From owner-freebsd-security@FreeBSD.ORG Sun May 13 13:23:27 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 633D0106564A; Sun, 13 May 2012 13:23:27 +0000 (UTC) (envelope-from thetollingbell@lavabit.com) Received: from karen.lavabit.com (karen.lavabit.com [72.249.41.33]) by mx1.freebsd.org (Postfix) with ESMTP id 2F83C8FC0A; Sun, 13 May 2012 13:23:26 +0000 (UTC) Received: from b.earth.lavabit.com (b.earth.lavabit.com [192.168.111.11]) by karen.lavabit.com (Postfix) with ESMTP id 2C8DE11BCB6; Sun, 13 May 2012 07:54:11 -0500 (CDT) Received: from infraware.co.kr (mac2c36d0.tmodns.net [208.54.44.172]) by lavabit.com with ESMTP id K1X3KIFOBQ04; Sun, 13 May 2012 07:54:11 -0500 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lavabit; d=lavabit.com; b=Cg7WxlF4BsdkuuTiPP4Baa0MdOWwiu86u5cfPmAeTL7+wU8Hxg7thEHiEQBdayfldlk1vtldiDUVxyWnIJyDv4r86qleJC11+bxARJlZZ2uVyrDdiVPRCz9TCdsHvvOTzu62+f40nCyGgpbE9nAGa7Qy6u9hP23eT8ynJALLMU0=; h=From:To:Subject:X-Priority:Importance:Date:MIME-Version:X-Mailer:Content-Type:Content-Transfer-Encoding; From: "thetollingbell@lavabit.com" To: freebsd-security-request@freebsd.org, freebsd-security@freebsd.org X-Priority: 3 Importance: Normal Date: Sun, 13 May 2012 12:53:57 GMT X-Mailer: Infraware POLARIS Mobile Mailer v2.5 Content-Transfer-Encoding: base64 Message-Id: <20120513125411.2C8DE11BCB6@karen.lavabit.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: freebsd-security Digest, Vol 412, Issue 2 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 May 2012 13:23:27 -0000 PHA+Jm5ic3A7PC9wPjxwPiZuYnNwOzwvcD48ZGV2M19qank+RnJvbSBteSBBbmRyb2lkIH Bob25l IG9uIFQtTW9iaWxlLiBUaGUgZmlyc3QgbmF0aW9ud2lkZSA0RyBuZXR3b3JrLjwvZGV2M1 9qank+ Cgo8YnIvPjxici8+PGZvbnQ+PGJyPjxicj4tLS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS 0tLS08 L2ZvbnQ+PGJyLz48YnI+CjxkaXY+PGJsb2NrcXVvdGUgZGlyPWx0ciBzdHlsZT1NQVJHSU 4tUklH SFQ6IDBweD48Zm9udD5Gcm9tIDogZnJlZWJzZC1zZWN1cml0eS1yZXF1ZXN0QGZyZWVic2 Qub3Jn PC9mb250Pjxicj48Zm9udD5UbyA6IGZyZWVic2Qtc2VjdXJpdHlAZnJlZWJzZC5vcmc7PC 9mb250 Pjxicj48Zm9udD5TZW50IDogNS8xMy8yMDEyIDg6MDIgQU08L2ZvbnQ+PGJyPjxmb250Pl