oss-security mailing list - 2013/10

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2013/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 9	² 4	³ 1	⁴ 14	⁵ 2	⁶
⁷ 2	⁸ 7	⁹ 10	¹⁰ 23	¹¹ 14	¹² 4	¹³
¹⁴ 3	¹⁵ 9	¹⁶ 18	¹⁷ 4	¹⁸ 6	¹⁹ 4	²⁰ 1
²¹ 13	²² 14	²³ 10	²⁴ 3	²⁵ 6	²⁶ 1	²⁷
²⁸ 1	²⁹ 9	³⁰ 6	³¹ 5

Messages by day:

October 1 (9 messages)

CVE request: VLC (Laurent Butti <laurentb@...il.com>)
Re: CVE request: VLC (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Simple Machines Forum (SMF) <= 2.0.5 - multiple vulnerabilities (Henri Salo <henri@...v.fi>)
Re: CVE request: VLC (Laurent Butti <laurentb@...il.com>)
[CVE request] systemd (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: [CVE request] systemd (Sebastian Krahmer <krahmer@...e.de>)
CVE request - VLC 2.0.0 to 2.0.8 (Pedro Ribeiro <pedrib@...il.com>)
Re: CVE request: Simple Machines Forum (SMF) <= 2.0.5 - multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: [CVE request] systemd (Kurt Seifried <kseifried@...hat.com>)

October 2 (4 messages)

Re: CVE request: Simple Machines Forum (SMF) <= 2.0.5 - multiple vulnerabilities (security curmudgeon <jericho@...rition.org>)
Xen Security Advisory 65 (CVE-2013-4344) - qemu SCSI REPORT LUNS buffer overflow (Xen.org security team <security@....org>)
Re: Re: CVE request: Simple Machines Forum (SMF) <= 2.0.5 - multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
re: Xen Security Advisory 65 (CVE-2013-4344) - qemu SCSI REPORT LUNS buffer overflow (security curmudgeon <jericho@...rition.org>)

October 3 (1 message)

Re: CVE request - VLC 2.0.0 to 2.0.8 (Pedro Ribeiro <pedrib@...il.com>)

October 4 (14 messages)

Re: Re: CVE request - VLC 2.0.0 to 2.0.8 (Kurt Seifried <kseifried@...hat.com>)
A note on cookie based sessions (Kurt Seifried <kseifried@...hat.com>)
Re: A note on cookie based sessions ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: A note on cookie based sessions (Donald Stufft <donald@...fft.io>)
Re: A note on cookie based sessions (Kurt Seifried <kseifried@...hat.com>)
Re: A note on cookie based sessions (Florian Weimer <fw@...eb.enyo.de>)
Re: Re: CVE request - VLC 2.0.0 to 2.0.8 (Hanno Böck <hanno@...eck.de>)
Re: A note on cookie based sessions (cve-assign@...re.org)
Re: A note on cookie based sessions (Andri Möll <andri@....ee>)
Re: A note on cookie based sessions (Igor Sverkos <igor.sverkos@...glemail.com>)
Re: Re: CVE request - VLC 2.0.0 to 2.0.8 (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE request - VLC 2.0.0 to 2.0.8 (Pedro Ribeiro <pedrib@...il.com>)
Re: Re: CVE request - VLC 2.0.0 to 2.0.8 (Kurt Seifried <kseifried@...hat.com>)
CVE request for Drupal contributed module (Forest Monsen <forest.monsen@...il.com>)

October 5 (2 messages)

Re: CVE request for Drupal contributed module (Kurt Seifried <kseifried@...hat.com>)
CVE duplicates SA-CONTRIB-2013-075 (Henri Salo <henri@...v.fi>)

October 7 (2 messages)

Request for linux-distros@...openwall.org membership (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Request for linux-distros@...openwall.org membership (Moritz Muehlenhoff <jmm@...ian.org>)

October 8 (7 messages)

