oss-security mailing list - 2014/01

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2014/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	² 11	³ 11	⁴ 2	⁵
⁶ 2	⁷ 17	⁸ 13	⁹ 15	¹⁰ 3	¹¹ 5	¹² 1
¹³ 2	¹⁴ 9	¹⁵ 3	¹⁶ 6	¹⁷ 9	¹⁸ 9	¹⁹ 3
²⁰ 10	²¹ 6	²² 4	²³ 7	²⁴ 6	²⁵	²⁶
²⁷	²⁸ 8	²⁹ 19	³⁰ 6	³¹ 27

Messages by day:

January 2 (11 messages)

Re: CVE request: Fat Free CRM multiple vulnerabilities (Steve Kenworthy <steveyken@...il.com>)
Duplicated CVE assignment for bip (Moritz Muehlenhoff <jmm@...ian.org>)
kwallet crypto misuse (Florian Weimer <fweimer@...hat.com>)
Re: kwallet crypto misuse (cve-assign@...re.org)
CVE for freerdp int overflow? (Raphael Geissert <geissert@...ian.org>)
Re: Re: kwallet crypto misuse (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: Re: CVE to the ntp monlist DDoS issue? (Moritz Muehlenhoff <jmm@...ian.org>)
Re: kwallet crypto misuse (cve-assign@...re.org)
Re: Duplicated CVE assignment for bip ("Steven M. Christey" <coley@...re.org>)
radare2 endless loop ("Simon ." <bofh666ftw@...glemail.com>)
Re: Re: kwallet crypto misuse (Michael Samuel <mik@...net.net>)

January 3 (11 messages)

Re: Re: kwallet crypto misuse (Kurt Seifried <kseifried@...hat.com>)
Re: radare2 endless loop (Kurt Seifried <kseifried@...hat.com>)
Neo4J CSRF: Potential CVE candidate (Arun Babu Neelicattu <abn@...hat.com>)
Re: CVE for freerdp int overflow? (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
AMD Security contact (Kurt Seifried <kseifried@...hat.com>)
Re: kwallet crypto misuse (gremlin@...mlin.ru)
Re: CVE for freerdp int overflow? (cve-assign@...re.org)
Re: Neo4J CSRF: Potential CVE candidate (cve-assign@...re.org)
Re: kwallet crypto misuse (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: kwallet crypto misuse (Simon McVittie <smcv@...ian.org>)
Re: kwallet crypto misuse (Daniel Kahn Gillmor <dkg@...thhorseman.net>)

January 4 (2 messages)

Re: kwallet crypto misuse (cve-assign@...re.org)
Re: kwallet crypto misuse (gremlin@...mlin.ru)

January 6 (2 messages)

CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161 (Salvatore Bonaccorso <carnil@...ian.org>)
[notification] CVE-2013-6888: uscan: remote code execution (Raphael Geissert <geissert@...ian.org>)

January 7 (17 messages)

[HITB-Announce] HITB Magazine Issue 10 Out Now (Hafez Kamal <aphesz@...kinthebox.org>)
MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) (Solar Designer <solar@...nwall.com>)
CVE Request: graphviz: stack-based buffer overflow in yyerror() (Ratul Gupta <ratulg@...hat.com>)
CVE split and a missed file (P J P <ppandit@...hat.com>)
CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
Bug#732283: CVE Request: Proc::Daemon writes pidfile with mode 666 (cve-assign@...re.org)
Bug#732283: CVE Request: Proc::Daemon writes pidfile with mode 666 (cve-assign@...re.org)
Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference (Yves-Alexis Perez <corsac@...ian.org>)
Fwd: X.Org Security Advisory: CVE-2013-6462: Stack buffer overflow in parsing of BDF font files in libXfont (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE Request: cross-site scripting vulnerabilities in movable type 6.0.1, 5.2.9, and 5.161 (cve-assign@...re.org)
Re: MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) (cve-assign@...re.org)
Re: CVE Request: graphviz: stack-based buffer overflow in yyerror() (cve-assign@...re.org)
Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference (cve-assign@...re.org)
Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference (cve-assign@...re.org)
Re: MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) (Solar Designer <solar@...nwall.com>)

