Return-Path: <oracle-l-bounce@freelists.org>
X-Original-To: oracle-l@orafaq.com
Delivered-To: oracle-l@orafaq.com
Received: from puck1183.startdedicated.com (localhost [127.0.0.1])
 by puck1183.startdedicated.com (Postfix) with ESMTP id 6878319601F6
 for <oracle-l@orafaq.com>; Fri,  6 Jun 2014 19:27:55 +0200 (CEST)
Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180])
 by puck1183.startdedicated.com (Postfix) with ESMTP
 for <oracle-l@orafaq.com>; Fri,  6 Jun 2014 19:27:55 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 5DBE32C509;
 Fri,  6 Jun 2014 13:27:54 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=freelists.org;
 s=turing; t=1402075674;
 bh=x0KnXnGO8jDVEqrcsAJawCtJ2IHBYqghq0li4OvzbGo=;
 h=References:Message-ID:Date:From:Subject:To:In-Reply-To:
	 MIME-Version:Content-Type:Sender:Reply-To:List-help:
	 List-unsubscribe:List-Id:List-subscribe:List-owner:List-post:
	 List-archive;
 b=hfeJlzhh9fspS89B6TNavQM/AVey7q1FNPbWVHbNPA3dksWd9GyPBQHxTupEjDLvx
	 h4h/AiY8Zkd9wtO+nUUs5ZEPz7eQ4Hop0PG8GcQBpQMA8a1v1dLNNU/iOrGcNjh2NH
	 Z50JCRo5i9FcIElYZihpxOg5MnrxQm9hnfrCcUBc=
X-Virus-Scanned: Debian amavisd-new at turing.freelists.org
Received: from turing.freelists.org ([127.0.0.1])
 by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id bbx3+CNAF9Kh; Fri,  6 Jun 2014 13:27:54 -0400 (EDT)
Received: from turing.freelists.org (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 01CCF2C48C;
 Fri,  6 Jun 2014 13:27:12 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=freelists.org;
 s=turing; t=1402075673;
 bh=x0KnXnGO8jDVEqrcsAJawCtJ2IHBYqghq0li4OvzbGo=;
 h=References:Message-ID:Date:From:Subject:To:In-Reply-To:
	 MIME-Version:Content-Type:Sender:Reply-To:List-help:
	 List-unsubscribe:List-Id:List-subscribe:List-owner:List-post:
	 List-archive;
 b=iyjrAzIZ2Xmun9iQGiEwLToPCQH0vyLd2DvJDbLsqCg6q3JsSlZTs4301ysNnSTq4
	 Aq9md1Qpdc0GqTkMOsv65UVR7+AEAP5XYJi/gdMbIC6glLvV4u0D+fioGIbScZtNfY
	 cWoSE4bLPysrlePIww1/8fM47IJUWg+zEPuk0kkQ=
Received: with ECARTIS (v1.0.0; list oracle-l); Fri, 06 Jun 2014 13:26:07 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 7C5692C3F6
 for <oracle-l@freelists.org>; Fri,  6 Jun 2014 13:26:06 -0400 (EDT)
Authentication-Results: turing.freelists.org; dkim=pass
 (1024-bit key; insecure key) header.i=@yahoo.com; dkim-adsp=pass
Received: from turing.freelists.org ([127.0.0.1])
 by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id HEcdJKDVPNf3 for <oracle-l@freelists.org>;
 Fri,  6 Jun 2014 13:26:06 -0400 (EDT)
Received: from nm1-vm1.bullet.mail.bf1.yahoo.com (nm1-vm1.bullet.mail.bf1.yahoo.com [98.139.213.163])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 3D3C12C3F0
 for <oracle-l@freelists.org>; Fri,  6 Jun 2014 13:25:39 -0400 (EDT)
Received: from [98.139.215.142] by nm1.bullet.mail.bf1.yahoo.com with NNFMP; 06 Jun 2014 17:25:39 -0000
Received: from [98.139.212.231] by tm13.bullet.mail.bf1.yahoo.com with NNFMP; 06 Jun 2014 17:25:39 -0000
Received: from [127.0.0.1] by omp1040.mail.bf1.yahoo.com with NNFMP; 06 Jun 2014 17:25:39 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 71105.25062.bm@omp1040.mail.bf1.yahoo.com
Received: (qmail 76272 invoked by uid 60001); 6 Jun 2014 17:25:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1402075538; bh=0dEz2APdUN5DaDhyonG/usWPfCZm60fC7yhWAQ/kXYU=; h=References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=QnkLn+GmxTVmNtHRY5WGDL/jax93o2WByT6n0ZUWPzjl8vm3uOKhZIHEytmOhIKzwqWDwy69grIYOQkLLhtvuW+9dwkywNNqihAY/f6L/1z/HDjdCwKCaeCMH1lFR/M9FnfQ0Hf+HA3LXifWrbWMMv2Fuy/WeIWHuFTG0UQf1SU=
X-YMail-OSG: mT9Hyh4VM1mVGF4t125d1VUFl.xytXl2zDv8TXsZD2H1Lld
 qa4G2yJGpWLQqZKWS2_bAq6jlGmXzRRP_.iiBxSXE93f3QLqW.CE6dxJnax.
