oss-security - Re: Re: collectd security contact

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CACYkhxjdO=94++PWErZyMRzj4jW3JB8XaqXbt82d1-=PWGwtrg@mail.gmail.com>
Date: Fri, 31 Jan 2014 13:03:58 +1100
From: Michael Samuel <mik@...net.net>
To: oss-security@...ts.openwall.com
Cc: Florian octo Forster <octo@...plant.org>, sh@...kee.org
Subject: Re: Re: collectd security contact

Thanks for the responses, I've sent the details over to octo.

Sebastian - I think the reference to ovsdb was not the old vulnerability,
but that the contact details are all empty.

Regards,
  Michael


On 30 January 2014 20:58, Sebastian Harl <sh@...kee.org> wrote:

> Hi,
>
> > On 01/29/2014 02:28 PM, Michael Samuel wrote:
> > > Hi,
> > >
> > > Does anyone here know who the security contact for collectd is?
> > >
> > > Thanks, Michael
> > >
> >
> > - From AUTHORS file:
> >
> > Permanent project members
> > =========================
> >
> > Florian "octo" Forster <octo at verplant.org>
> >  - Initial author.
> >
> > Sebastian "tokkee" Harl <sh at tokkee.org>
> >  - Bugfixes and enhancments in many places all around the project.
> >  - perl plugin.
> >  - users plugin.
> >  - vserver plugin.
> >  - Debian package.
> >
> > so one of them would be my guess.
>
> Yup, we're good candidates for that :-)
>
> > If you figure it out can you send an
> > update to:
> >
> > http://osvdb.org/vendor/89051-collectd/1
>
> This seems to be fixed long ago. Is there anything else that should be
> done?
>
> Cheers,
> Sebastian
>
> PS: Please Cc me on replies, I'm not on this list.
>
> --
> Sebastian "tokkee" Harl +++ GnuPG-ID: 0x8501C7FC +++ http://tokkee.org/
>
> Those who would give up Essential Liberty to purchase a little Temporary
> Safety, deserve neither Liberty nor Safety.         -- Benjamin Franklin
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> iEYEARECAAYFAlLqIk8ACgkQEFEKc4UBx/wQ0gCfX7JD/vmuWxEYdKBmkKDZFEb8
> JgcAn3NF69RCN0gFU4zz5SRRK5JNFUGI
> =xYzV
> -----END PGP SIGNATURE-----
>
>

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.