[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 21 Aug 2014 21:13:05 +0400
From: gremlin@...mlin.ru
To: oss-security@...ts.openwall.com
Subject: Re: SaltStack 2014.1.10 released
On 21-Aug-2014 20:44:19 +0400, I wrote:
>> Did anyone else have this message fail to render in their email
>> client (I get a blank panel with the .sig attachment at the
>> bottom using Thunderbird/Enigmail/Fedora).
> I use mutt, and it tells me everything is ok:
> http://pics.rsh.ru/img/kurt_signature_in_mutt_bgxvgqe3.png
I had to read that more carefully (to be honest, messages from Kurt
were signed inline for a time)... Yes, the message from C. R. Oldham
was malformed: http://pics.rsh.ru/img/cr_bad_message_sz46z1tq.png
Here's raw message data, including significant headers:
>>> X-Mailer: Airmail Beta (250)
>>> MIME-Version: 1.0
>>> Content-Type: multipart/signed;
>>> boundary="78CE6B75-3942-4514-B1F6-81C3B83FC90E";
>>> protocol="application/pgp-signature"; micalg=pgp-sha512
>>> Content-Disposition: inline
>>> Subject: [oss-security] SaltStack 2014.1.10 released
>>> Status: RO
>>> Content-Length: 1416
>>> Lines: 39
>>>
>>>
>>> http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html =20
>>>
>>> The sources are available on pypi: =20
>>>
>>> https://pypi.python.org/pypi/salt/2014.1.10 =20
>>>
>>> Salt 2014.1.10 fixes security issues documented by CVE-2014-3563: =22Inse=
>>> cure tmp-file creation in seed.py, salt-ssh, and salt-cloud.=22 Upgrading=
>>> is recommended. =20
>>>
>>>
>>> -- =20
>>> C. R. Oldham, Platform Engineer, SaltStack
>>> cr=40saltstack.com
>>>
>>>
>>> --78CE6B75-3942-4514-B1F6-81C3B83FC90E
>>> Content-Transfer-Encoding: 7bit
>>> Content-Disposition: attachment; filename=signature.asc
>>> Content-Type: application/pgp-signature; name=signature.asc
>>> Content-Description: Message signed with OpenPGP using AMPGpg
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>> Comment: GPGTools - https://gpgtools.org
>>>
...
>>> -----END PGP SIGNATURE-----
>>>
>>> --78CE6B75-3942-4514-B1F6-81C3B83FC90E--
--
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru>
GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net
Content of type "application/pgp-signature" skipped
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