N1Ympl Y3QgOiBmcmVlYnNkLXNlY3VyaXR5IERpZ2VzdCwgVm9sIDQxMiwgSXNzdWUgMjwvZm9udD 48YnI+ Jm5ic3A7PGRpdj48Zm9udD48cHJlPlNlbmQgZnJlZWJzZC1zZWN1cml0eSBtYWlsaW5nIG xpc3Qg c3VibWlzc2lvbnMgdG8NCglmcmVlYnNkLXNlY3VyaXR5QGZyZWVic2Qub3JnDQoNClRvIH N1YnNj cmliZSBvciB1bnN1YnNjcmliZSB2aWEgdGhlIFdvcmxkIFdpZGUgV2ViLCB2aXNpdA0KCW h0dHA6 Ly9saXN0cy5mcmVlYnNkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZyZWVic2Qtc2VjdXJpdH kNCm9y LCB2aWEgZW1haWwsIHNlbmQgYSBtZXNzYWdlIHdpdGggc3ViamVjdCBvciBib2R5ICdoZW xwJyB0 bw0KCWZyZWVic2Qtc2VjdXJpdHktcmVxdWVzdEBmcmVlYnNkLm9yZw0KDQpZb3UgY2FuIH JlYWNo IHRoZSBwZXJzb24gbWFuYWdpbmcgdGhlIGxpc3QgYXQNCglmcmVlYnNkLXNlY3VyaXR5LW 93bmVy QGZyZWVic2Qub3JnDQoNCldoZW4gcmVwbHlpbmcsIHBsZWFzZSBlZGl0IHlvdXIgU3Viam VjdCBs aW5lIHNvIGl0IGlzIG1vcmUgc3BlY2lmaWMNCnRoYW4gJnF1b3Q7UmU6IENvbnRlbnRzIG 9mIGZy ZWVic2Qtc2VjdXJpdHkgZGlnZXN0Li4uJnF1b3Q7DQoNCg0KVG9kYXkncyBUb3BpY3M6DQ oNCiAm bmJzcDsmbmJzcDsxLiBIU00gaW4gRnJlZWJzZCAobWFoZGllaCBzYWxhbWF0KQ0KICZuYn NwOyZu YnNwOzIuIEhTTSBpbiBGcmVlQlNEIChtYWhkaWVoIHNhbGFtYXQpDQogJm5ic3A7Jm5ic3 A7My4g SFNNIGluIEZyZWVCU0QgKG1haGRpZWggc2FsYW1hdCkNCiAmbmJzcDsmbmJzcDs0LiBSZT ogSFNN IGluIEZyZWVCU0QgKE1hdHRoZXcgU2VhbWFuKQ0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KTW Vzc2Fn ZTogMQ0KRGF0ZTogU2F0LCAxMiBNYXkgMjAxMiAyMjozNzoyOCAtMDcwMA0KRnJvbTogbW FoZGll aCBzYWxhbWF0Jm5ic3A7PG1haGRpZWguc2FsYW1hdEBnbWFpbC5jb20+DQpTdWJqZWN0Oi BIU00g aW4gRnJlZWJzZA0KVG86IGZyZWVic2Qtc2VjdXJpdHlAZnJlZWJzZC5vcmcNCk1lc3NhZ2 UtSUQ6 DQoJPENBTDVtMUJ2blpkTnlPRzV3RG9PX29aaTNhVmE0YUt1RFBTTHdGZGlNb0dkamJxZl UxQUBt YWlsLmdtYWlsLmNvbT4NCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1JU0 8tODg1 OS0xDQoNCkhpIGFsbC4gSSB3YW50IHRvIHVzZSBhIEhTTSBwYyBjYXJkIGZvciBzZWN1cm l0eSBp biBteSBzeXN0ZW0uIENhbiBJIHVzZSBpdA0KaW4gRnJlZUJTRD8gRnJlZUJTRCBzdXBwb3 J0IHRo aXMgY2FyZHM/DQpUaGFua3MNCg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0NCg0K TWVzc2FnZTogMg0KRGF0ZTogU2F0LCAxMiBNYXkgMjAxMiAyMjo1ODowNCAtMDcwMA0KRn JvbTog bWFoZGllaCBzYWxhbWF0Jm5ic3A7PG1haGRpZWguc2FsYW1hdEBnbWFpbC5jb20+DQpTdW JqZWN0 