From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/7425 Path: news.gmane.org!not-for-mail From: Harald Becker Newsgroups: gmane.linux.lib.musl.general Subject: Re: Re: Security advisory for musl libc - stack-based buffer overflow in ipv6 literal parsing [CVE-2015-1817] Date: Sat, 18 Apr 2015 20:13:50 +0200 Message-ID: <55329EDE.8020204@address4me.eu> References: <20150417131008.GE17615@ucc.gu.uwa.edu.au> <20150417172327.GB6817@brightrain.aerifal.cx> <20150417180325.GC6817@brightrain.aerifal.cx> <20150417180907.GA26856@openwall.com> <20150418133202.GG17615@ucc.gu.uwa.edu.au> <20150418152542.GG6817@brightrain.aerifal.cx> <55327D1F.5070807@gmx.de> <20150418155845.GH6817@brightrain.aerifal.cx> <55328604.4000705@gmx.de> <20150418163702.GI6817@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1429385389 16011 80.91.229.3 (18 Apr 2015 19:29:49 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 18 Apr 2015 19:29:49 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-7438-gllmg-musl=m.gmane.org@lists.openwall.com Sat Apr 18 21:29:46 2015 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1YjYQz-0000kA-Qs for gllmg-musl@m.gmane.org; Sat, 18 Apr 2015 21:29:45 +0200 Original-Received: (qmail 5143 invoked by uid 550); 18 Apr 2015 19:29:44 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 8028 invoked from network); 18 Apr 2015 18:14:02 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 In-Reply-To: <20150418163702.GI6817@brightrain.aerifal.cx> Xref: news.gmane.org gmane.linux.lib.musl.general:7425 Archived-At: Hi Rich ! On 18.04.2015 18:37, Rich Felker wrote: > Odd. I just verified that Google's 8.8.8.8 resolves it right, so I > don't know what's wrong, but it seems to be on your end. Let me know > if you find anything that looks like a problem on my side. I verified this again: A-record lookup gets correct address, but MX lookup get's: libc.org mail exchanger = 10 mail.aerifal.cx. ... and that neither works when using Mozilla Thunderbird, nor claws mail on any current Linux distribution, when sending through the mail relay of GMX (United Internet = one of the major Internet provider in Germany). The SMTP to the mail relay rejects any mail to domain libc.org (SMTP error response). Sorry it's neither my software, nor is there any way for me to change the kind of lookup done on the mail relay of the provider. Postmaster answer of mail relay was simple: Not a failure of mail relay, your MX lookup erroneously return a CNAME and not an IP address. Harald