sm-security AT lists.ibiblio.org
Subject: Security bugs are reported here via bugzilla
List archive
[SM-Security] [Bug 2845] New: syslog-ng version - security problem
- From: bugzilla-daemon AT metalab.unc.edu
- To: sm-security AT lists.ibiblio.org
- Subject: [SM-Security] [Bug 2845] New: syslog-ng version - security problem
- Date: Tue, 18 Mar 2003 06:22:32 -0500
http://bugs.sourcemage.org/show_bug.cgi?id=2845
Summary: syslog-ng version - security problem
Product: Security
Version: unspecified
Platform: Other
OS/Version: other
Status: NEW
Severity: major
Priority: P2
Component: Security Issue
AssignedTo: sm-security AT lists.ibiblio.org
ReportedBy: vydra AT fria.fri.utc.sk
http://www.balabit.com/products/zorp/zsa/ZSA-2002-014-en.txt
Sumary :
- buffer overflow - remote expoilt
Please - for "solution" - look at bug #2574 -
http://bugs.sourcemage.org/show_bug.cgi?id=2574
Thanks
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Tue Mar 18 06:43:16 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id C400D2001E
for <sm-security AT lists.ibiblio.org>;
Tue, 18 Mar 2003 06:43:15 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2IBitP14187;
Tue, 18 Mar 2003 06:44:55 -0500
Date: Tue, 18 Mar 2003 06:44:55 -0500
Message-Id: <200303181144.h2IBitP14187 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security]
[Bug 2846] New: current kernels have a security flaw allowing to
gain root
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Mar 2003 11:43:16 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2846
Summary: current kernels have a security flaw allowing to gain
root
Product: Security
Version: unspecified
Platform: All
URL: http://www.uwsg.iu.edu/hypermail/linux/kernel/0303.2/022
6.html
OS/Version: other
Status: NEW
Severity: major
Priority: P3
Component: Security Issue
AssignedTo: sm-security AT lists.ibiblio.org
ReportedBy: unet AT sourcemage.org
see above URL for description and Alan Cox's patch
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Wed Mar 19 08:32:39 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 958F72001C
for <sm-security AT lists.ibiblio.org>;
Wed, 19 Mar 2003 08:32:39 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2JDYKC25440;
Wed, 19 Mar 2003 08:34:20 -0500
Date: Wed, 19 Mar 2003 08:34:20 -0500
Message-Id: <200303191334.h2JDYKC25440 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security]
[Bug 2850] New: Zlib Compression Library gzprintf() Buffer Overrun
Vulnerability
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Mar 2003 13:32:39 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2850
Summary: Zlib Compression Library gzprintf() Buffer Overrun
Vulnerability
Product: Security
Version: unspecified
Platform: All
URL: http://www.securityfocus.com/bid/6913/solution/
OS/Version: other
Status: NEW
Severity: normal
Priority: P1
Component: Security Issue
AssignedTo: sm-security AT lists.ibiblio.org
ReportedBy: shivaken AT jcom.home.ne.jp
Zlib Compression Library gzprintf() Buffer Overrun Vulnerability is found.
see http://www.securityfocus.com/bid/6913/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0107
Patch is at
http://www.securityfocus.com/data/vulnerabilities/patches/zlib-1.1.4-3-vsnprintf.patch
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Fri Mar 21 02:25:36 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id A388E20017
for <sm-security AT lists.ibiblio.org>;
Fri, 21 Mar 2003 02:25:35 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2L7PZ325669;
Fri, 21 Mar 2003 02:25:35 -0500
Date: Fri, 21 Mar 2003 02:25:35 -0500
Message-Id: <200303210725.h2L7PZ325669 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security]
[Bug 2846] current kernels have a security flaw allowing to gain
root
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Mar 2003 07:25:36 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2846
------- Additional Comments From vydra AT fria.fri.utc.sk 2003-03-21 02:25
-------
There is another solution if u use 2.4.20 kernel : patch the kernel with
grsecurity-1.9.9e-2.4.20.patch. It has A. Cox patch included and also when u
enable radomizen PIDs and stack/nmap feature - it's almost impossible for this
king of exploit to work (even if u dond have A. Cox patch)
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Sun Mar 23 10:23:22 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 275E820021
for <sm-security AT lists.ibiblio.org>;
Sun, 23 Mar 2003 10:23:22 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2NFNMs23412;
Sun, 23 Mar 2003 10:23:22 -0500
Date: Sun, 23 Mar 2003 10:23:22 -0500
Message-Id: <200303231523.h2NFNMs23412 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2845] syslog-ng version - security problem
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Mar 2003 15:23:22 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2845
vydra AT fria.fri.utc.sk changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
------- Additional Comments From vydra AT fria.fri.utc.sk 2003-03-23 10:23
-------
changements in perforce => solved
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Tue Mar 25 13:09:13 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id A834820005
for <sm-security AT lists.ibiblio.org>;
Tue, 25 Mar 2003 13:09:13 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2PI9DO07412;
Tue, 25 Mar 2003 13:09:13 -0500
Date: Tue, 25 Mar 2003 13:09:13 -0500
Message-Id: <200303251809.h2PI9DO07412 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] New: [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Mar 2003 18:09:14 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
Summary: [SM-Discuss] openssl vulnerabilities
Product: Security
Version: unspecified
Platform: Other
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: Security Issue
AssignedTo: sm-security AT lists.ibiblio.org
ReportedBy: mlubrano AT sourcemage.org
[SM-Discuss] openssl vulnerabilities
De : Ladislav Hagara <hgr AT vabo.cz>
À : SM-Discuss AT lists.ibiblio.org
Howdy,
according to http://www.openssl.org there are two vulnerabilities in our
openssl.