January 8 (13 messages)

paratrooper-pingdom-1.0.0 ruby gem exposes API login credentials ("Larry W. Cashdollar" <larry0@...com>)
Paratrooper-newrelic 1.0.1 Ruby Gem exposes API key ("Larry W. Cashdollar" <larry0@...com>)
Re: CVE split and a missed file (P J P <ppandit@...hat.com>)
https://updateframework.com/ down for a few days now (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request: graphviz: stack-based buffer overflow in yyerror() (Sebastian Krahmer <krahmer@...e.de>)
Re: Re: CVE Request: graphviz: stack-based buffer overflow in yyerror() (Russ Allbery <eagle@...ie.org>)
Re: CVE split and a missed file (cve-assign@...re.org)
Re: CVE split and a missed file (cve-assign@...re.org)
Re: MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) (Chris Sandulow <security@...godb.com>)
Re: Re: CVE Request: graphviz: stack-based buffer overflow in yyerror() ("Emden R. Gansner" <erg@...earch.att.com>)
Re: paratrooper-pingdom-1.0.0 ruby gem exposes API login credentials (cve-assign@...re.org)
Re: Paratrooper-newrelic 1.0.1 Ruby Gem exposes API key (cve-assign@...re.org)
Re: CVE Request: graphviz: stack-based buffer overflow in yyerror() (cve-assign@...re.org)

January 9 (15 messages)

CVE Request: drupal7-entity: multiple access bypass vulnerabilities (Ratul Gupta <ratulg@...hat.com>)
PlRPC Perl module: pre-auth remote code execution, weak crypto (Florian Weimer <fweimer@...hat.com>)
Re: CVE Request: drupal7-entity: multiple access bypass vulnerabilities (cve-assign@...re.org)
Re: CVE split and a missed file (P J P <ppandit@...hat.com>)
temporary file issue in flite (Murray McAllister <mmcallis@...hat.com>)
CVE request: tmux local denial of service (2009) (Florian Weimer <fweimer@...hat.com>)
Re: CVE request: tmux local denial of service (2009) (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
Re: PlRPC Perl module: pre-auth remote code execution, weak crypto (cve-assign@...re.org)
Re: CVE request: tmux local denial of service (2009) (cve-assign@...re.org)
RE: CVE split and a missed file ("Christey, Steven M." <coley@...re.org>)
Re: CVE request: tmux local denial of service (2009) (Florian Weimer <fweimer@...hat.com>)
Re: Re: CVE request: tmux local denial of service (2009) (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
CVE request: remote code execution via deserialization in XStream (David Jorm <djorm@...hat.com>)
Re: CVE split and a missed file (cve-assign@...re.org)
Re: CVE request: remote code execution via deserialization in XStream (cve-assign@...re.org)

January 10 (3 messages)

Re: CVE request: remote code execution via deserialization in XStream (David Jorm <djorm@...hat.com>)
CVE Request: python-jinja2: arbitrary code execution vulnerability (Ratul Gupta <ratulg@...hat.com>)
Re: CVE Request: python-jinja2: arbitrary code execution vulnerability (cve-assign@...re.org)

January 11 (5 messages)

CVE assignment for jinja2 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE assignment for jinja2 ("Vincent Danen" <vdanen@...hat.com>)
Re: CVE assignment for jinja2 ("Vincent Danen" <vdanen@...hat.com>)
Re: CVE assignment for jinja2 (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE assignment for jinja2 ("Vincent Danen" <vdanen@...hat.com>)

January 12 (1 message)

Linux kernel: missing CPU-state sanitation during task-switch causes DOS / privilege escalation (halfdog <me@...fdog.net>)

January 13 (2 messages)

Re: kwallet crypto misuse (George Staikos <staikos@....org>)
[OSSA 2014-001] Nova live snapshots use an insecure local directory (CVE-2013-7048) (Thierry Carrez <thierry@...nstack.org>)

January 14 (9 messages)

