Re: new OpenSSL flaws

2014-06-07 Thread Giancarlo Razzolini
Em 07-06-2014 00:04, Solar Designer escreveu: tools and ethics are separate things It seems like you got to the real issue now. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: new OpenSSL flaws

2014-06-07 Thread Francois Ambrosini
On Sat, 7 Jun 2014 07:04:47 +0400 Solar Designer so...@openwall.com wrote: To clarify and for the record: Being on the distros list is not mandatory to receive advance notification of security issues. The list is just a tool. People reporting security issues to the distros list are

Re: fun with smtpd, (two bugs)

2014-06-07 Thread Clint Pachl
Jason McIntyre wrote, On 05/15/14 13:54: the man page sates that: Both auth and auth-optional accept an optional table as a parameter. When provided, credentials are looked up in this table. but reading the new smtpd.conf(5) gives the impression that authtable is mandatory. I haven't

Re: fun with smtpd, (two bugs)

2014-06-07 Thread Jason McIntyre
On Sat, Jun 07, 2014 at 12:22:35AM -0700, Clint Pachl wrote: Jason McIntyre wrote, On 05/15/14 13:54: the man page sates that: Both auth and auth-optional accept an optional table as a parameter. When provided, credentials are looked up in this table. but reading the new

Re: fun with smtpd, (two bugs)

2014-06-07 Thread Clint Pachl
Jason McIntyre wrote, On 06/07/14 00:51: On Sat, Jun 07, 2014 at 12:22:35AM -0700, Clint Pachl wrote: Jason McIntyre wrote, On 05/15/14 13:54: the man page sates that: Both auth and auth-optional accept an optional table as a parameter. When provided, credentials are looked up in this

Re: new OpenSSL flaws

2014-06-07 Thread Solar Designer
On Sat, Jun 07, 2014 at 09:13:36AM +0200, Francois Ambrosini wrote: On Sat, 7 Jun 2014 07:04:47 +0400 Solar Designer so...@openwall.com wrote: Being on the distros list is not mandatory to receive advance notification of security issues. The list is just a tool. People reporting

Re: ANONCVS MIRROR MAINTAINERS PLEASE READ!

2014-06-07 Thread Stuart Henderson
On 2014/06/07 01:02, Alexander Hall wrote: If you use a scanfile, it should be removed and re-created when updating. If I update my package before my upstream does, do I have to keep removing the scanfile (or disable it) until the upstream mirror has been fully fixed too? Sorry I have no

Re: ANONCVS MIRROR MAINTAINERS PLEASE READ!

2014-06-07 Thread Stuart Henderson
An additional note: this doesn't just apply to mirror maintainers. If you are using cvsync to update a local repository, you need the updated version of cvsync too.

Re: [PATCH] Atheros AR9281 miniPCI-E new product id 2nd try

2014-06-07 Thread mijenix
Hi Not sure if of any interest, but here is a lspic -vvvxxx output from the card under Linux 3.14.5: 05:00.0 Network controller: Qualcomm Atheros AR928X Wireless Network Adapter (PCI-Express) (rev 01) Subsystem: Qualcomm Atheros Device 3099 Control: I/O- Mem+ BusMaster+

Re: clean/portable crypto code...

2014-06-07 Thread Joel Sing
On Sat, 7 Jun 2014, John-Mark Gurney wrote: Hello, I've been doing some work recently on crypto code, and noticed that there aren't many/any good clean implementations of performant crypto code out there (or maybe I just don't know of them). Both OpenSSL's and NSS's code has issues w/