 139 security vulnerabilities

Re: Re: remark related about package removal on bookworm providing a systemd service

2025-01-29 Thread Greg Wooledge
On Wed, Jan 29, 2025 at 02:18:23 -0500, Jeffrey Walton wrote: > Some old programs use non-existent symlinks to store or persist state > information rather than create a normal file. But I don't believe > systemd uses the technique. Not on purpose, but systemd does use symbolic links to store state

debian testing, confusing message during upgrade openjdk-17-jre-headless

2025-01-29 Thread songbird
during this morning's update run: Setting up openjdk-17-jre-headless:amd64 (17.0.14+7-1) ... update-binfmts: warning: current package is openjdk-21, but binary format already installed by openjdk-9 ? what does this mean to you? songbird