oss-security mailing list - 2012/02

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2012/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 18	² 13	³ 10	⁴ 6	⁵ 1
⁶ 4	⁷ 3	⁸ 4	⁹ 15	¹⁰ 9	¹¹ 3	¹² 4
¹³ 6	¹⁴ 4	¹⁵ 2	¹⁶ 3	¹⁷ 2	¹⁸ 2	¹⁹
²⁰ 11	²¹	²² 2	²³ 5	²⁴ 3	²⁵ 2	²⁶ 5
²⁷ 27	²⁸ 16	²⁹ 9

Messages by day:

February 1 (18 messages)

Fwd: Apache HTTP Server 2.2.22 Released (Solar Designer <solar@...nwall.com>)
Re: Fwd: Apache HTTP Server 2.2.22 Released (Kurt Seifried <kseifried@...hat.com>)
Re: Fwd: Apache HTTP Server 2.2.22 Released (Solar Designer <solar@...nwall.com>)
CVE Request (two ids) -- Xchat-WDK (prior 1499-4 [2012-01-18]) and Xchat-v2.8.6 on Maemo architecture -- Heap-based buffer… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request (two ids) -- Xchat-WDK (prior 1499-4 [2012-01-18]) and Xchat-v2.8.6 on Maemo architecture -- Heap-based buff… (Berke Viktor <berkeviktor@....com>)
Re: Re: CVE Request (two ids) -- Xchat-WDK (prior 1499-4 [2012-01-18]) and Xchat-v2.8.6 on Maemo architecture -- Heap-bas… (Yves-Alexis Perez <corsac@...ian.org>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: distros & linux-distros embargo period and message format (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE Request (two ids) -- Xchat-WDK (prior 1499-4 [2012-01-18]) and Xchat-v2.8.6 on Maemo architecture -- Heap-based bu… (Kurt Seifried <kseifried@...hat.com>)
Re: Mibew messenger multiple XSS (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Requests for FFmpeg 0.9.1 (Kurt Seifried <kseifried@...hat.com>)
Re: Subscribe to linux-distros (Agostino Sarubbo <ago@...too.org>)
XSS hiding CSRF (was: Re: Mibew messenger multiple XSS) ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: Subscribe to linux-distros (Alex Legler <a3li@...too.org>)
Re: distros & linux-distros embargo period and message format (Thomas Klausner <wiz@...BSD.org>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: Subscribe to linux-distros (Solar Designer <solar@...nwall.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)

February 2 (13 messages)

Re: distros & linux-distros embargo period and message format (Kurt Seifried <kseifried@...hat.com>)
Re: distros & linux-distros embargo period and message format (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: distros & linux-distros embargo period and message format (Kurt Seifried <kseifried@...hat.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: distros & linux-distros embargo period and message format (Kurt Seifried <kseifried@...hat.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
RE: XSS hiding CSRF (was: Re: Mibew messenger multiple XSS) (Carsten Eiram <che@...unia.com>)
CVE request: phpldapadmin "base" Cross-Site Scripting Vulnerability (Agostino Sarubbo <ago@...too.org>)
Re: XSS hiding CSRF (was: Re: Mibew messenger multiple XSS) (Filippo Cavallarin <filippo.cavallarin@...seq.it>)
Xen Security Advisory 6 (CVE-2012-0029) - HVM e1000, buffer overflow (Ian Jackson <Ian.Jackson@...citrix.com>)
PHP remote code execution introduced via HashDoS fix (Tomas Hoger <thoger@...hat.com>)
Re: PHP remote code execution introduced via HashDoS fix (Solar Designer <solar@...nwall.com>)

February 3 (10 messages)

Re: PHP remote code execution introduced via HashDoS fix (Pierre Joye <pierre.php@...il.com>)
Re: Subscribe to linux-distros (Solar Designer <solar@...nwall.com>)
Re: CVE request: phpldapadmin "base" Cross-Site Scripting Vulnerability (Kurt Seifried <kseifried@...hat.com>)
Adding Xen.org contact to linux-distros security list (Ian Campbell <ijc@....org>)
CVE Request (2002): Linux TCP stack could accept invalid TCP flag combinations (Marcus Meissner <meissner@...e.de>)
CVE-request: Joomla! Security News 2012-02-03 (Henri Salo <henri@...v.fi>)
Re: CVE Request (2002): Linux TCP stack could accept invalid TCP flag combinations (Kurt Seifried <kseifried@...hat.com>)
Re: Adding Xen.org contact to linux-distros security list (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: Joomla! Security News 2012-02-03 (Kurt Seifried <kseifried@...hat.com>)
Re: Adding Xen.org contact to linux-distros security list (Solar Designer <solar@...nwall.com>)

