From owner-freebsd-security@freebsd.org Mon Dec 17 19:50:23 2018 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C8855134AA8A for ; Mon, 17 Dec 2018 19:50:23 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 9BFB8872FF for ; Mon, 17 Dec 2018 19:50:22 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from segfault-nmh-helo.tristatelogic.com (localhost [127.0.0.1]) by segfault.tristatelogic.com (Postfix) with ESMTP id 882A93ADE4 for ; Mon, 17 Dec 2018 11:50:15 -0800 (PST) From: "Ronald F. Guilmette" To: freebsd-security@freebsd.org Subject: Re: SQLite vulnerability In-Reply-To: Date: Mon, 17 Dec 2018 11:50:15 -0800 Message-ID: <32156.1545076215@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 9BFB8872FF X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-0.09 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.32)[-0.320,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; DMARC_NA(0.00)[tristatelogic.com]; MX_GOOD(-0.01)[mx1.tristatelogic.com]; NEURAL_SPAM_LONG(0.51)[0.511,0]; NEURAL_HAM_SHORT(-0.05)[-0.052,0]; IP_SCORE(-0.02)[country: US(-0.08)]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2018 19:50:24 -0000 I just wanted to say that I'm sorry to see there being a somewhat, testy exchange here on this list with regards to the SQLite issue, but at least it gives me an opportunity to crack a rather lame joke that I just made up by accident. I'll be talking with another security professional by phone later today (about an unrelated issue), and I just thought that I would comment to him that this SQLite issue has a lot of people on edge. (Get it?) Hey! These are the jokes folks! Worth what you paid for them.