CVE Request: remote command-injection flaw in HTTP::Body::Multipart versions 1.08 and later (Murray McAllister <mmcallis@...hat.com>)
Re: CVE Request: remote command-injection flaw in HTTP::Body::Multipart versions 1.08 and later (Kurt Seifried <kseifried@...hat.com>)
CVE request: mahara 1.7.3 (Raphael Geissert <geissert@...ian.org>)
Vulnerability in Webkit-GTK and PulseAudio volume handling ("Alexander E. Patrakov" <patrakov@...il.com>)
Vulnerability Reported in my Ruby Gem (richard schneeman <richard.schneeman@...il.com>)
Fwd: X.Org security advisory: CVE-2013-4396: Use after free in Xserver handling of ImageText requests (Alan Coopersmith <alan.coopersmith@...cle.com>)
Source of bad password hashing practices? MySQL manual... (Rich Felker <dalias@...ifal.cx>)

October 9 (10 messages)

Re: Source of bad password hashing practices? MySQL manual... (gremlin@...mlin.ru)
Re: Source of bad password hashing practices? MySQL manual... (Alex Gaynor <alex.gaynor@...il.com>)
Re: Source of bad password hashing practices? MySQL manual... (Raphael Geissert <geissert@...ian.org>)
CVE Request - Slim 1.3.6 fixes a security issue ("mancha" <mancha1@...h.com>)
Re: Vulnerability Reported in my Ruby Gem (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request - Slim 1.3.6 fixes a security issue (Kurt Seifried <kseifried@...hat.com>)
CVE Request - Quassel IRC SQL injection (Bas Pape <baspape@...il.com>)
Re: Source of bad password hashing practices? MySQL manual... (Seth Arnold <seth.arnold@...onical.com>)
RE: Source of bad password hashing practices? MySQL manual... ("Christey, Steven M." <coley@...re.org>)
Re: Source of bad password hashing practices? MySQL manual... (Chris Palmer <snackypants@...il.com>)

October 10 (23 messages)

Re: Source of bad password hashing practices? MySQL manual... (Kurt Seifried <kseifried@...hat.com>)
CVE-2013-4402 GnuPG infinite recursion in the compressed packet parser (Solar Designer <solar@...nwall.com>)
Re: Source of bad password hashing practices? MySQL manual... (Jeremy Stanley <fungi@...goth.org>)
Integer overflow in libtar (<= 1.2.19) (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
2 CVE's to be rejected (Kurt Seifried <kseifried@...hat.com>)
Re: Integer overflow in libtar (<= 1.2.19) (Naufragium Est <naufragium.est@...il.com>)
Re: 2 CVE's to be rejected (cve-assign@...re.org)
Re: Integer overflow in libtar (<= 1.2.19) (Chris Palmer <snackypants@...il.com>)
Re: 2 CVE's to be rejected (Kurt Seifried <kseifried@...hat.com>)
Xen Security Advisory 67 (CVE-2013-4368) - Information leak through outs instruction emulation (Xen.org security team <security@....org>)
Xen Security Advisory 68 (CVE-2013-4369) - possible null dereference when parsing vif ratelimiting info (Xen.org security team <security@....org>)
Xen Security Advisory 70 (CVE-2013-4371) - use-after-free in libxl_list_cpupool under memory pressure (Xen.org security team <security@....org>)
Xen Security Advisory 69 (CVE-2013-4370) - misplaced free in ocaml xc_vcpu_getaffinity stub (Xen.org security team <security@....org>)
Xen Security Advisory 71 (CVE-2013-4375) - qemu disk backend (qdisk) resource leak (Xen.org security team <security@....org>)
CVE Request: dropbear sshd daemon 2013.59 release (Marcus Meissner <meissner@...e.de>)
Re: RESEND: CVE Request: pwgen (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: dropbear sshd daemon 2013.59 release (Matt Johnston <matt@....asn.au>)
Re: CVE request: mahara 1.7.3 (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request: dropbear sshd daemon 2013.59 release (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE Request: dropbear sshd daemon 2013.59 release (Kurt Seifried <kseifried@...hat.com>)
libtar: missing validation of file names (Naufragium Est <naufragium.est@...il.com>)
Re: Vulnerability in Webkit-GTK and PulseAudio volume handling (Colin Guthrie <gmane@...in.guthr.ie>)
Re: RESEND: CVE Request: pwgen (Michael Samuel <mik@...net.net>)

October 11 (14 messages)

