Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 29 Jan 2015 08:00:48 -0800
From: Paul Pluzhnikov <>
Subject: Re: GHOST gethostbyname() heap overflow in glibc (CVE-2015-0235)

On Thu, Jan 29, 2015 at 4:09 AM, Hanno Böck <> wrote:

> And yes: I'd like people to cry alarm every time they see a buffer
> overflow in glibc or any other core lib.

What is the appropriate forum to cry alarm on?

We are not a distro, and (AFAICT) are not on any of the closed lists.
But maybe we should be.

Paul Pluzhnikov

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.