distros mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

distros mailing list - 2014/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 4	² 3	³ 6	⁴ 3	⁵	⁶	⁷
⁸ 1	⁹ 1	¹⁰ 4	¹¹ 8	¹² 4	¹³	¹⁴
¹⁵ 1	¹⁶ 3	¹⁷ 2	¹⁸	¹⁹ 11	²⁰ 6	²¹ 3
²² 1	²³	²⁴	²⁵	²⁶	²⁷	²⁸ 2
²⁹ 2	³⁰	³¹ 2

Messages by day:

December 1 (4 messages)

[vs-plain] Re: [tdf-security] Possible stack overflow in ICU library, probably not exploitable (Caolán McNamara <caolanm@...hat.com>)
Re: [vs-plain] Re: [tdf-security] Possible stack overflow in ICU library, probably not exploitable (Kurt Seifried <kseifried@...hat.com>)
[vs-plain] Re: antiword buffer overflow (Kurt Seifried <kseifried@...hat.com>)
Re: [vs] antiword buffer overflow (Fabian Keil <fk@...iankeil.de>)

December 2 (3 messages)

[vs-plain] Re: antiword buffer overflow (Kurt Seifried <kseifried@...hat.com>)
[vs] CVE-2014-8116, CVE-2014-8117: file: multiple denial of service issues (resource consumption) (Murray McAllister <mmcallis@...hat.com>)
[vs] Re: PowerDNS security notification - RESTRICTED / EMBARGO UNTIL 8th OF DECEMBER 2014 16:00 UTC (Peter van Dijk <peter.van.dijk@...herlabs.nl>)

December 3 (6 messages)

[vs] Re: ***UNCHECKED*** [oCERT-2014-009] Heap overflows in libjasper (ImageMagick, OpenCV affected) (Johannes Segitz <jsegitz@...e.com>)
[vs] Re: ***UNCHECKED*** [oCERT-2014-009] Heap overflows in libjasper (ImageMagick, OpenCV affected) (Andrea Barisani <lcars@...rt.org>)
[vs] Multiple crash files for libtiff tools (William Robinet <william.robinet@...ostix.com>)
[vs-plain] Re: Multiple crash files for libtiff tools (Kurt Seifried <kseifried@...hat.com>)
Re: [tdf-security] [vs-plain] Re: Possible stack overflow in ICU library, probably not exploitable (Caolán McNamara <caolanm@...hat.com>)
Re: [tdf-security] [vs-plain] Re: Possible stack overflow in ICU library, probably not exploitable (Kurt Seifried <kseifried@...hat.com>)

December 4 (3 messages)

Re: [vs] Multiple crash files for libtiff tools (William Robinet <william.robinet@...ostix.com>)
[vs-plain] Re: Multiple crash files for libtiff tools (Kurt Seifried <kseifried@...hat.com>)
Re: [vs] Multiple crash files for libtiff tools (William Robinet <william.robinet@...ostix.com>)

December 8 (1 message)

Re: [vs] CVE-2014-8116, CVE-2014-8117: file: multiple denial of service issues (resource consumption) (Murray McAllister <mmcallis@...hat.com>)

December 9 (1 message)

[vs-plain] mailx issues (CVE-2004-2771, CVE-2014-7844) (Florian Weimer <fweimer@...hat.com>)

December 10 (4 messages)

[vs-plain] [oCERT-2014-011] unzip input sanitization errors (Andrea Barisani <lcars@...rt.org>)
[vs-plain] Re: [oCERT-2014-011] unzip input sanitization errors (Andrea Barisani <lcars@...rt.org>)
[vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Andrea Barisani <lcars@...rt.org>)
Re: [tdf-security] [vs-plain] Re: Possible stack overflow in ICU library, probably not exploitable ("Steven R. Loomis" <srl@...-project.org>)

December 11 (8 messages)

Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Andrea Barisani <lcars@...rt.org>)
Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Andrea Barisani <lcars@...rt.org>)
Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] [oCERT-2014-012] additional libjasper vulnerabilities (Andrea Barisani <lcars@...rt.org>)
[vs] Re: [oCERT-2014-012] additional libjasper vulnerabilities (Tomas Hoger <thoger@...hat.com>)

December 12 (4 messages)

[vs] Re: [oCERT-2014-012] additional libjasper vulnerabilities (Andrea Barisani <lcars@...rt.org>)
Re: [vs] [oCERT-2014-011] unzip input sanitization errors (Andrea Barisani <lcars@...rt.org>)
Re: [vs] [oCERT-2014-011] unzip input sanitization errors (Tomas Hoger <thoger@...hat.com>)
Re: [vs] [oCERT-2014-011] unzip input sanitization errors (Kurt Seifried <kseifried@...hat.com>)