OiBIU00gaW4gRnJlZUJTRA0KVG86IGZyZWVic2Qtc2VjdXJpdHlAZnJlZWJzZC5vcmcNCk 1lc3Nh Z2UtSUQ6DQoJPENBTDVtMUJ2eVNHemY4UFI5PVdZeHNzeVB5c3Z6YkZUTXR1NHYxSFUxd0 5fRE55 Qz1BQUBtYWlsLmdtYWlsLmNvbT4NCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcn NldD1J U08tODg1OS0xDQoNCkhpIGFsbC4gSSB3YW50IHRvIHVzZSBhIEhTTSBwYyBjYXJkIGZvci BzZWN1 cml0eSBpbiBteSBzeXN0ZW0uIENhbiBJIHVzZSBpdA0KaW4gRnJlZUJTRD8gRnJlZUJTRC BzdXBw b3J0IHRoaXMgY2FyZHM/DQpUaGFua3MNCg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0t LS0NCg0KTWVzc2FnZTogMw0KRGF0ZTogU2F0LCAxMiBNYXkgMjAxMiAyMzowNzowNiAtMD cwMA0K RnJvbTogbWFoZGllaCBzYWxhbWF0Jm5ic3A7PG1haGRpZWguc2FsYW1hdEBnbWFpbC5jb2 0+DQpT dWJqZWN0OiBIU00gaW4gRnJlZUJTRA0KVG86IGZyZWVic2Qtc2VjdXJpdHlAZnJlZWJzZC 5vcmcN Ck1lc3NhZ2UtSUQ6DQoJPENBTDVtMUJ0NlZ3MXZUaUgwT2hpM2JNd0pmZmFHV2o5NUFnYi 0wUkJy a29DeG1SZUxZd0BtYWlsLmdtYWlsLmNvbT4NCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbj sgY2hh cnNldD1JU08tODg1OS0xDQoNCkhpIGFsbC4gSSB3YW50IHRvIHVzZSBhIEhTTSBwYyBjYX JkIGZv ciBzZWN1cml0eSBpbiBteSBzeXN0ZW0uIENhbiBJIHVzZSBpdA0KaW4gRnJlZUJTRD8gRn JlZUJT RCBzdXBwb3J0IHRoaXMgY2FyZHM/DQpUaGFua3MNCg0KDQotLS0tLS0tLS0tLS0tLS0tLS 0tLS0t LS0tLS0tLS0NCg0KTWVzc2FnZTogNA0KRGF0ZTogU3VuLCAxMyBNYXkgMjAxMiAwODozOT owNyAr MDEwMA0KRnJvbTogTWF0dGhldyBTZWFtYW4mbmJzcDs8bWF0dGhld0BGcmVlQlNELm9yZz 4NClN1 YmplY3Q6IFJlOiBIU00gaW4gRnJlZUJTRA0KVG86IG1haGRpZWggc2FsYW1hdCZuYnNwOz xtYWhk aWVoLnNhbGFtYXRAZ21haWwuY29tPg0KQ2M6IGZyZWVic2Qtc2VjdXJpdHlARnJlZUJTRC 5vcmcN Ck1lc3NhZ2UtSUQ6ICZsdDs0RkFGNjUxQi42MDkwNDA3QEZyZWVCU0Qub3JnJmd0Ow0KQ2 9udGVu dC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFyc2V0PSZxdW90O2lzby04ODU5LTEmcXVvdDsNCg 0KT24g MTMvMDUvMjAxMiAwNjo1OCwgbWFoZGllaCBzYWxhbWF0IHdyb3RlOg0KJmd0OyBIaSBhbG wuIEkg d2FudCB0byB1c2UgYSBIU00gcGMgY2FyZCBmb3Igc2VjdXJpdHkgaW4gbXkgc3lzdGVtLi BDYW4g SSB1c2UgaXQNCiZndDsgaW4gRnJlZUJTRD8gRnJlZUJTRCBzdXBwb3J0IHRoaXMgY2FyZH M/DQoN CkkgdGFrZSBpdCB5b3UgbWVhbiBhICdIYXJkd2FyZSBTZWN1cml0eSBNb2R1bGUnIGFuZC Bub3Qg J0hpZXJhcmNoaWNhbA0KU3RvcmFnZSBNYW5hZ2VtZW50JyA/DQoNCllvdSdsZCBoYXZlIH RvIHRl bGwgdXMgdGhlIG1ha2UgYW5kIG1vZGVsIG51bWJlciBvZiB0aGUgY2FyZCAoaWRlYWxseQ 0Kd2l0 