I modified openssl spell in devel grimoire, added two patches and
applied them from BUILD file.
I do not update UPDATED field, vulnerabilities look like only
"theoretical" vulnerabilities.
>From http://www.openssl.org/news/secadv_20030319.txt:
"Their attack requires the attacker to open MILIONS of ssl/tls
connections to the server under attack ...".
If you want to aply these patches and use devel grimoire just "cast -c
openssl".
If "Security Team" think it is real vulnerability please update UPDATE
field.
- lace -
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Tue Mar 25 13:11:23 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 85BB420005
for <sm-security AT lists.ibiblio.org>;
Tue, 25 Mar 2003 13:11:23 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2PIBN107855;
Tue, 25 Mar 2003 13:11:23 -0500
Date: Tue, 25 Mar 2003 13:11:23 -0500
Message-Id: <200303251811.h2PIBN107855 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Mar 2003 18:11:23 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
mlubrano AT sourcemage.org changed:
What |Removed |Added
----------------------------------------------------------------------------
OS/Version|other |All
Platform|Other |All
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Tue Mar 25 13:17:04 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 01FC62006B
for <sm-security AT lists.ibiblio.org>;
Tue, 25 Mar 2003 13:17:04 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2PIH3M09237;
Tue, 25 Mar 2003 13:17:03 -0500
Date: Tue, 25 Mar 2003 13:17:03 -0500
Message-Id: <200303251817.h2PIH3M09237 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Mar 2003 18:17:04 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
hgr AT vabo.cz changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |hgr AT vabo.cz
------- Additional Comments From hgr AT vabo.cz 2003-03-25 13:17 -------
Is sm-security AT lists.ibiblio.org "open" list ?
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Tue Mar 25 14:27:18 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 3F0F42001C
for <sm-security AT lists.ibiblio.org>;
Tue, 25 Mar 2003 14:27:18 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2PJRFH25375;
Tue, 25 Mar 2003 14:27:16 -0500
Date: Tue, 25 Mar 2003 14:27:16 -0500
Message-Id: <200303251927.h2PJRFH25375 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Mar 2003 19:27:18 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
------- Additional Comments From mlubrano AT sourcemage.org 2003-03-25 14:27
-------
Don't know this list... maybe for security team only ?
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Wed Mar 26 18:23:12 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id D4FD120012
for <sm-security AT lists.ibiblio.org>;
Wed, 26 Mar 2003 18:23:11 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2QLvYU12293;
Wed, 26 Mar 2003 16:57:34 -0500
Date: Wed, 26 Mar 2003 16:57:34 -0500
Message-Id: <200303262157.h2QLvYU12293 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Mar 2003 23:23:12 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
------- Additional Comments From seth AT tautology.org 2003-03-26 16:57 -------
the security list is open membership and has an archive.
archive:
https://lists.ibiblio.org/sympa/arc/sm-security/
sign-up:
http://lists.ibiblio.org/mailman/listinfo/sm-security
The idea is that anybody can tack security issues with full disclosure. also,
bugs get default-assigned to it so that everybody gets instant notice of bugs
that the public submit, if they are signed-up or check the archives regularly.
I'm trying to be as hands-off as possible. Security Team Membership is fairly
open -- not many people seem to be wanting to do it, perhaps I need to make a
big mailing list appeal.
I was away for a small vacation trip, but now I'm back. I really need
somebody
other than me to volunteer to help merge patches up to test and stable when
need
be. I've been doing it so far, but I'd like two or three to be able to do so,
preferably people with some history with smgl. I'd suggest lace to do it, as
you're very up-to-date on these things. You too, ML? If you don't want to
have
that responsibiltiy, then at least becoming security team member would be
good?
I need to catch up on these patches now...