December 15 (1 message)

[vs-plain] [oCERT-2014-010] sox vulnerability report (Andrea Barisani <lcars@...rt.org>)

December 16 (3 messages)

[vs] Re: [oCERT-2014-010] sox vulnerability report (Tomas Hoger <thoger@...hat.com>)
[vs] Re: [oCERT-2014-010] sox vulnerability report (Andrea Barisani <lcars@...rt.org>)
Re: [vs] Multiple crash files for libtiff tools (Tomas Hoger <thoger@...hat.com>)

December 17 (2 messages)

Re: [vs] Multiple crash files for libtiff tools (William Robinet <william.robinet@...ostix.com>)
[vs] mime-support/run-mailcap: Shell Command Injection ("Timothy D. Morgan" <tim.morgan@...ndspotsecurity.com>)

December 19 (11 messages)

Re: [vs-plain] [oCERT-2014-010] sox vulnerability report (Kurt Seifried <kseifried@...hat.com>)
[vs-plain] Another (two?) possible bug in ICU / LibreOffice - maybe exploitable (Pedro Ribeiro <pedrib@...il.com>)
Re: [vs-plain] Another (two?) possible bug in ICU / LibreOffice - maybe exploitable (Kurt Seifried <kseifried@...hat.com>)
Re: [vs-plain] Another (two?) possible bug in ICU / LibreOffice - maybe exploitable ("Steven R. Loomis" <srl@...-project.org>)
Re: [tdf-security] [vs-plain] Another (two?) possible bug in ICU / LibreOffice - maybe exploitable (Caolán McNamara <caolanm@...hat.com>)
Re: [tdf-security] [vs-plain] Another (two?) possible bug in ICU / LibreOffice - maybe exploitable (Pedro Ribeiro <pedrib@...il.com>)
[vs-plain] Re: Another (two?) possible bug in ICU / LibreOffice - maybe exploitable (Caolán McNamara <caolanm@...hat.com>)
Re: [tdf-security] [vs-plain] Another (two?) possible bug in ICU / LibreOffice - maybe exploitable (Kurt Seifried <kseifried@...hat.com>)
[vs-plain] critical security vulnerability in midgard-core (Simon McVittie <simon.mcvittie@...labora.co.uk>)
Re: [vs-plain] critical security vulnerability in midgard-core (Kurt Seifried <kseifried@...hat.com>)
Re: [vs-plain] critical security vulnerability in midgard-core (Simon McVittie <simon.mcvittie@...labora.co.uk>)

December 20 (6 messages)

[vs-plain] hardening dbus-daemon against incorrect D-Bus security policy configuration (Simon McVittie <simon.mcvittie@...labora.co.uk>)
[vs-plain] Re: critical security vulnerability in midgard-core (Simon McVittie <simon.mcvittie@...labora.co.uk>)
[vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Florian Weimer <fw@...eb.enyo.de>)
[vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Thiago Macieira <thiago@....org>)
[vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Simon McVittie <simon.mcvittie@...labora.co.uk>)
Re: [vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Kurt Seifried <kseifried@...hat.com>)

December 21 (3 messages)

Re: [vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Simon McVittie <simon.mcvittie@...labora.co.uk>)
Re: [vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Kurt Seifried <kseifried@...hat.com>)
Re: [vs-plain] Re: hardening dbus-daemon against incorrect D-Bus security policy configuration (Simon McVittie <simon.mcvittie@...labora.co.uk>)

December 22 (1 message)

[vs-plain] Re: critical security vulnerability in midgard-core (Piotr Pokora <piotrek.pokora@...il.com>)

December 28 (2 messages)

[vs-plain] libcurl/darwinssl certificate check bypass (Daniel Stenberg <daniel@...x.se>)
[vs-plain] curl URL request injection vulnerability (Daniel Stenberg <daniel@...x.se>)

December 29 (2 messages)

Re: [vs-plain] curl URL request injection vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: [vs-plain] libcurl/darwinssl certificate check bypass (Kurt Seifried <kseifried@...hat.com>)

December 31 (2 messages)

[vs-plain] Re: mime-support/run-mailcap: Shell Command Injection (Salvatore Bonaccorso <carnil@...ian.org>)
[vs-plain] Re: mime-support/run-mailcap: Shell Command Injection ("Timothy D. Morgan" <tim.morgan@...ndspotsecurity.com>)

67 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.