Re: Linux kernel: missing CPU-state sanitation during task-switch causes DOS / privilege escalation (cve-assign@...re.org)
CVE Request -- libvirt: denial of service with keepalive (Petr Matousek <pmatouse@...hat.com>)
CVE request: assorted kernel infoleak security fixes (Salva Peiró <speiro@....upv.es>)
linux-distros membership (rf@...eap.de)
Re: CVE Request -- libvirt: denial of service with keepalive (cve-assign@...re.org)
Re: CVE Request -- libvirt: denial of service with keepalive (Eric Blake <eblake@...hat.com>)
CVE Request: Apache Archiva Remote Command Execution 0day (Maksymilian A <max@...t.cx>)
Re: [Libvirt-Security] CVE Request -- libvirt: denial of service with keepalive ("Daniel P. Berrange" <berrange@...hat.com>)
Re: CVE Request: Apache Archiva Remote Command Execution 0day (security curmudgeon <jericho@...rition.org>)

January 15 (3 messages)

Re: CVE Request -- libvirt: denial of service with keepalive (cve-assign@...re.org)
Re: CVE Request: Apache Archiva Remote Command Execution 0day (Maksymilian A <max@...t.cx>)
Re: CVE request: assorted kernel infoleak security fixes (cve-assign@...re.org)

January 16 (6 messages)

Re: linux-distros membership (Yves-Alexis Perez <corsac@...ian.org>)
CVE Request: drupal: multiple vulnerabilities corrected in 6.30 and 7.26 (SA-CORE-2014-001) (Ratul Gupta <ratulg@...hat.com>)
Re: CVE Request: drupal: multiple vulnerabilities corrected in 6.30 and 7.26 (SA-CORE-2014-001) (cve-assign@...re.org)
Re: linux-distros membership (rf@...eap.de)
CVE Request - Poppler library: DoS fixed in 0.24.5 ("mancha" <mancha1@...h.com>)
Re: Re: linux-distros membership (Yves-Alexis Perez <corsac@...ian.org>)

January 17 (9 messages)

Re: CVE already assigned for 1026891? (Murray McAllister <mmcallis@...hat.com>)
CVE-2013-6488: Jenkins fails to sanitize input before adding it to the page (Murray McAllister <mmcallis@...hat.com>)
imapsync default version check with,http://imapsync.lamiral.info information leakage (CVE-2013-4279) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2013-6488: Jenkins fails to sanitize input before adding it to the page (Reed Loden <reed@...dloden.com>)
[OSSA 2014-002] Swift TempURL timing attack (CVE-2014-0006) (Thierry Carrez <thierry@...nstack.org>)
more info on "radiotap: bitmap-end-finding buffer overrun" (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request - Poppler library: DoS fixed in 0.24.5 (cve-assign@...re.org)
Fwd: [Python-modules-team] Bug#735263: python-rply: insecure use of /tmp (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
CVE-2014-0021: chrony traffic amplification in cmdmon protocol ("Vincent Danen" <vdanen@...hat.com>)

January 18 (9 messages)

Re: CVE-2014-0021: chrony traffic amplification in cmdmon protocol (cve-assign@...re.org)
Re: CVE-2014-0021: chrony traffic amplification in cmdmon protocol ("Vincent Danen" <vdanen@...hat.com>)
Re: CVE-2014-0021: chrony traffic amplification in cmdmon protocol (cve-assign@...re.org)
Re: Fwd: [Python-modules-team] Bug#735263: python-rply: insecure use of /tmp (cve-assign@...re.org)
CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2 (Matthew Daley <mattd@...fuzz.com>)
Re: CVE-2013-6488: Jenkins fails to sanitize input before adding it to the page (Kurt Seifried <kseifried@...hat.com>)
Re: CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2 (Henri Salo <henri@...v.fi>)
Re: CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2 (Matthew Daley <mattd@...fuzz.com>)
Re: CVE requests / advisory: cxxtools <= 2.2, Tntnet <= 2.2 (cve-assign@...re.org)

January 19 (3 messages)

Re: CVE-2014-0021: chrony traffic amplification in cmdmon protocol (Florian Weimer <fweimer@...hat.com>)
Re: more info on "radiotap: bitmap-end-finding buffer overrun" (Henri Salo <henri@...v.fi>)
Re: CVE-2013-6488: Jenkins fails to sanitize input before adding it to the page (Murray McAllister <mmcallis@...hat.com>)

January 20 (10 messages)

