From owner-freebsd-current@freebsd.org Wed Feb 17 14:15:23 2016 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3F03AAAB8AD for ; Wed, 17 Feb 2016 14:15:23 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-qk0-x22b.google.com (mail-qk0-x22b.google.com [IPv6:2607:f8b0:400d:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id EC87E1F0D for ; Wed, 17 Feb 2016 14:15:22 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: by mail-qk0-x22b.google.com with SMTP id s68so6117828qkh.3 for ; Wed, 17 Feb 2016 06:15:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd-org.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=DqDl4Klbw+QpQoehnaHwtFvMVsP6yUYg9kxSHYP/VsE=; b=E6pEkdnmx1a/lnSn8/N5VnfRJQFFfBGYOSgBJpRAouogEUoMGqJQQInuV6nEmE022m uB26qQHvzSQgkvwAH3pot2gaBI4r68AOk5qIYK3b2h53+ZWv1LdLGoabsgaNSluzGTMP AQhGRV1n/zT/4P93dvPKr+c9Ioi8KFT/+MLCGQSvcbd5mRn2c9jG/ZpXcD0+/rtNumAO r+6P2sR1hSY9GJiPrcFSDhxUl225GcuMNBOElJ9gLsVv7hS6UByoS5zuPEDt5v3CsR3I 9d1TZqrnGC+otbKjKIBRPVu7tzMwIsNEC+sT30gmnSsTsZRxZRw2kAPMxkVZk6bT1dwk gtdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=DqDl4Klbw+QpQoehnaHwtFvMVsP6yUYg9kxSHYP/VsE=; b=bv/4g1BMknWE/wSpkF/eOgu992+gCvH7ruDOQUFto4dOBud8OdshYHPBxHl92UZDw8 EK7EA31MHo/QYFpghR/s+zzJtiDlh62Ly3PFyA4BxIMR31vlIAuftcl0cLl4A9llumsy 0aVvdneXkNS0JuKDWi0WIByGhIHbLDWNWQYX8CDmmpUky/P+3ApaQNrjMzbCaYTt2442 Er+7Nv6+CQlay4Y9XsyLbdWiG4KKOFht/OBjOqpeCYTXyuV+UifgMPMjDtFTcSEhafcg S6Df6SjA5VezQhkhVsTWx6mpqyky4pc2kK5ggcXlPPTIiMBAK0vIQe2ALyYd9ZUV+o5A kTPw== X-Gm-Message-State: AG10YOS9KHJxSF7PguxV0qdR1WF53U8u33qyJS36BfhNZRqFuf2wNAY67grpLfR3vZ6SWIsp X-Received: by 10.55.74.209 with SMTP id x200mr2139491qka.106.1455718521946; Wed, 17 Feb 2016 06:15:21 -0800 (PST) Received: from mutt-hardenedbsd (c-73-135-80-144.hsd1.md.comcast.net. [73.135.80.144]) by smtp.gmail.com with ESMTPSA id 90sm15431453qgo.14.2016.02.17.06.15.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 17 Feb 2016 06:15:19 -0800 (PST) Date: Wed, 17 Feb 2016 09:15:18 -0500 From: Shawn Webb To: Daniel Kalchev Cc: "O. Hartmann" , freebsd-current Subject: Re: CVE-2015-7547: critical bug in libc Message-ID: <20160217141518.GC57405@mutt-hardenedbsd> References: <20160217142410.18748906@freyja.zeit4.iv.bundesimmobilien.de> <20160217134003.GB57405@mutt-hardenedbsd> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="8NvZYKFJsRX2Djef" Content-Disposition: inline In-Reply-To: X-Operating-System: FreeBSD mutt-hardenedbsd 11.0-CURRENT-HBSD FreeBSD 11.0-CURRENT-HBSD X-PGP-Key: http://pgp.mit.edu/pks/lookup?op=vindex&search=0x6A84658F52456EEE User-Agent: Mutt/1.5.24 (2015-08-30) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Feb 2016 14:15:23 -0000 --8NvZYKFJsRX2Djef Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Feb 17, 2016 at 04:07:25PM +0200, Daniel Kalchev wrote: >=20 > > On 17.02.2016 ??., at 15:40, Shawn Webb wr= ote: > >=20 > > TL;DR: FreeBSD is not affected by CVE-2015-7547. >=20 >=20 > Unless you use Linux applications under emulation. True. I didn't think of that since I don't use the linuxulator and am not a big fan of it. Good catch. --=20 Shawn Webb HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --8NvZYKFJsRX2Djef Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWxIBzAAoJEGqEZY9SRW7uOHIP/1IMXL+zZyjqhmNxpkvxjYDl n7ZFS3zidHTIAGilaEsGCHfjoGCElXyiGYSS4sYyh2AlZ4O1BapxoWTHSi+HOulG 6WPcXS8ycVeA384MaSKrw2ZaJEnJQXaIwoBFgRXAamERYg4pG8SRs18/D3I3jMFt HELmsAUN9FnY+KYr3HmroDARhBODwK9GkPm6B89yqtdPeKBfABSeeunVcHaMeA3f aUWQvolOhwCovRBkBYCvTTAAJr0owBQr4z6HxRHT5YDzuiIsIG9i+aXgyPoLPlEw EBlQ036J7uWROe4Tw2JFgQp7wSVf9QghwqeYGla58WcaXHEIIj5ts3Q8Fs3zLRah Dy/NrYTFPCmKtGBE0X46q6ZWEbvoPs/3vsxSl98qKc6Uk6OaKIMVkMUuMbwwbhbL Akt4PmLVIIjFsLn/9bzoKWIs0cHwC8/VDcPx7CYS+DGChwihAYlBgCOvvvnq0fqw 6vXu/+wRlTFl3slke87MS9N4swtrdrxqnHpv4VtQyUbA2T6X32Yyj4+r5L6leyrA AuyLg0CFLjx8nQ/dl6BwBwT9Rln6uxVczcgjUdJcfgF1L5J4/mfDBNjYIAcJKRS7 dk0XJQyQt2On8nflU9Fj6R3qmEGHA8BLQPPFHG/AqX8mrWTizD8E0/xzJOPxtX6G LQnj3f9Fc7ZHMkMBlnfC =8+wZ -----END PGP SIGNATURE----- --8NvZYKFJsRX2Djef--