aCBwb2ludGVycyB0byB0aGUgbWFudWZhY3R1cmVycyB3ZWJzaXRlIHNob3dpbmcgdGVjaG 5pY2Fs IHNwZWNzIGlmDQp5b3UgY2FuLikgJm5ic3A7SGFyZHdhcmUgaXMgbm90IGdlbmVyYWxseS BzdXBw b3J0ZWQgYnkgc3BlY2lmaWMgZnVuY3Rpb24sIGJ1dA0KcGVyIG1hbnVmYWN0dXJlciBvci BwZXIg Y2hpcHNldC4gJm5ic3A7QWxzbywgdGhlcmUncyBubyBndWFyYW50ZWUgdGhhdCBhbGwNCn RoZSBm dW5jdGlvbnMgb2YgYSBwYXJ0aWN1bGFyIGNhcmQgYXJlIHN1cHBvcnRlZCwgYnV0IG9uY2 Ugd2Un dmUgcGlubmVkDQpkb3duIHdoYXQgZHJpdmVycyBldGMuIHdpbGwgYmUgdXNlZCBmb3IgdG hhdCBo YXJkd2FyZSwgdGhlIGRvY3VtZW50YXRpb24NCnNob3VsZCBjb3ZlciB0aGF0Lg0KDQpIYX Zpbmcg c2FpZCB0aGF0LCBJIGJlbGlldmUgdGhhdCBPcGVuU1NMIHByb3ZpZGVzIGFuIEFQSSBmb3 IgYWNj ZXNzaW5nDQptYW55IG9mIHRoZXNlIHNvcnRzIG9mIGRldmljZXMsIHNvIGlmIE9wZW5TU0 wgc3Vw cG9ydHMgaXQsIHRoZW4geW91J3JlDQpwcm9iYWJseSBpbiBsdWNrLiAmbmJzcDtBIGtleX dvcmQg aGVyZSBpcyAnY3J5cHRva2knIChtZWFuaW5nIGNyeXB0b2dyYXBoaWMNCnRva2VuIGludG VyZmFj ZSkgLS0gdGhhdCdzIHRoZSBzdGFuZGFyZCB0aGF0IE9wZW5TU0wgaW1wbGVtZW50cy4NCg 0KCUNo ZWVycywNCg0KCU1hdHRoZXcNCg0KLS0gDQpEciBNYXR0aGV3IEogU2VhbWFuIE1BLCBELl BoaWwu DQpQR1A6IGh0dHA6Ly93d3cuaW5mcmFjYW5pbm9waGlsZS5jby51ay9wZ3BrZXkNCg0KDQ otLS0t LS0tLS0tLS0tLSBuZXh0IHBhcnQgLS0tLS0tLS0tLS0tLS0NCkEgbm9uLXRleHQgYXR0YW NobWVu dCB3YXMgc2NydWJiZWQuLi4NCk5hbWU6IHNpZ25hdHVyZS5hc2MNClR5cGU6IGFwcGxpY2 F0aW9u L3BncC1zaWduYXR1cmUNClNpemU6IDI2NyBieXRlcw0KRGVzYzogT3BlblBHUCBkaWdpdG FsIHNp Z25hdHVyZQ0KVXJsIDogaHR0cDovL2xpc3RzLmZyZWVic2Qub3JnL3BpcGVybWFpbC9mcm VlYnNk LXNlY3VyaXR5L2F0dGFjaG1lbnRzLzIwMTIwNTEzL2YzYTNhMWMyL3NpZ25hdHVyZS0wMD AxLnBn cA0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KX19fX19fX19fX19fX1 9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCmZyZWVic2Qtc2VjdXJpdHlAZnJlZW JzZC5v cmcgbWFpbGluZyBsaXN0DQpodHRwOi8vbGlzdHMuZnJlZWJzZC5vcmcvbWFpbG1hbi9saX N0aW5m by9mcmVlYnNkLXNlY3VyaXR5DQpUbyB1bnN1YnNjcmliZSwgc2VuZCBhbnkgbWFpbCB0by AmcXVv dDtmcmVlYnNkLXNlY3VyaXR5LXVuc3Vic2NyaWJlQGZyZWVic2Qub3JnJnF1b3Q7DQoNCk VuZCBv ZiBmcmVlYnNkLXNlY3VyaXR5IERpZ2VzdCwgVm9sIDQxMiwgSXNzdWUgMg0KKioqKioqKi oqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqDQo8L3ByZT48L2ZvbnQ+PC 9kaXY+ PC9ibG9ja3F1b3RlPjwvZGl2Pg==