Date: Wed, 20 Feb 2013 17:33:27 -0700 From: Kurt Seifried <kseifried@...hat.com> To: "Christey, Steven M." <coley@...re.org> CC: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com> Subject: Re: RE: Handling CVEs for the XML entity expansion issues -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 02/20/2013 05:28 PM, Christey, Steven M. wrote: > Kurt, > > This is a big and complicated scenario. I will *privately* send > you the draft that I'm working on right now. > > Sorry to the rest of the list - but the combination of new vuln > types, "DoS" debates, libraries, and missing details have all > combined to make this rather complicated. We will post something > that should help address these specific situations, and others in > the foreseeable future. I hope to do this within 24 hours. Yeah, I sort of knew it was a live hand grenade which is why I handed it off to you (and you jumped on that hand grenade like a champ =). > - Steve - -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) iQIcBAEBAgAGBQJRJWtXAAoJEBYNRVNeJnmThvUQAIJeCp8KiPsQgJb3d/jdD7kJ IWeYy7hXpAfEBAkAoz79y45OTFfdx2qf75ABDhYFgbKBZQLaAhrxVZN8sXC7PnMa gUOeK88UzuJ/I4DvLfAGNiTOBbegN7nBEOaTyXShZ4EKWjGj9kMSRk4jKJRTHh6I lsrGEAHGyB68pph8yJjdRJhwcgam+jvphvNh40dHYrrmRzrxowAb0JUH71Q2CaqE jwFqZROTF9h4+p6S/JXy1y2s06pEcoTWWkSOtQnTc8BTDu5d1bIm0xMsnHl03Wz5 CLIzoNOWwdg16hHV01FvaGKAxGZNjpOkCUfTXVpw4ll3B9cff5Je11MByxjzypZD TjUM5VtdH82/Fnu7BFhG1PPbupCXWnGrP7+o1rbw5g8p8bwWBrNEIfmpfKef0h5w BIDf+F+YrBrePmxA6a6DweR8OxwAN2h9WF9ANhc4GoT26qKFjLZ4BuSvfVjdAXSl vZ46vilBF2OiQ4DjGtZjIEUK2PmWGFaCPM784PoL09YYiEZ8yPLcH9osAmswsoDZ FTEsT6m16GR8tn8Ur5l6ITNb0/wCl2lkY8QBA+lFX1GO1FfACO6P/q6ymrjhxPKg e4/R726e+y3MVIGrxdj9NEI6sQ1b+irQHEiSiPo3olkW0MoSb8HEPDqf+pPnD1Mf 7neX7sFvORC/6K5Jhw1X =1bLk -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.