Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4703

Re: [SECURITY] [DSA 3547-1] imagemagick security update

Show all headers | View raw

On Tue, Apr 12, 2016, at 16:37, Michael Stone wrote:
> On Tue, Apr 12, 2016 at 04:19:20PM -0300, Henrique de Moraes Holschuh
> wrote:
> >We don't disclose which mirrors are members of the security.debian.org
> >pool anywhere (that I could find), so we are currently hiding everything
> >behind security.debian.org. This wasn't a problem when a DNS lookup for
> >security.debian.org would return a RR-SET with several A and AAAA
> >records, but geo-ip changed that to return a single A record.  When
> >geo-ip points security.debian.org to a broken or stale mirror for
> >someone, it is a pain to work around it for the duration.
> >
> >And if you need to access security.debian.org over IPv6, "too bad".
> 
> Huh?
> 
> Huh?
> 
> > host security.debian.org
> security.debian.org has address 149.20.20.19
> security.debian.org has address 128.61.240.73
> security.debian.org has address 128.101.240.215
> security.debian.org has address 128.31.0.63
> security.debian.org has IPv6 address 2607:ea00:101:3c0b::1deb:215
> security.debian.org has IPv6 address 2001:4f8:8:36::1deb:19
> security.debian.org has IPv6 address 2610:148:1f10:3::73

Not here. All I get is a single A record.

But that explains a lot more about how full of surprises is that black
box than I ever expected. I wonder why I don't get at least one AAAA as
well, though.  The mirror it returns has it.

Still, I am happy to know our geoip supports IPv6 and will even give you
multiple records if you are somewhere it considers more
connectivity-blessed. Thanks for the good news :)

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique de Moraes Holschuh <hmh@debian.org>

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-12 13:40 +0200
  Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-12 14:00 +0200
    Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-13 07:40 +0200
      Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-13 07:50 +0200
        Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-13 08:20 +0200
  Re: [SECURITY] [DSA 3547-1] imagemagick security update Luciano Bello <luciano@debian.org> - 2016-04-12 14:20 +0200
    Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-12 17:10 +0200
      Re: [SECURITY] [DSA 3547-1] imagemagick security update Drake Wilson <drake@dasyatidae.net> - 2016-04-12 17:40 +0200
      Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-12 17:40 +0200
        Re: [SECURITY] [DSA 3547-1] imagemagick security update "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-04-12 19:10 +0200
          Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-12 19:40 +0200
            Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-12 21:20 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Michael Stone <mstone@debian.org> - 2016-04-12 21:40 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 01:30 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Julien Cristau <jcristau@debian.org> - 2016-04-13 11:00 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 14:50 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-12 21:50 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 02:00 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Michael Stone <mstone@debian.org> - 2016-04-13 04:20 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-13 07:40 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 15:00 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-14 11:10 +0200
          Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-12 19:40 +0200
          Re: [SECURITY] [DSA 3547-1] imagemagick security update Bjoern Nyjorden <brn@iinet.net.au> - 2016-04-13 08:10 +0200
            Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-13 09:00 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Alexander Neilson <alexander@neilson.net.nz> - 2016-04-13 12:30 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-14 11:20 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Henrique de Moraes Holschuh <hmh@debian.org> - 2016-04-13 14:50 +0200
              Re: [SECURITY] [DSA 3547-1] imagemagick security update Scott Blaydes <scott@nettek.io> - 2016-04-13 15:10 +0200
                Re: [SECURITY] [DSA 3547-1] imagemagick security update Peter Palfrader <weasel@debian.org> - 2016-04-14 11:20 +0200

csiph-web