RE: 2 CVE's to be rejected ("Christey, Steven M." <coley@...re.org>)
Re: CVE request: mahara 1.7.3 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request - Quassel IRC SQL injection (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: dropbear sshd daemon 2013.59 release (Kurt Seifried <kseifried@...hat.com>)
Re: RE: 2 CVE's to be rejected (Kurt Seifried <kseifried@...hat.com>)
Re: Re: browser document.cookie DoS vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: [pulseaudio-discuss] Vulnerability in Webkit-GTK and PulseAudio volume handling ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: libtar: missing validation of file names (Kurt Seifried <kseifried@...hat.com>)
Re: [pulseaudio-discuss] Vulnerability in Webkit-GTK and PulseAudio volume handling (Xabier Rodríguez Calvar <calvaris@...il.com>)
Re: Re: [pulseaudio-discuss] Vulnerability in Webkit-GTK and PulseAudio volume handling ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: CVE Request - Quassel IRC SQL injection (Bas Pape <baspape@...il.com>)
Re: Re: browser document.cookie DoS vulnerability (aaron guzman <aaron23yankees@...il.com>)
Re: Re: browser document.cookie DoS vulnerability (Joel Weinberger <jww@...omium.org>)
CVE request for saltstack minion identity usurpation (Michael Scherer <misc@...b.org>)

October 12 (4 messages)

Re: CVE Request: dropbear sshd daemon 2013.59 release (Matt Johnston <matt@....asn.au>)
Re: RESEND: CVE Request: pwgen (Solar Designer <solar@...nwall.com>)
Re: Re: browser document.cookie DoS vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request - Quassel IRC SQL injection (Kurt Seifried <kseifried@...hat.com>)

October 14 (3 messages)

CVE request: xss in XHProf (Murray McAllister <mmcallis@...hat.com>)
Re: Re: browser document.cookie DoS vulnerability (Murray McAllister <mmcallis@...hat.com>)
Re: CVE Request : poppler < 0.13.0 (Marcus Meissner <meissner@...e.de>)

October 15 (9 messages)

Re: CVE request: mahara 1.7.3 (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: pyxtrlock (Leon Weber <leon@...nweber.de>)
Re: browser document.cookie DoS vulnerability (cve-assign@...re.org)
Report - Stack-based buffer overflow and memory disclosure in camera driver (CVE-2013-4748 CVE-2013-4739) (Jonathan Salwan <jonathan.salwan@...il.com>)
Re: CVE request: pyxtrlock (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: pyxtrlock (Leon Weber <leon@...nweber.de>)
Re: CVE request: pyxtrlock (Kurt Seifried <kseifried@...hat.com>)
CVE request for a vulnerability in OpenStack Glance (Thierry Carrez <thierry@...nstack.org>)
Re: CVE request: pyxtrlock (cve-assign@...re.org)

October 16 (18 messages)

WebTester 5.x Multiple Vulnerabilities (X-Cisadane <stefanus_dp@...il.com>)
Re: Request for linux-distros@...openwall.org membership (Solar Designer <solar@...nwall.com>)
Re: Request for linux-distros@...openwall.org membership (Salvatore Bonaccorso <carnil@...ian.org>)
Re: WebTester 5.x Multiple Vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: Re: browser document.cookie DoS vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request : poppler < 0.13.0 (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE request: mahara 1.7.3 (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE request: pyxtrlock (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for a vulnerability in OpenStack Glance (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: xss in XHProf (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: dropbear sshd daemon 2013.59 release (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for saltstack minion identity usurpation (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for saltstack minion identity usurpation (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for saltstack minion identity usurpation (Kurt Seifried <kseifried@...hat.com>)
Re: RESEND: CVE Request: pwgen (Kurt Seifried <kseifried@...hat.com>)
Re: browser document.cookie DoS vulnerability (cve-assign@...re.org)
Possible DoS Vulnerability in Action Mailer (CVE-2013-4389) (Aaron Patterson <tenderlove@...y-lang.org>)
CVE request: slapd segfaults on certain queries with rwm overlay enabled (Vincent Danen <vdanen@...hat.com>)

October 17 (4 messages)

CVE request: echoping buffer overflow vulnerabilities (Sergey Popov <pinkbyte@...too.org>)
Re: browser document.cookie DoS vulnerability (cve-assign@...re.org)
CVE-2013-1445 python-crypto: PRNG not correctly reseeded in some situations (Dwayne Litzenberger <dlitz@...tz.net>)
Re: browser document.cookie DoS vulnerability (Mozilla Security <security@...illa.org>)