 NGT1REcycHBUr72O0YvG2FAnyRJYrMhrsD_iIpklBEy.qsfH7kqMwJip.AGb
 yZK8blOnlkB6QYHIk8WBcJzN8Kibaj85EMOUQ.Ex9FvV9ayOuv7fW2gDPeiz
 eD9VTi5SDIjiyB.l7bAT0Ran7t0HYFJZyM5e0BDkNqzfPGQCE1586WIm8gA_
 EIu6_DpiGNe61hmOkbQfAAvb7XzSWjKcinidjxMxACrEELCDwLPJcYYEdWJH
 j6Gsubdx4yKEJU063oz7ZK6gGyc7r3gjqqJh7WKvKbinP7RrjZJW5HuB4bal
 JoUdmtof7y3cm8l205GcIh10xs3gwhBVx_P3kR.utBsPxeMHzGxE0MD0a5u9
 G2liznCYaMjFNl4KQ6uRt9K0GGkgZlFngZXm1.5t7c_8J0giqioZEftonPLa
 Dye_dYb0mx0hNocFMPeOWh_1ZjnIlaJQQ_MmpT.ICsaBlDDz._99alEkc.d0
 vxetVhpJzJLYUrNlFMfE2VYJMFk4iQ2O9VVTQrhQvbv1LiIikUlmL8CqpHRg
 Qg.EWa_9rvb8juoyTxtibwLyzXXW7BFyMicC5BsRlbkOSDvmUvWWNeHYp9lc
 t5rDjcrf.yEBAAjVJJFhmS2jN91TJi0Xt.SwHC1YXgM6C0vzTdafEK6ruAd8
 L2mO1bblO5ZnONFZNwaBd30Qsgh1L73peq5Bdlzd5W7ln0fbRQfkYbciE
Received: from [107.9.58.216] by web140402.mail.bf1.yahoo.com via HTTP; Fri, 06 Jun 2014 10:25:38 PDT
X-Rocket-MIMEInfo: 002.001,eW91IGxvb2tpbmcgZm9yIHNvbWV0aGluZyBsaWtlIHRoaXM_CgpNYXBwaW5nIG9mIENBTiBhbmQgQ1ZFIG51bWJlcnMgdG8gQWR2aXNvcnkgYW5kIEFsZXJ0CgogCiBNYXBwaW5nIG9mIENBTiBhbmQgQ1ZFIG51bWJlcnMgdG8gQWR2aXNvcnkgYW5kIEFsZXJ0Ck1hcHBpbmcgb2YgQ0FOIGFuZCBDVkUgbnVtYmVycyB0byBBZHZpc29yeSBhbmQgQWxlcnQgIApWaWV3IG9uIHd3dy5vcmFjbGUuY29tIFByZXZpZXcgYnkgWWFob28gIAoKVGhlIENQVSBwYXRjaGVzIHRoZSBtYXBwaW5nIGxpbmtzIHRvIGhhdmUgdGEBMAEBAQE-
References: <CACH2EDKq8Bq_gfm3LGJNKgqT6EVjTcRd=gzFZyF1waqUGLo6Xg@mail.gmail.com> <CACH2EDJnRJEauH8sn0OyGb5Fikursty=0iBXvV0MyGS1i7in5g@mail.gmail.com>
Message-ID: <1402075538.62750.YahooMailNeo@web140402.mail.bf1.yahoo.com>
Date: Fri, 6 Jun 2014 10:25:38 -0700 (PDT)
From: "Job Miller" <dmarc-noreply@freelists.org> (Redacted sender "jobmiller@yahoo.com" for DMARC)
Subject: Re: CVEs and Oracle products
To: "patrice.boivin@gmail.com" <patrice.boivin@gmail.com>,
  ORACLE-L <oracle-l@freelists.org>
In-Reply-To: <CACH2EDJnRJEauH8sn0OyGb5Fikursty=0iBXvV0MyGS1i7in5g@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1085140594-926197148-1402075538=:62750"
