From owner-freebsd-security@FreeBSD.ORG Thu Nov 18 15:57:59 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D6511065672 for ; Thu, 18 Nov 2010 15:57:59 +0000 (UTC) (envelope-from pisymbol@gmail.com) Received: from mail-gy0-f182.google.com (mail-gy0-f182.google.com [209.85.160.182]) by mx1.freebsd.org (Postfix) with ESMTP id 5E7AD8FC18 for ; Thu, 18 Nov 2010 15:57:59 +0000 (UTC) Received: by gyg13 with SMTP id 13so1985156gyg.13 for ; Thu, 18 Nov 2010 07:57:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=7V541f/IvjwVTEmJb/F+U/Ux9TrwZRPDtbC6Gn16Eoo=; b=r5z4NJ2Zx+t4d9MTeRS9H24+Ndzd/8oUmbTl3YY4TWCcNpbtQ+hU2QU9H5u8iyj3oV CkrVuY5pwOIqPZyShDGIjStaYsTCVpi5xRYR0sG1qrfF/S1Vaw5jrlKB5pFsPsibxYH8 kTbg4sdX7wiN1wqJMTn6FNW0/45E7vwAPqGRI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=LQ8Qtjp7/E3ga3aq7Yn6H3CNUj6dzDRegFRq/uwUhM33ALG31t/ed43wUmgvcRTU0H WieXKL/cN2XGohuHLepQRqYkAZtLfhgFVt3X/z/IB6mqnkfdl29szTe8o1peJC3hwxF0 Psgr8vzxzSuNwQPRRltQaYr76Ws0H2fDW2W8A= MIME-Version: 1.0 Received: by 10.42.217.134 with SMTP id hm6mr339223icb.136.1290094364218; Thu, 18 Nov 2010 07:32:44 -0800 (PST) Received: by 10.42.246.69 with HTTP; Thu, 18 Nov 2010 07:32:44 -0800 (PST) Date: Thu, 18 Nov 2010 10:32:44 -0500 Message-ID: From: Alexander Sack To: freebsd-security@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: mbuf security advisory for 7.2-RELEASE? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 15:57:59 -0000 Hello: http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc Just to confirm, 7.2-RELEASE is not effected by this issue? Just seems odd that all versions of 7.x are listed minus 7.2-RELEASE. Thanks! -aps From owner-freebsd-security@FreeBSD.ORG Thu Nov 18 16:31:38 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5B773106566B for ; Thu, 18 Nov 2010 16:31:38 +0000 (UTC) (envelope-from pluknet@gmail.com) Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com [209.85.216.175]) by mx1.freebsd.org (Postfix) with ESMTP id 0ED068FC0C for ; Thu, 18 Nov 2010 16:31:37 +0000 (UTC) Received: by qyk29 with SMTP id 29so101302qyk.13 for ; Thu, 18 Nov 2010 08:31:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=98udVwvXCR7y3nIfw3jQHl3vIudrh1w204hEfm41/T4=; b=CS+E59fAqqq/+ZvbJ6gNmqYJ02FkNHRI3XVqQlLX/9nK8K+pUMAX1PXLY9uktaxxYm vpqvXyOX8Ap0a8OrfSMmxjXoZ1RXzFn+jICKuEOG2eKMUJVvprC7pf2Z7rk8Fethnmxf j06vo+3yPe8ePp47mQe3a8HOWua4HE1Li+czk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=opFQaJMVokZmeZzx8u/eJCFyi1FdkXfWwGQM7i1YTbJ84VkiPbtwlij+9wunuGCF90 ScHkua76dIm6MYfRM8OAU32WJ2mfYufYEWkFWBK4+Yfq0x0vnhLNXtezMBI/L5LH4nzM L56yUDKFNmrjfMgCE8EtXu62R5UVkdpFtVyVA= MIME-Version: 1.0 Received: by 10.229.233.20 with SMTP id jw20mr732749qcb.62.1290096131001; Thu, 18 Nov 2010 08:02:11 -0800 (PST) Received: by 10.229.69.135 with HTTP; Thu, 18 Nov 2010 08:02:10 -0800 (PST) In-Reply-To: References: Date: Thu, 18 Nov 2010 19:02:10 +0300 Message-ID: From: Sergey Kandaurov To: Alexander Sack Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org Subject: Re: mbuf security advisory for 7.2-RELEASE? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 16:31:38 -0000 On 18 November 2010 18:32, Alexander Sack wrote: > Hello: > > http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc > > Just to confirm, 7.2-RELEASE is not effected by this issue? =A0Just > seems odd that all versions of 7.x are listed minus 7.2-RELEASE. > Hello. Most likely because it's past 7.2 EoL. --=20 wbr, pluknet From owner-freebsd-security@FreeBSD.ORG Thu Nov 18 16:34:31 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7355E106566B for ; Thu, 18 Nov 2010 16:34:31 +0000 (UTC) (envelope-from Lowell@Be-Well.Ilk.Org) Received: from mail7.sea5.speakeasy.net (mail7.sea5.speakeasy.net [69.17.117.52]) by mx1.freebsd.org (Postfix) with ESMTP id 54E248FC12 for ; Thu, 18 Nov 2010 16:34:31 +0000 (UTC) Received: (qmail 6451 invoked from network); 18 Nov 2010 16:07:51 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail7.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 18 Nov 2010 16:07:51 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 032AE50828; Thu, 18 Nov 2010 11:07:48 -0500 (EST) From: Lowell Gilbert To: Alexander Sack References: Date: Thu, 18 Nov 2010 11:07:48 -0500 In-Reply-To: (Alexander Sack's message of "Thu, 18 Nov 2010 10:32:44 -0500") Message-ID: <44oc9mwr6z.fsf@be-well.ilk.