Moodle security notifications public (Michael de Raadt <michaeld@...dle.com>)
CVE request: Cantata vulnerability (Sergey Popov <pinkbyte@...too.org>)
CVE request for Drupal contributed modules (Forest Monsen <forest.monsen@...il.com>)
CVE request: spip: cross-site scripting vulnerability (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE request: Cantata vulnerability (cve-assign@...re.org)
Re: CVE request for Drupal contributed modules (Henri Salo <henri@...v.fi>)
Re: CVE request for Drupal contributed modules (cve-assign@...re.org)
Re: linux-distros membership (rf@...eap.de)
Re: CVE request: spip: cross-site scripting vulnerability (cve-assign@...re.org)
Re: CVE-2013-6488: Jenkins fails to sanitize input before adding it to the page (Kurt Seifried <kseifried@...hat.com>)

January 21 (6 messages)

Re: CVE-2013-6488: Jenkins fails to sanitize input before adding it to the page (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Drupal contributed modules (Forest Monsen <forest.monsen@...il.com>)
Fwd: [Python-modules-team] Bug#736247: python-xdg: get_runtime_dir(strict=False): insecure use of /tmp (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: Fwd: [Python-modules-team] Bug#736247: python-xdg: get_runtime_dir(strict=False): insecure use of /tmp (cve-assign@...re.org)
CVE request: Perl module MARC::File::XML (Galen Charlton <gmc@...library.com>)
Re: CVE request: Perl module MARC::File::XML (cve-assign@...re.org)

January 22 (4 messages)

Re: linux-distros membership (Solar Designer <solar@...nwall.com>)
Re: linux-distros membership (rf@...eap.de)
Getting tempfile/mktemp wrong (Helmut Grohne <helmut@...divi.de>)
Re: Getting tempfile/mktemp wrong (cve-assign@...re.org)

January 23 (7 messages)

Re: linux-distros membership (rf@...eap.de)
Xen Security Advisory 83 - Out-of-memory condition yielding memory corruption during IRQ setup (Xen.org security team <security@....org>)
Re: Xen Security Advisory 83 - Out-of-memory condition yielding memory corruption during IRQ setup (cve-assign@...re.org)
Xen Security Advisory 83 (CVE-2014-1642) - Out-of-memory condition yielding memory corruption during IRQ setup (Xen.org security team <security@....org>)
[OSSA 2014-003] Live migration can leak root disk into ephemeral storage (CVE-2013-7130) (Grant Murphy <gmurphy@...hat.com>)
Re: linux-distros membership (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2014-0022 insecure install of rpm packages via yum cron ("Vincent Danen" <vdanen@...hat.com>)

January 24 (6 messages)

Re: linux-distros membership (rf@...eap.de)
Re: linux-distros membership (rf@...eap.de)
Re: linux-distros membership (John Haxby <john.haxby@...cle.com>)
Xen Security Advisory 87 - PHYSDEVOP_{prepare,release}_msix exposed to unprivileged guests (Xen.org security team <security@....org>)
Re: Xen Security Advisory 87 - PHYSDEVOP_{prepare,release}_msix exposed to unprivileged guests (cve-assign@...re.org)
Xen Security Advisory 87 (CVE-2014-1666) - PHYSDEVOP_{prepare,release}_msix exposed to unprivileged guests (Xen.org security team <security@....org>)

January 28 (8 messages)

Remote code execution in horde < 5.1.1 (Pedro Ribeiro <pedrib@...il.com>)
CVE request Linux kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper (P J P <ppandit@...hat.com>)
Re: CVE request Linux kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper (cve-assign@...re.org)
Re: Remote code execution in horde < 5.1.1 (cve-assign@...re.org)
Re: CVE request Linux kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request Linux kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper (Kurt Seifried <kseifried@...hat.com>)
Socat security advisory 5 - PROXY-CONNECT address overflow (Gerhard Rieger <gerhard@...t-unreach.org>)
CVE request: temporary file issue in Passenger rubygem ("Vincent Danen" <vdanen@...hat.com>)

January 29 (19 messages)