X-archive-position: 54882
X-ecartis-version: Ecartis v1.0.0
Sender: oracle-l-bounce@freelists.org
Errors-to: oracle-l-bounce@freelists.org
X-original-sender: dmarc-noreply@freelists.org
Precedence: normal
Reply-To: dmarc-noreply@freelists.org
List-help: <mailto:ecartis@freelists.org?Subject=help>
List-unsubscribe: <oracle-l-request@freelists.org?Subject=unsubscribe>
List-software: Ecartis version 1.0.0
List-Id: oracle-l <oracle-l.freelists.org>
X-List-ID: oracle-l <oracle-l.freelists.org>
List-subscribe: <oracle-l-request@freelists.org?Subject=subscribe>
List-owner: <mailto:mark.bobak@proquest.com>
List-post: <mailto:oracle-l@freelists.org>
List-archive: <http://www.freelists.org/archives/oracle-l>
X-list: oracle-l
--1085140594-926197148-1402075538=:62750
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

you looking for something like this?=0A=0AMapping of CAN and CVE numbers to=
 Advisory and Alert=0A=0A =0A Mapping of CAN and CVE numbers to Advisory an=
d Alert=0AMapping of CAN and CVE numbers to Advisory and Alert  =0AView on =
www.oracle.com Preview by Yahoo  =0A=0AThe CPU patches the mapping links to=
 have tables that map the product to the CVE also.=0A=0A=0Ahttp://www.oracl=
e.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixDB=0A=0A=
=0A________________________________=0A From: Patrice sur GMail <patrice.boi=
vin@gmail.com>=0ATo: ORACLE-L <oracle-l@freelists.org> =0ASent: Friday, Jun=
e 6, 2014 12:46 PM=0ASubject: Re: CVEs and Oracle products=0A =0A=0A=0AI al=
so know about mitre.org... e.g. http://cve.mitre.org/cgi-bin/cvekey.cgi?key=
word=3Doracle and NIST... e.g. for the OpenSSL CVE: http://web.nvd.nist.gov=
/view/vuln/detail?vulnId=3DCVE-2014-0224=0A=0ABut it refers to openSSL, not=
 to the products running OpenSSL...=A0 can't quickly tell if any Oracle pro=
ducts are affected.
--1085140594-926197148-1402075538=:62750
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<html><body><div style=3D"color:#000; background-color:#fff; font-family:He=
lveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;fo=
nt-size:12pt"><div style=3D"" class=3D""><span style=3D"" class=3D"">you lo=
oking for something like this?</span></div><div style=3D"color: rgb(0, 0, 0=
); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Ari=
al,Lucida Grande,sans-serif; background-color: transparent; font-style: nor=
mal;" class=3D""><span style=3D"" class=3D""><br style=3D"" class=3D""></sp=
an></div><div class=3D"" style=3D"color: rgb(0, 0, 0); font-size: 16px; fon=
t-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-s=
erif; background-color: transparent; font-style: normal;"><span style=3D"" =
class=3D""><a style=3D"" class=3D"" href=3D"http://www.oracle.com/technetwo=
rk/topics/security/public-vuln-to-advisory-mapping-093627.html">Mapping of =
CAN and CVE numbers to Advisory and Alert</a><br style=3D"" class=3D""></sp=
an></div><div style=3D"width:450px;
 font-family: 'Georgia', 'Times', 'Times New Roman', 'serif';" id=3D"enhanc=
rCard_0" class=3D"" contenteditable=3D"false"><table class=3D"" style=3D"wi=
dth:450px; height:auto; position: relative; margin-top:5px; margin-bottom: =
5px; display: block;" cellpadding=3D"0" cellspacing=3D"0"><tbody style=3D""=
 class=3D""><tr style=3D"" class=3D""><td colspan=3D"6" class=3D"" style=3D=
"height: 1px; background-color: #e5e5e5;"><div class=3D"" style=3D"height: =
1px; background-color: #e5e5e5;"></div></td></tr><tr style=3D"" class=3D"">=
<td rowspan=3D"2" class=3D"" style=3D"width: 1px; background-color: #e5e5e5=
;"><div class=3D"" style=3D"width: 1px; background-color: #e5e5e5;"></div><=
/td><td class=3D"" colspan=3D"2" style=3D"width: 100%; vertical-align: midd=
le; font-family: 'Georgia', 'Times', 'Times New Roman', 'serif';"><div clas=
s=3D"" style=3D"line-height:16.5px; background-color: #ffffff;  width: 448p=
x;"><div class=3D"" style=3D"word-wrap: break-word; word-break: break-all; =
padding: 7px 20px 0px 14px;"><span style=3D""
 class=3D""></span><span style=3D"" class=3D""></span><a href=3D"http://www=
.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093=
627.html" class=3D"" style=3D"text-decoration: none !important; color: #000=
000 !important;"><span class=3D"" style=3D"margin: 0; font-weight: normal;m=
argin-bottom: 4px; font-size: 18px; line-height: 21px; max-height: 43px; co=
lor: #000000; overflow: hidden !important; display: inline-block;">Mapping =
of CAN and CVE numbers to Advisory and Alert</span></a><div style=3D"font-s=
ize: 13px; line-height: 20px; color: #999999; max-height: 81px; font-family=
: 'Georgia', 'Times', 'Times New Roman', 'serif';overflow: hidden;" class=
=3D"">Mapping of CAN and CVE numbers to Advisory and Alert</div></div></div=
></td><td class=3D"" rowspan=3D"2" style=3D"width: 1px; background-color: #=
e5e5e5;"><div class=3D"" style=3D"width: 1px; background-color: #e5e5e5;"><=
/div></td></tr><tr style=3D"" class=3D""><td class=3D"" style=3D"width: 100=
%; vertical-align: middle;
 font-family: 'Arial', 'Helvetica Neue', 'Helvetica', 'sans-serif';"><div c=
lass=3D"" style=3D"font-size: 0pt; padding: 3px 20px 9px 14px;"><a href=3D"=
http://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-m=
apping-093627.html" class=3D"" style=3D"color: black; text-decoration: none=
 !important;cursor:pointer !important;" target=3D"_blank"><span class=3D"" =
style=3D"display: inline-block; line-height: 11px; max-width: 348px; min-wi=
dth: 288px; overflow: hidden; max-height: 13px; word-break: break-all;"><sp=
an class=3D"" style=3D"vertical-align:middle; font-size: 9px; line-height: =
11px; color: #999999; -moz-text-size-adjust: none; -ms-text-size-adjust: no=
ne; -webkit-text-size-adjust:none; text-size-adjust:none;">View on <span st=
