From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/7426 Path: news.gmane.org!not-for-mail From: Harald Becker Newsgroups: gmane.linux.lib.musl.general Subject: Re: Re: Security advisory for musl libc - stack-based buffer overflow in ipv6 literal parsing [CVE-2015-1817] Date: Sat, 18 Apr 2015 20:25:25 +0200 Message-ID: <5532A195.80307@address4me.eu> References: <20150417131008.GE17615@ucc.gu.uwa.edu.au> <20150417172327.GB6817@brightrain.aerifal.cx> <20150417180325.GC6817@brightrain.aerifal.cx> <20150417180907.GA26856@openwall.com> <20150418133202.GG17615@ucc.gu.uwa.edu.au> <20150418152542.GG6817@brightrain.aerifal.cx> <55327D1F.5070807@gmx.de> <20150418155845.GH6817@brightrain.aerifal.cx> <55328604.4000705@gmx.de> <20150418163702.GI6817@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1429385400 16380 80.91.229.3 (18 Apr 2015 19:30:00 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 18 Apr 2015 19:30:00 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-7439-gllmg-musl=m.gmane.org@lists.openwall.com Sat Apr 18 21:29:55 2015 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1YjYR8-0000qg-J6 for gllmg-musl@m.gmane.org; Sat, 18 Apr 2015 21:29:54 +0200 Original-Received: (qmail 5418 invoked by uid 550); 18 Apr 2015 19:29:53 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 11917 invoked from network); 18 Apr 2015 18:25:37 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 In-Reply-To: <20150418163702.GI6817@brightrain.aerifal.cx> Xref: news.gmane.org gmane.linux.lib.musl.general:7426 Archived-At: Hi Rich ! On 18.04.2015 18:37, Rich Felker wrote: > Odd. I just verified that Google's 8.8.8.8 resolves it right, MX and NS records must never point to a CNAME alias (RFC 2181 section 10.3) From: https://en.wikipedia.org/wiki/CNAME_record I think this is the failure! Harald