HEADS UP lk-changelog/shortlog: security announcement

From: Matthias Andree (matthias.andree_at_gmx.de)
Date: 08/31/03

  • Next message: Andrea Arcangeli: "Re: bandwidth for bkbits.net (good news)" 
    Date:	Sun, 31 Aug 2003 16:33:59 +0200
To: Linux-Kernel mailing list <linux-kernel@vger.kernel.org>

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Anyone who uses lk-changelog.pl or shortlog
    (YES THIS COMPRISES YOU, MARCELO ;-)
    with these option combinations:

    - --mode=terse AND NOT --noobfuscate

    - --mode=oneline AND NOT --noobfuscate

    please be aware that address obfuscation of unknown addresses does not
    work (I'll consider that an information leak given that addresses and
    logs are web accessible through archives and are actually harvested by
    those saboteurs that call themselves direct advertisers), so you may get
    lines like:

      o example change log entry (user@example.org)

    Rather than

      o example change log entry (user:example.org)

    The issue was fixed in 0.166; 0.167 is the latest release version.

    Get it from:

    BK: bk://129.217.163.1 (NO trailing slash, bkd -xcd there!)

    Once Linus pulls these changes, it will also become available at the

    official repository: bk://kernel.bkbits.net/torvalds/tools/

    WWW: http://mandree.home.pages.de/linux/kernel/
    this site carries releases and GnuPG signatures

    (Yes, the GPG signing key has changed recently,
    the days of PGP 2.x are passing...)

    - --
    Matthias Andree

    Encrypt your mail: my GnuPG key ID is 0x052E7D95
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.3 (GNU/Linux)

    iD8DBQE/UgdOvmGDOQUufZURAkqTAJ9PlcQHCeNcC0CbM6fnEzIub6l1RwCfV3Jn
    1cyDzwKTReYEIwEyxtMsjPM=
    =e3ZP
    -----END PGP SIGNATURE-----
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

  • Next message: Andrea Arcangeli: "Re: bandwidth for bkbits.net (good news)"