October 18 (6 messages)

Re: RESEND: CVE Request: pwgen (Michael Samuel <mik@...net.net>)
CVE-2013-4419: libguestfs insecure handling of socket file (Vincent Danen <vdanen@...hat.com>)
Re: CVE request for saltstack minion identity usurpation (Kurt Seifried <kseifried@...hat.com>)
Re: CVE duplicates SA-CONTRIB-2013-075 (Forest Monsen <forest.monsen@...il.com>)
CVE request for Drupal contributed modules (Forest Monsen <forest.monsen@...il.com>)
qpdf 5.0.1 has some security fixes (Jay Berkenbilt <ejb@...org>)

October 19 (4 messages)

Re: CVE request for Drupal contributed modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: echoping buffer overflow vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: slapd segfaults on certain queries with rwm overlay enabled (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Node.js HTTP Pipelining DoS (Jonathan Rudenberg <jonathan@...anous.com>)

October 20 (1 message)

Re: CVE Request: Node.js HTTP Pipelining DoS (Kurt Seifried <kseifried@...hat.com>)

October 21 (13 messages)

CVE Request: gitolite world writable files for fresh installs of v3.5.3 (Sitaram Chamarty <sitaramc@...il.com>)
Re: CVE request: echoping buffer overflow vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE duplicates SA-CONTRIB-2013-075 (Henri Salo <henri@...v.fi>)
CVE for Wordpress plugin Portable-phpmyadmin (Anant Shrivastava <anant@...ntshri.info>)
RE: Re: CVE duplicates SA-CONTRIB-2013-075 ("Christey, Steven M." <coley@...re.org>)
CVE request: cmsmadesimple before 1.11.8 / bad upstream behaviour vs. CVE assignment (Hanno Böck <hanno@...eck.de>)
Re: [pulseaudio-discuss] Vulnerability in Webkit-GTK and PulseAudio volume handling ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: Re: CVE duplicates SA-CONTRIB-2013-075 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: echoping buffer overflow vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE for Wordpress plugin Portable-phpmyadmin (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: gitolite world writable files for fresh installs of v3.5.3 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: cmsmadesimple before 1.11.8 / bad upstream behaviour vs. CVE assignment (Kurt Seifried <kseifried@...hat.com>)
CVE Request: LDAP Account Manager XSS in login.php (Salvatore Bonaccorso <carnil@...ian.org>)

October 22 (14 messages)

Re: CVE for Wordpress plugin Portable-phpmyadmin (Anant Shrivastava <anant@...ntshri.info>)
Re: CVE Request: LDAP Account Manager XSS in login.php (Kurt Seifried <kseifried@...hat.com>)
Re: CVE for Wordpress plugin Portable-phpmyadmin (Kurt Seifried <kseifried@...hat.com>)
[OSSA 2013-027] Glance image_download policy not enforced for cached images (CVE-2013-4428) (Thierry Carrez <thierry@...nstack.org>)
CVE Request: MantisBT before 1.2.16 XSS vulnerability (Damien Regad <dregad@...tisbt.org>)
CVE request: WebKit-GTK + Puseaudio: unexpectedly high sound volume ("Alexander E. Patrakov" <patrakov@...il.com>)
CVE Request: lightdm no longer confines guest profile with AppArmor (Marc Deslauriers <marc.deslauriers@...onical.com>)
CVE Request: Simple Machines Forum (SMF) Remote file inclusion vulnerability (Kevin Pawloski <Kevin.Pawloski@...andmedia.com>)
Re: CVE for Wordpress plugin Portable-phpmyadmin (security curmudgeon <jericho@...rition.org>)
Recursive Interpolation Vulnerability in Cocaine rubygem (CVE-2013-4457) (Jon Yurek <jyurek@...ughtbot.com>)
Re: RESEND: CVE Request: pwgen (Solar Designer <solar@...nwall.com>)
CVE request: another glibc flaw, similar to CVE-2013-1914, but in AF_INET6 (Vincent Danen <vdanen@...hat.com>)
Re: Re: CVE duplicates SA-CONTRIB-2013-075 (Forest Monsen <forest.monsen@...il.com>)
Re: RESEND: CVE Request: pwgen (Michael Samuel <mik@...net.net>)

