oss-sec mailing list archives

Re: Re: CVE-request: systemd-resolved DNS cache poisoning

From: Florian Weimer <fweimer () redhat com>
Date: Mon, 17 Nov 2014 19:45:46 +0100

On 11/14/2014 05:58 PM, Greg KH wrote:

On Fri, Nov 14, 2014 at 09:42:13AM +0100, Sebastian Krahmer wrote:

I'd be happy with no CVE being assigned. At the end I just want to
have the cache hardened.


Which is a fair thing to ask for.  Is that work happening upstream in
the systemd repo?  I haven't seen this issue brought up on the systemd
mailing list, but I might just have missed it.


Fair enough, I posted a pointer:


<http://lists.freedesktop.org/archives/systemd-devel/2014-November/025276.html>

--
Florian Weimer / Red Hat Product Security

Current thread:

CVE-request: systemd-resolved DNS cache poisoning Sebastian Krahmer (Nov 12)
- Re: CVE-request: systemd-resolved DNS cache poisoning Florian Weimer (Nov 12)
  - Re: CVE-request: systemd-resolved DNS cache poisoning Sebastian Krahmer (Nov 12)
- Re: CVE-request: systemd-resolved DNS cache poisoning cve-assign (Nov 12)
  - Re: Re: CVE-request: systemd-resolved DNS cache poisoning Florian Weimer (Nov 13)
    - Re: Re: CVE-request: systemd-resolved DNS cache poisoning Daniel Kahn Gillmor (Nov 13)
    - Re: Re: CVE-request: systemd-resolved DNS cache poisoning Jeremy Stanley (Nov 13)
    - Re: Re: CVE-request: systemd-resolved DNS cache poisoning Sebastian Krahmer (Nov 14)
    - Re: Re: CVE-request: systemd-resolved DNS cache poisoning Greg KH (Nov 14)
    - Re: Re: CVE-request: systemd-resolved DNS cache poisoning Florian Weimer (Nov 17)