oss-sec mailing list archives

Re: SaltStack 2014.1.10 released


From: gremlin () gremlin ru
Date: Thu, 21 Aug 2014 21:13:05 +0400

On 21-Aug-2014 20:44:19 +0400, I wrote:

Did anyone else have this message fail to render in their email
client (I get a blank panel with the .sig attachment at the
bottom using Thunderbird/Enigmail/Fedora).
I use mutt, and it tells me everything is ok:
http://pics.rsh.ru/img/kurt_signature_in_mutt_bgxvgqe3.png

I had to read that more carefully (to be honest, messages from Kurt
were signed inline for a time)... Yes, the message from C. R. Oldham
was malformed: http://pics.rsh.ru/img/cr_bad_message_sz46z1tq.png

Here's raw message data, including significant headers:

X-Mailer: Airmail Beta (250)
MIME-Version: 1.0
Content-Type: multipart/signed;
 boundary="78CE6B75-3942-4514-B1F6-81C3B83FC90E";
 protocol="application/pgp-signature"; micalg=pgp-sha512
Content-Disposition: inline
Subject: [oss-security] SaltStack 2014.1.10 released
Status: RO
Content-Length: 1416
Lines: 39


http://docs.saltstack.com/en/latest/topics/releases/2014.1.10.html =20

The sources are available on pypi: =20

https://pypi.python.org/pypi/salt/2014.1.10 =20

Salt 2014.1.10 fixes security issues documented by CVE-2014-3563: =22Inse=
cure tmp-file creation in seed.py, salt-ssh, and salt-cloud.=22 Upgrading=
 is recommended. =20


-- =20
C. R. Oldham, Platform Engineer, SaltStack
cr=40saltstack.com


--78CE6B75-3942-4514-B1F6-81C3B83FC90E
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename=signature.asc
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Message signed with OpenPGP using AMPGpg

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

...
-----END PGP SIGNATURE-----

--78CE6B75-3942-4514-B1F6-81C3B83FC90E--


-- 
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru>
GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net

Attachment: _bin
Description:


Current thread: