oss-security mailing list - 2024/03

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2024/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 5	²	³
⁴ 2	⁵ 1	⁶ 3	⁷ 3	⁸ 4	⁹ 5	¹⁰ 2
¹¹ 2	¹² 16	¹³ 5	¹⁴ 3	¹⁵ 1	¹⁶	¹⁷
¹⁸ 2	¹⁹ 2	²⁰ 5	²¹ 2	²² 2	²³ 1	²⁴ 3
²⁵ 2	²⁶ 2	²⁷ 9	²⁸ 3	²⁹ 33	³⁰ 47	³¹ 13

Messages by day:

March 1 (5 messages)

CVE-2024-26280: Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs) (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2024-27140: Apache Archiva: reflected XSS (Arnout Engelen <engelen@...che.org>)
CVE-2024-27139: Apache Archiva: incorrect authentication potentially leading to account takeover (Arnout Engelen <engelen@...che.org>)
CVE-2024-27138: Apache Archiva: disabling user registration is not effective (Arnout Engelen <engelen@...che.org>)
CVE-2023-50378: Apache Ambari: Various XSS problems (Brahma Reddy Battula <brahma@...che.org>)

March 4 (2 messages)

Django: CVE-2024-27351: Potential regular expression denial-of-service in django.utils.text.Truncator.words() (Mariusz Felisiak <felisiak.mariusz@...il.com>)
dnf5daemon-server: Local root Exploit and Local Denial-of-Service in dnf5 D-Bus Components (CVE-2024-1929, CVE-2024-1930) (Matthias Gerstner <mgerstner@...e.de>)

March 5 (1 message)

HNS-2024-05 - HN Security Advisory - Multiple vulnerabilities in RT-Thread RTOS (Marco Ivaldi <raptor@...eadbeef.info>)

March 6 (3 messages)

CVE-2024-26580: Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-50740: Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged (Heping Wang <peacewong@...che.org>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)

March 7 (3 messages)

help wanted - bring more issues in here (Solar Designer <solar@...nwall.com>)
Re: help wanted - bring more issues in here (Katherine Mcmillan <kmcmi046@...tawa.ca>)
OSSN-0093: Unresolved Vulnerability in OpenStack Murano (Jeremy Stanley <fungi@...goth.org>)

March 8 (4 messages)

Re: help wanted - bring more issues in here (Alan Coopersmith <alan.coopersmith@...cle.com>)
Vulnerabilties in FontTools & FontForge (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: help wanted - bring more issues in here (Solar Designer <solar@...nwall.com>)
5 CVEs fixed in Go 1.22.1 and Go 1.21.8, 1 CVE fixed in google.golang.org/protobuf (Alan Coopersmith <alan.coopersmith@...cle.com>)

March 9 (5 messages)

Re: Vulnerabilties in FontTools & FontForge (Hanno Böck <hanno@...eck.de>)
Re: help wanted - bring more issues in here (nightmare.yeah27@...ecat.org)
Re: help wanted - bring more issues in here (Solar Designer <solar@...nwall.com>)
Re: help wanted - bring more issues in here (Miguel Suarez <suarezmiguelc@...oud.com>)
Re: help wanted - bring more issues in here (Solar Designer <solar@...nwall.com>)

March 10 (2 messages)

Re: help wanted - bring more issues in here (Bernd Zeimetz <bernd@...d.de>)
CVE-2023-41313: Apache Doris: Timing Attack weakness (Mingyu Chen <morningman@...che.org>)

March 11 (2 messages)

NodeJS v{18.x,20.x,21.x} February Security Updates (suarezmiguelc@...oud.com)
Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday (Valtteri Vuorikoski <vuori@...com.org>)

March 12 (16 messages)

Re: Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday (Demi Marie Obenour <demi@...isiblethingslab.com>)
CVE-2023-51786: Lustre: incorrect access control resulting in potential data compromise or privilege escalation (daniel <sd@....eu>)
Re: Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday (Armin Kuster <akuster@...sta.com>)
Re: Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday ("David W. Hodgins" <davidwhodgins@...il.com>)
[ADVISORY] CVE-2024-2182: Open Virtual Network: Insufficient validation of incoming BFD packets. (Dumitru Ceara <dceara@...hat.com>)
Re: Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday (Valtteri Vuorikoski <vuori@...com.org>)
Re: Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday (Valtteri Vuorikoski <vuori@...com.org>)
CVE-2022-34321: Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint (Lari Hotari <lhotari@...che.org>)
CVE-2024-27135: Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution (Lari Hotari <lhotari@...che.org>)
CVE-2024-27317: Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modificatio… (Lari Hotari <lhotari@...che.org>)
CVE-2024-27894: Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying (Lari Hotari <lhotari@...che.org>)
CVE-2024-28098: Apache Pulsar: Improper Authorization For Topic-Level Policy Management (Lari Hotari <lhotari@...che.org>)
Xen Security Advisory 452 v1 (CVE-2023-28746) - x86: Register File Data Sampling (Xen.org security team <security@....org>)
Xen Security Advisory 453 v1 (CVE-2024-2193) - GhostRace: Speculative Race Conditions (Xen.org security team <security@....org>)
Public Review Period for CVE rules (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Certificate policy: OCSP becomes optional and CRLs mandatory for public CAs on Friday (Steffen Nurpmeso <steffen@...oden.eu>)

