oss-sec mailing list archives
Re: RE: Handling CVEs for the XML entity expansion issues
From: Kurt Seifried <kseifried () redhat com>
Date: Wed, 20 Feb 2013 17:33:27 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 02/20/2013 05:28 PM, Christey, Steven M. wrote:
Kurt, This is a big and complicated scenario. I will *privately* send you the draft that I'm working on right now. Sorry to the rest of the list - but the combination of new vuln types, "DoS" debates, libraries, and missing details have all combined to make this rather complicated. We will post something that should help address these specific situations, and others in the foreseeable future. I hope to do this within 24 hours.
Yeah, I sort of knew it was a live hand grenade which is why I handed it off to you (and you jumped on that hand grenade like a champ =).
- Steve
- -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) iQIcBAEBAgAGBQJRJWtXAAoJEBYNRVNeJnmThvUQAIJeCp8KiPsQgJb3d/jdD7kJ IWeYy7hXpAfEBAkAoz79y45OTFfdx2qf75ABDhYFgbKBZQLaAhrxVZN8sXC7PnMa gUOeK88UzuJ/I4DvLfAGNiTOBbegN7nBEOaTyXShZ4EKWjGj9kMSRk4jKJRTHh6I lsrGEAHGyB68pph8yJjdRJhwcgam+jvphvNh40dHYrrmRzrxowAb0JUH71Q2CaqE jwFqZROTF9h4+p6S/JXy1y2s06pEcoTWWkSOtQnTc8BTDu5d1bIm0xMsnHl03Wz5 CLIzoNOWwdg16hHV01FvaGKAxGZNjpOkCUfTXVpw4ll3B9cff5Je11MByxjzypZD TjUM5VtdH82/Fnu7BFhG1PPbupCXWnGrP7+o1rbw5g8p8bwWBrNEIfmpfKef0h5w BIDf+F+YrBrePmxA6a6DweR8OxwAN2h9WF9ANhc4GoT26qKFjLZ4BuSvfVjdAXSl vZ46vilBF2OiQ4DjGtZjIEUK2PmWGFaCPM784PoL09YYiEZ8yPLcH9osAmswsoDZ FTEsT6m16GR8tn8Ur5l6ITNb0/wCl2lkY8QBA+lFX1GO1FfACO6P/q6ymrjhxPKg e4/R726e+y3MVIGrxdj9NEI6sQ1b+irQHEiSiPo3olkW0MoSb8HEPDqf+pPnD1Mf 7neX7sFvORC/6K5Jhw1X =1bLk -----END PGP SIGNATURE-----
Current thread:
- Handling CVEs for the XML entity expansion issues Kurt Seifried (Feb 20)
- RE: Handling CVEs for the XML entity expansion issues Christey, Steven M. (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Tim (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Kurt Seifried (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Tim (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Kurt Seifried (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Tim (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Tim (Feb 20)
- RE: Handling CVEs for the XML entity expansion issues Christey, Steven M. (Feb 20)
- RE: RE: Handling CVEs for the XML entity expansion issues Christey, Steven M. (Feb 20)
- Re: RE: Handling CVEs for the XML entity expansion issues Kurt Seifried (Feb 20)