[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <ZYVufT0sq16Z-M43@symphytum.spacehopper.org>
Date: Fri, 22 Dec 2023 11:09:49 +0000
From: Stuart Henderson <stu@...cehopper.org>
To: oss-security@...ts.openwall.com
Subject: Re: Re: New SMTP smuggling attack
On 2023/12/22 11:46, Marcus Meissner wrote:
> Hi,
>
> FWIW as no CVEs were to be found yet, I filed a CVE request for Postfix now.
>
> Not sure if we need it for others like sendmail too, as that is also
> referenced by the security researchers.
I'm a little confused by sec-consult's process here. They identify a
problem affecting various pieces of software including some very widely
deployed open source software, go to the trouble of doing a coordinated
disclosure, but only do that with...looking at their timeline... gmx,
microsoft and cisco?
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
