full-disclosure - Re: [ MDKSA-2007:101 ] - Updated bind packages fix vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <46426CC3.4070405@spaghetti.zurich.ibm.com>
Date: Thu, 10 May 2007 01:52:19 +0100
From: Jeroen Massar <jeroen@...ix.org>
To: xsecurity@...driva.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [ MDKSA-2007:101 ] - Updated bind packages
 fix	vulnerability

security@...driva.com wrote:
>  _______________________________________________________________________
> 
>  Mandriva Linux Security Advisory                         MDKSA-2007:101
>  http://www.mandriva.com/security/
>  _______________________________________________________________________
> 
>  Package : vim
>  Date    : May 9, 2007
>  Affected: 2007.0, 2007.1

But the subject line reads:

[ MDKSA-2007:101 ] - Updated bind packages fix vulnerability

So is this a spoof or is this a spoof?
Or did somebody make a booboo at Mandriva. The PGP key seems to at least
check out for the fact that the signature on the part of the message
that is signed is correct. As the PGP key is not in the strong set it
can't be really trusted of course.

Greets,
 Jeroen

Download attachment "signature.asc" of type "application/pgp-signature" (312 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/