March 13 (5 messages)

Re: CVEs issued by the Linux kernel CNA (Vegard Nossum <vegard.nossum@...cle.com>)
Re: CVE-2021-31618: Apache httpd: NULL pointer dereference on specially crafted HTTP/2 request (Christian Fischer <christian.fischer@...enbone.net>)
CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS (Mark Thomas <markt@...che.org>)
CVE-2024-23672: Apache Tomcat: WebSocket DoS with incomplete closing handshake (Mark Thomas <markt@...che.org>)
CVE-2024-28746: Apache Airflow: Ignored Airflow Permissions (Ephraim Anierobi <ephraimanierobi@...che.org>)

March 14 (3 messages)

OSSN-0093: [OpenStack Murano] Unsafe Environment Handling in MuranoPL (Jeremy Stanley <fungi@...goth.org>)
CVE-2024-23944: Apache ZooKeeper: Information disclosure in persistent watcher handling (Andor Molnar <andor@...che.org>)
CVE-2024-28752: Apache CXF SSRF Vulnerability using the Aegis databinding (Colm O hEigeartaigh <coheigea@...che.org>)

March 15 (1 message)

Expat 2.6.2 released, includes security fixes (Alan Coopersmith <alan.coopersmith@...cle.com>)

March 18 (2 messages)

CVE-2024-24683: Apache Hop Engine: ID isn't escaped when generating HTML (Hans Van Akelyen <hansva@...che.org>)
5 Linux kernel ksmbd vulnerabilities (daniel <sd@....eu>)

March 19 (2 messages)

Re: 5 Linux kernel ksmbd vulnerabilities ("Alexander E. Patrakov" <patrakov@...il.com>)
CVE-2024-27439: Apache Wicket: Possible bypass of CSRF protection (Emond Papegaaij <papegaaij@...che.org>)

March 20 (5 messages)

Re: 5 Linux kernel ksmbd vulnerabilities (Hauke Mehrtens <hauke@...ke-m.de>)
Vulnerability in Jenkins (Daniel Beck <ml@...kweb.net>)
CVE-2024-29133: Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with… ("Gary D. Gregory" <ggregory@...che.org>)
CVE-2024-29131: Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flatte… ("Gary D. Gregory" <ggregory@...che.org>)
Security fixes in Python 3.10.14, 3.9.19, and 3.8.19 (CVE-2023-6597 & CVE-2024-0450) (Alan Coopersmith <alan.coopersmith@...cle.com>)

March 21 (2 messages)

CVE-2024-27438: Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution (Mingyu Chen <morningman@...che.org>)
CVE-2024-26307: Apache Doris: Possible race condition (Mingyu Chen <morningman@...che.org>)

March 22 (2 messages)

GnuTLS 3.8.4 released, fixes CVE-2024-28834 & CVE-2024-28835 (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: GnuTLS 3.8.4 released, fixes CVE-2024-28834 & CVE-2024-28835 (Alex Gaynor <alex.gaynor@...il.com>)

March 23 (1 message)

Firefox 124.0.1 fixes two critical JavaScript engine vulnerabilities (Solar Designer <solar@...nwall.com>)

March 24 (3 messages)

GNU emacs 29.3 released to fix security issues (Alan Coopersmith <alan.coopersmith@...cle.com>)
Fwd: GNU emacs 29.3 released to fix security issues (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: [External] : Fwd: GNU emacs 29.3 released to fix security issues (Alan Coopersmith <alan.coopersmith@...cle.com>)

March 25 (2 messages)

Re: GNU emacs 29.3 released to fix security issues (Salvatore Bonaccorso <carnil@...ian.org>)
Re: GNU emacs 29.3 released to fix security issues (Salvatore Bonaccorso <carnil@...ian.org>)