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailman-Approved-At: Thu, 18 Nov 2010 16:44:11 +0000 Cc: freebsd-security@freebsd.org Subject: Re: mbuf security advisory for 7.2-RELEASE? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 16:34:31 -0000 Alexander Sack writes: > http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc > > Just to confirm, 7.2-RELEASE is not effected by this issue? Just > seems odd that all versions of 7.x are listed minus 7.2-RELEASE. 7.2-RELEASE was out of support when the advisory was issued. It *is* vulnerable. From owner-freebsd-security@FreeBSD.ORG Thu Nov 18 17:26:49 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 49CD8106566B for ; Thu, 18 Nov 2010 17:26:49 +0000 (UTC) (envelope-from pisymbol@gmail.com) Received: from mail-pz0-f54.google.com (mail-pz0-f54.google.com [209.85.210.54]) by mx1.freebsd.org (Postfix) with ESMTP id 202508FC08 for ; Thu, 18 Nov 2010 17:26:48 +0000 (UTC) Received: by pzk1 with SMTP id 1so712598pzk.13 for ; Thu, 18 Nov 2010 09:26:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=J90xC3mG7Nmtyv3mw+fQN1RTK4lRPGj8XTrTIWym2Qc=; b=XvW3ITonRpb5h70xW8uxhdYl2O2cS05kutIIId4YsW1aQy+5vCxidG58fBwSnZ+upE UFMja/RykciSIvPeakev4AmsBTsDxVw3F5nZ/FurifrkVuglNj4VWrJDqHZpedTrYAah WCzlvZPimGz47L+7zRWq5lDyjDv+CtMDc5OkE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=lvl0okqDo/cCf9AL0xoXLpJ9tCYm/Kpqvl+A+NfCk93tYJYwgsrvueZUUNFsyXKKjP nSTO2Gm8WCwBmK8jxb7lICmUEKa3s79yRyA4vgl52mnsVSCwNEU+tCwB9CUXafacbihc rW3OKc9h4Eb2B82HSyx1jtiGGsHCex1Ul5+BE= MIME-Version: 1.0 Received: by 10.42.192.197 with SMTP id dr5mr523605icb.404.1290101205992; Thu, 18 Nov 2010 09:26:45 -0800 (PST) Received: by 10.42.246.69 with HTTP; Thu, 18 Nov 2010 09:26:45 -0800 (PST) In-Reply-To: <44oc9mwr6z.fsf@be-well.ilk.org> References: <44oc9mwr6z.fsf@be-well.ilk.org> Date: Thu, 18 Nov 2010 12:26:45 -0500 Message-ID: From: Alexander Sack To: Lowell Gilbert Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org Subject: Re: mbuf security advisory for 7.2-RELEASE? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 17:26:49 -0000 On Thu, Nov 18, 2010 at 11:07 AM, Lowell Gilbert w= rote: > Alexander Sack writes: > >> http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc >> >> Just to confirm, 7.2-RELEASE is not effected by this issue? =A0Just >> seems odd that all versions of 7.x are listed minus 7.2-RELEASE. > > 7.2-RELEASE was out of support when the advisory was issued. > It *is* vulnerable. Thought so! Thanks guys! It just wasn't clear to me. -aps From owner-freebsd-security@FreeBSD.ORG Thu Nov 18 18:04:07 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E01A710657C1 for ; Thu, 18 Nov 2010 18:04:07 +0000 (UTC) (envelope-from jamie@bishopston.net) Received: from pacha.mail.bishopston.net (pacha.mail.bishopston.net [IPv6:2001:5c0:1100:200::3]) by mx1.freebsd.org (Postfix) with ESMTP id AE5998FC19 for ; Thu, 18 Nov 2010 18:04:06 +0000 (UTC) X-Catflap-Envelope-From: X-Catflap-Envelope-To: freebsd-security@freebsd.org Received: from catflap.bishopston.net (jamie@localhost [127.0.0.1]) by catflap.bishopston.net (8.14.4/8.14.3) with ESMTP id oAII41ZZ067059; Thu, 18 Nov 2010 18:04:01 GMT (envelope-from jamie@catflap.bishopston.net) Received: (from jamie@localhost) by catflap.bishopston.net (8.14.4/8.12.9/Submit) id oAII41s7066972; Thu, 18 Nov 2010 18:04:01 GMT From: Jamie Landeg Jones Message-Id: <201011181804.oAII41s7066972@catflap.bishopston.net> Date: Thu, 18 Nov 2010 18:04:00 +0000 Organization: http://www.bishopston.com/jamie/ To: pisymbol@gmail.com, Lowell@be-well.ilk.org References: <44oc9mwr6z.fsf@be-well.ilk.org> In-Reply-To: User-Agent: Heirloom mailx 12.4 7/29/08 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.5 (catflap.bishopston.net [127.0.0.1]); Thu, 18 Nov 2010 18:04:01 +0000 (GMT) X-Virus-Scanned: clamav-milter 0.96 at catflap.bishopston.net X-Virus-Status: Clean Cc: freebsd-security@freebsd.org Subject: Re: mbuf security advisory for 7.2-RELEASE? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 18:04:08 -0000 > >> Just to confirm, 7.2-RELEASE is not effected by this issue?  Just > >> seems odd that all versions of 7.x are listed minus 7.2-RELEASE. > > > > 7.2-RELEASE was out of support when the advisory was issued. > > It *is* vulnerable. > > Thought so! Thanks guys! It just wasn't clear to me. Easy mistake to make, seeing as 7.1 is not EoL, but 7.2 is!