[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <51256B57.4070603@redhat.com>
Date: Wed, 20 Feb 2013 17:33:27 -0700
From: Kurt Seifried <kseifried@...hat.com>
To: "Christey, Steven M." <coley@...re.org>
CC: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: Re: RE: Handling CVEs for the XML entity expansion
issues
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/20/2013 05:28 PM, Christey, Steven M. wrote:
> Kurt,
>
> This is a big and complicated scenario. I will *privately* send
> you the draft that I'm working on right now.
>
> Sorry to the rest of the list - but the combination of new vuln
> types, "DoS" debates, libraries, and missing details have all
> combined to make this rather complicated. We will post something
> that should help address these specific situations, and others in
> the foreseeable future. I hope to do this within 24 hours.
Yeah, I sort of knew it was a live hand grenade which is why I handed
it off to you (and you jumped on that hand grenade like a champ =).
> - Steve
- --
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)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=1bLk
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