March 26 (2 messages)

WebKitGTK and WPE WebKit Security Advisory WSA-2024-0002 (Adrian Perez de Castro <aperez@...lia.com>)
CVE-2024-29735: Apache Airflow: Potentially harmful permission changing by log task handler (Jarek Potiuk <potiuk@...che.org>)

March 27 (9 messages)

[SECURITY ADVISORY] curl: CVE-2024-2004: Usage of disabled protocol (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: CVE-2024-2379: QUIC certificate check bypass with wolfSSL (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: CVE-2024-2398: HTTP/2 push headers memory-leak (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: CVE-2024-2466: TLS certificate check bypass with mbedTLS (Daniel Stenberg <daniel@...x.se>)
CVE-2024-28085: Escape sequence injection in util-linux wall ("Skyler Ferrante (RIT Student)" <sjf5462@....edu>)
Re: CVE-2024-28085: Escape sequence injection in util-linux wall (nightmare.yeah27@...ecat.org)
Re: CVE-2024-28085: Escape sequence injection in util-linux wall (Jakub Wilk <jwilk@...lk.net>)
Re: CVE-2024-28085: Escape sequence injection in util-linux wall (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: CVE-2024-28085: Escape sequence injection in util-linux wall (Solar Designer <solar@...nwall.com>)

March 28 (3 messages)

Re: CVE-2024-28085: Escape sequence injection in util-linux wall ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: Re: CVE-2024-28085: Escape sequence injection in util-linux wall (Jakub Wilk <jwilk@...lk.net>)
Re: CVE-2024-28085: Escape sequence injection in util-linux wall (Karel Zak <kzak@...hat.com>)

March 29 (33 messages)

CVE-2024-23537: Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permission… (Arnout Engelen <engelen@...che.org>)
CVE-2024-23538: Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injecti… (Arnout Engelen <engelen@...che.org>)
CVE-2024-23539: Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was v… (Arnout Engelen <engelen@...che.org>)
backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Alex Gaynor <alex.gaynor@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Jeffrey Walton <noloader@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Alex Gaynor <alex.gaynor@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Anthony Liguori <anthony@...emonkey.ws>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Ivan Delalande <colona@....fr>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Matthias Weckbecker <matthias@...kbecker.name>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Vegard Nossum <vegard.nossum@...cle.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Loganaden Velvindron <loganaden@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (sjw@....ch)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (terraminator <terraminator@...tonmail.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Liguori, Anthony" <aliguori@...zon.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Russ Allbery <eagle@...ie.org>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)

March 30 (47 messages)

Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Florian Weimer <fw@...eb.enyo.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (sjw@....ch)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Loganaden Velvindron <loganaden@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Vegard Nossum <vegard.nossum@...cle.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Matthias Weckbecker <matthias@...kbecker.name>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Mike O'Connor" <mjo@...o.mi.org>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Collin Funk <collin.funk1@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Jonathan Schleifer <js@....im>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Bjoern Franke <bjo@...afweide.org>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Pierre-Elliott Bécue <peb@...ian.org>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Bo Anderson <mail@...nderson.me>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Marcin Wolcendorf <antymat@...lmska.waw.pl>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Jeffrey Walton <noloader@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Russ Allbery <eagle@...ie.org>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Jonathan Schleifer <js@....im>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Tavis Ormandy <taviso@...il.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Loganaden Velvindron <loganaden@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Axel Beckert <abe@...xchevaux.org>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Christoph Anton Mitterer <calestyo@...entia.org>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
RE: backdoor in upstream xz/liblzma leading to ssh server compromise (Thomas Ward <teward@...mas-ward.net>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Mats Wichmann <mats@...hmann.us>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Fay Stegerman <flx@...usk.net>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Axel Beckert <abe@...xchevaux.org>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Fay Stegerman <flx@...usk.net>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Rein Fernhout (Levitating)" <me@...itati.ng>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Andres Freund <andres@...razel.de>)

March 31 (13 messages)

Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Jan Engelhardt <jengelh@...i.de>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Pat Gunn <pgunn01@...il.com>)
SV: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Markus Klyver <markusklyver@...mail.com>)
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Loganaden Velvindron <loganaden@...il.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise ("Michael.Karcher" <Michael.Karcher@...berlin.de>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Dominique Martinet <asmadeus@...ewreck.org>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Solar Designer <solar@...nwall.com>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Michael Tokarev <mjt@....msk.ru>)
Re: backdoor in upstream xz/liblzma leading to ssh server compromise (Jeffrey Walton <noloader@...il.com>)

178 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.