Re: Remote code execution in horde < 5.1.1 (Murray McAllister <mmcallis@...hat.com>)
OpenSSH J-PAKE vulnerability (no cause for panic! remain calm!) (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Erlang OTP - ftp module - FTP Command Injection (Seba <argos83@...il.com>)
(possible) CVE request: suPHP 0.7.2 release fixed a possible arbitrary code execution (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Remote code execution in horde < 5.1.1 (Murray McAllister <mmcallis@...hat.com>)
Re: CVE request: temporary file issue in Passenger rubygem (Raphael Geissert <geissert@...ian.org>)
CVE Request: otrs: CSRF issue in customer web interface (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [Ticket#2014012942020471] CVE Request: otrs: CSRF issue in customer web interface (Jens Bothe via OTRS Security Team <security@...s.org>)
Re: Remote code execution in horde < 5.1.1 (Jan Schneider <jan@...de.org>)
Re: OpenSSH J-PAKE vulnerability (no cause for panic! remain calm!) (cve-assign@...re.org)
Re: CVE request: temporary file issue in Passenger rubygem (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request: Erlang OTP - ftp module - FTP Command Injection (cve-assign@...re.org)
CVE: Request (Puneeth Gowda <puneethis021@...il.com>)
CVE REJECT request: CVE-2013-4588 (P J P <ppandit@...hat.com>)
Re: CVE Request: otrs: CSRF issue in customer web interface (cve-assign@...re.org)
collectd security contact (Michael Samuel <mik@...net.net>)
CVE Request: Juju phpmyadmin charm (Seth Arnold <seth.arnold@...onical.com>)
Re: collectd security contact (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Juju phpmyadmin charm (dawg <mlyodawg@...il.com>)

January 30 (6 messages)

Re: CVE Request: Juju phpmyadmin charm (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE: Request (cve-assign@...re.org)
Re: CVE request: temporary file issue in Passenger rubygem (cve-assign@...re.org)
Re: collectd security contact (Sebastian Harl <sh@...kee.org>)
echor 0.1.6 Ruby Gem exposes login credentials ("Larry W. Cashdollar" <larry0@...com>)
CVE request: enlightenment sysactions (Martin Carpenter <mcarpenter@...e.fr>)

January 31 (27 messages)

CVE-2013-6393 / libyaml buffer overflow (Garth Mollett <gmollett@...hat.com>)
Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Solar Designer <solar@...nwall.com>)
Linux kernel: fs: fix get_dumpable() incorrect tests (CVE-2013-2929) (Solar Designer <solar@...nwall.com>)
responsible use of distros and linux-distros lists (was: Linux kernel: fs: fix get_dumpable() incorrect tests (CVE-2013-2929… (Solar Designer <solar@...nwall.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Kees Cook <kees@...ntu.com>)
Re: Re: collectd security contact (Michael Samuel <mik@...net.net>)
CVE request: uupdate (devscripts) directory traversal (Murray McAllister <mmcallis@...hat.com>)
CVE needed for libotr's support for OTR v1? (Murray McAllister <mmcallis@...hat.com>)
CVE request: impressCMS 1.3.5 arbitrary file deletion and XSS (Pedro Ribeiro <pedrib@...il.com>)
Re: echor 0.1.6 Ruby Gem exposes login credentials (cve-assign@...re.org)
Re: CVE request: uupdate (devscripts) directory traversal (cve-assign@...re.org)
Re: CVE request: impressCMS 1.3.5 arbitrary file deletion and XSS (cve-assign@...re.org)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (rf@...eap.de)
Security Flaw CVE-2014-0037 (Michael Kromer <m.kromer@...afa.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Solar Designer <solar@...nwall.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Solar Designer <solar@...nwall.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (rf@...eap.de)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Solar Designer <solar@...nwall.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (rf@...eap.de)
CVE request: temp file issues in python's logilab-common module ("Vincent Danen" <vdanen@...hat.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Solar Designer <solar@...nwall.com>)
Re: linux-distros membership (Solar Designer <solar@...nwall.com>)
Re: linux-distros membership (rf@...eap.de)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (rf@...eap.de)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Matthew Daley <mattd@...fuzz.com>)
Re: Linux 3.4+: arbitrary write with CONFIG_X86_X32 (CVE-2014-0038) (Solar Designer <solar@...nwall.com>)
Re: linux-distros membership (Solar Designer <solar@...nwall.com>)

214 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.