October 23 (10 messages)

Re: RESEND: CVE Request: pwgen (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE for Wordpress plugin Portable-phpmyadmin (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: lightdm no longer confines guest profile with AppArmor (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: another glibc flaw, similar to CVE-2013-1914, but in AF_INET6 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: lightdm no longer confines guest profile with AppArmor (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE Request: Simple Machines Forum (SMF) Remote file inclusion vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: MantisBT before 1.2.16 XSS vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: lightdm no longer confines guest profile with AppArmor (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE for Wordpress plugin Portable-phpmyadmin (Anant Shrivastava <anant@...ntshri.info>)
VICIDIAL 2.7 - SQL Injection, Command Injection (Adam Caudill <adam@...mcaudill.com>)

October 24 (3 messages)

Re: Re: CVE for Wordpress plugin Portable-phpmyadmin (Kurt Seifried <kseifried@...hat.com>)
CVE Request: gnutls/libdane buffer overflow (Marcus Meissner <meissner@...e.de>)
CVE Request: Simple Machines Forum (SMF) Remote file inclusion vulnerability (Kevin Pawloski <kpawloski@...il.com>)

October 25 (6 messages)

Re: VICIDIAL 2.7 - SQL Injection, Command Injection (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: gnutls/libdane buffer overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Simple Machines Forum (SMF) Remote file inclusion vulnerability (Kurt Seifried <kseifried@...hat.com>)
CVE request: Linux kernel: net: memory corruption with UDP_CORK and UFO (P J P <ppandit@...hat.com>)
Re: CVE request: Linux kernel: net: memory corruption with UDP_CORK and UFO (Kurt Seifried <kseifried@...hat.com>)
[Notification] CVE-2013-6047: ikiwiki-hosting: XSS in site creation interface (Salvatore Bonaccorso <carnil@...ian.org>)

October 26 (1 message)

CVE request: 3 vulnerabilities in poppler and 1 in Xpdf (Pedro Ribeiro <pedrib@...il.com>)

October 28 (1 message)

Re: CVE Request: libxml2 external parsed entities issue (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)

October 29 (9 messages)

Re: CVE request: 3 vulnerabilities in poppler and 1 in Xpdf (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: libxml2 external parsed entities issue (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request: libxml2 external parsed entities issue (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
CVE request for a vulnerability in OpenStack Keystone (Thierry Carrez <thierry@...nstack.org>)
Xen Security Advisory 72 (CVE-2013-4416) - ocaml xenstored mishandles oversized message replies (Xen.org security team <security@....org>)
Re: CVE Request: libxml2 external parsed entities issue (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for a vulnerability in OpenStack Keystone (Kurt Seifried <kseifried@...hat.com>)
CVE Request: sup MUA Command Injection (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE Request: sup MUA Command Injection (Kurt Seifried <kseifried@...hat.com>)

October 30 (6 messages)

Re: CVE Request: sup MUA Command Injection (Murray McAllister <mmcallis@...hat.com>)
Re: CVE Request: sup MUA Command Injection (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- Linux kernel: ipc: ipc_rcu_putref refcount races (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- Linux kernel: ipc: ipc_rcu_putref refcount races (Kurt Seifried <kseifried@...hat.com>)
Re: CVE number needed for Varnish DoS, also heads-up (Kurt Seifried <kseifried@...hat.com>)
[OSSA 2013-028] Unintentional role granting with Keystone LDAP backend (CVE-2013-4477) (Thierry Carrez <thierry@...nstack.org>)

October 31 (5 messages)

CVE Request (Radhesh Krishnan K <radheshkrishnank@...il.com>)
Re: CVE Request: gnutls/libdane buffer overflow (Tomas Hoger <thoger@...hat.com>)
[OSSA 2013-029] Potential Nova denial of service through compressed disk images (CVE-2013-4463, CVE-2013-4469) (Thierry Carrez <thierry@...nstack.org>)
Re: CVE Request: gnutls/libdane buffer overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request (Kurt Seifried <kseifried@...hat.com>)

203 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.