security [ARCHIVED] January 2016

security@lists.fedoraproject.org

2 participants
2 discussions

NM generated IPv6 addresses leak your MAC address
by Chris Murphy 12 Feb '16

12 Feb '16

https://bugzilla.redhat.com/show_bug.cgi?id=1279242 The gist of this bug is that NetworkManager on Fedora 23 and Rawhide does not have RFC4941 privacy extensions enabled. So the IPv6 address is predicated on a real MAC address (at least on baremetal) and the address is not temporary and is never deprecated. This is reported to have worked correctly on Fedora 22. Could this be assessed for security impact, in particular as it relates to Fedora release criteria? https://fedoraproject.org/wiki/Fedora_24_Final_Release_Criteria#Security_bu… How would this get fixed with an update? Is there a mechanism to sed the user configuration to change ipv6.ip-privacy to 2? Or is this something that's likely stuck with a value of -1 for the live of the release, unless the user manually makes a change? Thanks, -- Chris Murphy

4 4

Open source decision system engineering
by olivier.avenel＠gensys-net.eu 10 Jan '16

10 Jan '16

Dear Linux fedora security list, I am french open source entrepreneur in Le Havre (France). I am contacting you to look for advice and maybe some help. I am currently working on Debian Live flavour of operating system and on some open source professional software design. I am currently crossing several issues I want to share with you: Since I begin to work on my Open source startup I face the experiment of schizophreny analysis I am affected. The symptoms could be described as telepathic collaboration at home in my desk with a telepathic staff working for political communication and strategic analysis since the France 2009 economical crisis without any fundings. Today my open source decision system is a distributed lamp architecture of internet archiver and analyser of french press. I am facing real times analytics of french press in the field of political, economical and cultural affairs in my desk at home. I tried to contact several interlocutors of french media and sociological researchers, defense procurement agencies but the results looks like a collective intelligence of bashing. My operating system project of debian flavour is sleeping under the last jessie upgrade. The telepathic collaboration with the ghost political staff is wheighing several thousand hours of work since 2009 and I shall also that there is a kind of ghost in my information system and in my house. I learn today that Mandriva company disappear and I know that there is an Open Bar contract for Microsoft at french defense procurement agency. I would be very pleased to have your opinion on this kind of schizophreny and economical crisis debug with your reputed quality performer advice for the department of defense of United States and other countries. Let me know If i should contact you in another way. Best Regards, Olivier Avenel http://www.cooperation-iws.eu olivier.avenel(a)gensys-net.eu

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

security [ARCHIVED] January 2016