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Thu Mar 27 02:08:07 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 3D34320015
for <sm-security AT lists.ibiblio.org>;
Thu, 27 Mar 2003 02:08:07 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2R787124086;
Thu, 27 Mar 2003 02:08:07 -0500
Date: Thu, 27 Mar 2003 02:08:07 -0500
Message-Id: <200303270708.h2R787124086 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Mar 2003 07:08:07 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
------- Additional Comments From mlubrano AT sourcemage.org 2003-03-27 02:08
-------
Hi Seth,
I may help you with the test grimoire (I'm running test).
I'll have a look at it today if I have some time.
bye,
Mat.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Thu Mar 27 12:18:53 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 999662005A
for <sm-security AT lists.ibiblio.org>;
Thu, 27 Mar 2003 12:18:36 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2RHIV517883;
Thu, 27 Mar 2003 12:18:31 -0500
Date: Thu, 27 Mar 2003 12:18:31 -0500
Message-Id: <200303271718.h2RHIV517883 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2916] [SM-Discuss] openssl vulnerabilities
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Mar 2003 17:18:53 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2916
------- Additional Comments From hgr AT vabo.cz 2003-03-27 12:18 -------
I think sm-security list should be described in
http://www.sourcemage.org/resources/lists/
Of course if I have time I like to help you with security.
Security team member is O.K.
BTW, on tuesday (?) I wrote a security alerts to http://news.sourcemage.org/
and I got message that my news should be authorized. Who can authorize
security
news?
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Sat Mar 29 18:15:42 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 65BBF2001C
for <sm-security AT lists.ibiblio.org>;
Sat, 29 Mar 2003 18:15:42 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2TNFgr26216;
Sat, 29 Mar 2003 18:15:42 -0500
Date: Sat, 29 Mar 2003 18:15:42 -0500
Message-Id: <200303292315.h2TNFgr26216 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2965] New: remote root sendmail exploit
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Mar 2003 23:15:43 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2965
Summary: remote root sendmail exploit
Product: Security
Version: unspecified
Platform: Other
URL: http://www.cert.org/advisories/CA-2003-12.html
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: Security Issue
AssignedTo: sm-security AT lists.ibiblio.org
ReportedBy: seth AT tautology.org
aleady fixed in devel/test/stable
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Sat Mar 29 18:15:51 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id EB71520036
for <sm-security AT lists.ibiblio.org>;
Sat, 29 Mar 2003 18:15:50 -0500 (EST)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h2TNFoh26243;
Sat, 29 Mar 2003 18:15:50 -0500
Date: Sat, 29 Mar 2003 18:15:50 -0500
Message-Id: <200303292315.h2TNFoh26243 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 2965] remote root sendmail exploit
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Mar 2003 23:15:51 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=2965
seth AT tautology.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From vvydra AT sourcemage.sk Thu Apr 3 04:15:46 2003
Return-Path: <vvydra AT sourcemage.sk>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from mail.fulltext.sk (otek.sourcemage.sk [158.193.128.10])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 56D6A2003F
for <SM-Security AT lists.ibiblio.org>;
Thu, 3 Apr 2003 04:15:45 -0500 (EST)
Received: from sourcemage.sk (localhost [127.0.0.1])
by mail.fulltext.sk (Postfix) with SMTP id 623E43C10
for <SM-Security AT lists.ibiblio.org>;
Thu, 3 Apr 2003 10:18:23 +0200 (CEST)
Received: from 158.193.138.21
(SquirrelMail authenticated user vvydra)
by mail.fulltext.sk with HTTP;
Thu, 3 Apr 2003 10:18:23 +0200 (CEST)
Message-ID: <48839.158.193.138.21.1049357903.squirrel AT mail.fulltext.sk>
Date: Thu, 3 Apr 2003 10:18:23 +0200 (CEST)
From: <vvydra AT sourcemage.sk>
To: <SM-Security AT lists.ibiblio.org>
X-Priority: 3
Importance: Normal
X-Mailer: SquirrelMail (version 1.2.10)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_20030403101823_70673"
Subject: [SM-Security] vserver spell
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Apr 2003 09:15:46 -0000
------=_20030403101823_70673
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: 8bit
Hi,
for everybody intrested in "cool chrooting way" I recommend this spell.
(U must have patched your kernel with ctx vserver patch)
I also made patch to build the vserver chroot from "my own chroot" not the
"live system" - but I'm too lasy to "make it user frendly" => so if
somebody is intrested I'll post also patch - but be aware "not user
frendly" :)
------=_20030403101823_70673
Content-Type: application/octet-stream; name="vserver.tar.bz2"
Content-Disposition: attachment; filename="vserver.tar.bz2"
Content-Transfer-Encoding: base64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------=_20030403101823_70673--
- [SM-Security] [Bug 2845] New: syslog-ng version - security problem, bugzilla-daemon, 03/18/2003
Archive powered by MHonArc 2.6.24.