Date: Thu, 21 Aug 2014 21:13:05 +0400 From: gremlin@...mlin.ru To: oss-security@...ts.openwall.com Subject: Re: SaltStack 2014.1.10 released On 21-Aug-2014 20:44:19 +0400, I wrote: >> Did anyone else have this message fail to render in their email >> client (I get a blank panel with the .sig attachment at the >> bottom using Thunderbird/Enigmail/Fedora). > I use mutt, and it tells me everything is ok: > http://pics.rsh.ru/img/kurt_signature_in_mutt_bgxvgqe3.png I had to read that more carefully (to be honest, messages from Kurt were signed inline for a time)... Yes, the message from C. R. Oldham was malformed: http://pics.rsh.ru/img/cr_bad_message_sz46z1tq.png Here's raw message data, including significant headers: >>> X-Mailer: Airmail Beta (250) >>> MIME-Version: 1.0 >>> Content-Type: multipart/signed; >>> boundary="78CE6B75-3942-4514-B1F6-81C3B83FC90E"; >>> protocol="application/pgp-signature"; micalg=pgp-sha512 >>> Content-Disposition: inline >>> Subject: [oss-security] SaltStack 2014.1.10 released >>> Status: RO >>> Content-Length: 1416 >>> Lines: 39 >>> >>> >>> http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html =20 >>> >>> The sources are available on pypi: =20 >>> >>> https://pypi.python.org/pypi/salt/2014.1.10 =20 >>> >>> Salt 2014.1.10 fixes security issues documented by CVE-2014-3563: =22Inse= >>> cure tmp-file creation in seed.py, salt-ssh, and salt-cloud.=22 Upgrading= >>> is recommended. =20 >>> >>> >>> -- =20 >>> C. R. Oldham, Platform Engineer, SaltStack >>> cr=40saltstack.com >>> >>> >>> --78CE6B75-3942-4514-B1F6-81C3B83FC90E >>> Content-Transfer-Encoding: 7bit >>> Content-Disposition: attachment; filename=signature.asc >>> Content-Type: application/pgp-signature; name=signature.asc >>> Content-Description: Message signed with OpenPGP using AMPGpg >>> >>> -----BEGIN PGP SIGNATURE----- >>> Comment: GPGTools - https://gpgtools.org >>> ... >>> -----END PGP SIGNATURE----- >>> >>> --78CE6B75-3942-4514-B1F6-81C3B83FC90E-- -- Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru> GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net Content of type "application/pgp-signature" skipped
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.