yle=3D"font-weight: bold" class=3D"">www.oracle.com</span></span></span></a=
></div></td><td class=3D"" style=3D"vertical-align: middle; width: 100px; f=
ont-family: 'Arial', 'Helvetica Neue', 'Helvetica', 'sans-serif';"><div cla=
ss=3D"" style=3D"padding:
 6px 20px 12px 0px; max-width: 100px; min-width: 80px; overflow: hidden; te=
xt-align: right; line-height: 11px; max-height: 13px; font-size: 0pt;"><spa=
n class=3D"" style=3D"vertical-align:middle; font-size: 9px; line-height: 1=
1px; color: #999999; -moz-text-size-adjust: none; -ms-text-size-adjust: non=
e; -webkit-text-size-adjust:none; text-size-adjust:none;">Preview by Yahoo<=
/span></div></td></tr><tr style=3D"" class=3D""><td class=3D"" colspan=3D"6=
" style=3D"height: 1px; background-color: #e5e5e5;"><div class=3D"" style=
=3D"height: 1px; background-color: #e5e5e5;"></div></td></tr></tbody></tabl=
e></div><div style=3D"" class=3D""><br style=3D"" class=3D""></div><div sty=
le=3D"" class=3D"">The CPU patches the mapping links to have tables that ma=
p the product to the CVE also.</div><div style=3D"" class=3D""><br style=3D=
"" class=3D""></div><div style=3D"color: rgb(0, 0, 0); font-size: 16px; fon=
t-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-s=
erif; background-color:
 transparent; font-style: normal;" class=3D""><br></div><div style=3D"color=
: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,=
Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; fo=
nt-style: normal;" class=3D""><a style=3D"" class=3D"" href=3D"http://www.o=
racle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixDB">h=
ttp://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#Ap=
pendixDB</a><br style=3D"" class=3D""></div>  <div class=3D"" style=3D"font=
-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sa=
ns-serif; font-size: 12pt;"> <div class=3D"" style=3D"font-family: Helvetic=
aNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-si=
ze: 12pt;"> <div style=3D"" class=3D"" dir=3D"ltr"> <hr style=3D"" class=3D=
"" size=3D"1">  <font style=3D"" class=3D"" face=3D"Arial" size=3D"2"> <b s=
tyle=3D"" class=3D""><span class=3D"" style=3D"font-weight:bold;">From:</sp=
an></b> Patrice sur GMail
 &lt;patrice.boivin@gmail.com&gt;<br style=3D"" class=3D""> <b style=3D"" c=
lass=3D""><span class=3D"" style=3D"font-weight: bold;">To:</span></b> ORAC=
LE-L &lt;oracle-l@freelists.org&gt; <br style=3D"" class=3D""> <b style=3D"=
" class=3D""><span class=3D"" style=3D"font-weight: bold;">Sent:</span></b>=
 Friday, June 6, 2014 12:46 PM<br style=3D"" class=3D""> <b style=3D"" clas=
s=3D""><span class=3D"" style=3D"font-weight: bold;">Subject:</span></b> Re=
: CVEs and Oracle products<br style=3D"" class=3D""> </font> </div> <div st=
yle=3D"" class=3D""><br style=3D"" class=3D""><div style=3D"" class=3D"" id=
=3D"yiv4130441160"><div style=3D"" class=3D""><div style=3D"" class=3D"" di=
r=3D"ltr"><div style=3D"" class=3D"">I also know about mitre.org... e.g. <a=
 style=3D"" class=3D"" rel=3D"nofollow" shape=3D"rect" target=3D"_blank" hr=
ef=3D"http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=3Doracle">http://cve.=
mitre.org/cgi-bin/cvekey.cgi?keyword=3Doracle</a> and NIST... e.g. for the =
OpenSSL CVE: <a style=3D"" class=3D"" rel=3D"nofollow" shape=3D"rect" targe=
t=3D"_blank"
 href=3D"http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2014-0224">h=
ttp://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2014-0224</a><br style=
=3D"" class=3D"" clear=3D"none">=0A=0A<br style=3D"" class=3D"" clear=3D"no=
ne"></div>But it refers to openSSL, not to the products running OpenSSL...&=
nbsp; can't quickly tell if any Oracle products are affected.<br style=3D""=
 class=3D"" clear=3D"none"></div><div style=3D"" class=3D""><br style=3D"" =
class=3D""></div></div></div><br style=3D"" class=3D""></div> </div> </div>=
  </div></body></html>
--1085140594-926197148-1402075538=:62750--
--
http://www.freelists.org/webpage/oracle-l