February 4 (6 messages)

Re: distros & linux-distros embargo period and message format (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: distros & linux-distros embargo period and message format (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: distros & linux-distros embargo period and message format (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)

February 5 (1 message)

Re: Adding Xen.org contact to linux-distros security list (Ian Campbell <ijc@....org>)

February 6 (4 messages)

CVE-2011-3637 Linux kernel: proc: fix Oops on invalid /proc/<pid>/maps access (Solar Designer <solar@...nwall.com>)
Re: CVE Request -- kernel: jbd/jbd2: invalid value of first log block leads to oops (Solar Designer <solar@...nwall.com>)
Re: CVE-2011-4324 kernel: nfsv4: mknod(2) DoS (Solar Designer <solar@...nwall.com>)
CVE-2011-4325 Linux kernel: nfs: diotest4 from LTP crash client (Solar Designer <solar@...nwall.com>)

February 7 (3 messages)

CVE request: Hash DoS vulnerability (ocert-2011-003) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Hash DoS vulnerability (ocert-2011-003) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2011-4325 Linux kernel: nfs: diotest4 from LTP crash client (Petr Matousek <pmatouse@...hat.com>)

February 8 (4 messages)

Re: CVE-2011-3637 Linux kernel: proc: fix Oops on invalid /proc/<pid>/maps access ("Jason A. Donenfeld" <Jason@...c4.com>)
Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on invalid /pro… (Solar Designer <solar@...nwall.com>)
CVE request: apr - Hash DoS vulnerability (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on invalid… (Djalal Harouni <tixxdz@...ndz.org>)

February 9 (15 messages)

Re: CVE request: apr - Hash DoS vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on inva… ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on inva… ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on inva… ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on invalid … (Solar Designer <solar@...nwall.com>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on invalid … (Solar Designer <solar@...nwall.com>)
Re: CVE-2011-4325 Linux kernel: nfs: diotest4 from LTP crash client (Solar Designer <solar@...nwall.com>)
Re: Linux procfs infoleaks via self-read by a SUID/SGID program (was: CVE-2011-3637 Linux kernel: proc: fix Oops on invalid… (Djalal Harouni <tixxdz@...ndz.org>)
MySQL 0-day - does it need a CVE? (Kurt Seifried <kseifried@...hat.com>)
Re: MySQL 0-day - does it need a CVE? (Henri Salo <henri@...v.fi>)
Re: MySQL 0-day - does it need a CVE? (Henri Salo <henri@...v.fi>)
Re: MySQL 0-day - does it need a CVE? (Solar Designer <solar@...nwall.com>)
Re: MySQL 0-day - does it need a CVE? (Yves-Alexis Perez <corsac@...ian.org>)
Re: MySQL 0-day - does it need a CVE? (Kurt Seifried <kseifried@...hat.com>)
Re: MySQL 0-day - does it need a CVE? (Yves-Alexis Perez <corsac@...ian.org>)

February 10 (9 messages)

CVE request: surf (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: surf (Kurt Seifried <kseifried@...hat.com>)
Re: MySQL 0-day - does it need a CVE? (Henri Salo <henri@...v.fi>)
imagemagick invalid validation DoS CVE-2012-0247 and CVE-2012-02478 (Henri Salo <henri@...v.fi>)
[vs] CVE-2012-1037 GLPI <= 0.80.61 LFI/RFI (Emilien Girault <egirault@...c.fr.sogeti.com>)
Re: imagemagick invalid validation DoS CVE-2012-0247 and CVE-2012-02478 (Vincent Danen <vdanen@...hat.com>)
Re: imagemagick invalid validation DoS CVE-2012-0247 and CVE-2012-02478 (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: surf (Florian Weimer <fw@...eb.enyo.de>)
RE: CVE request: surf (Daniel Suarez <daniel@...isasecure.com>)

February 11 (3 messages)

Re: MySQL 0-day - does it need a CVE? (Solar Designer <solar@...nwall.com>)
CVE-request: Webcalendar 1.2.4 location XSS (Henri Salo <henri@...v.fi>)
Re: CVE request: surf (Kurt Seifried <kseifried@...hat.com>)

February 12 (4 messages)

Re: CVE-request: Webcalendar 1.2.4 location XSS (Eitan Adler <lists@...anadler.com>)
Re: CVE-request: Webcalendar 1.2.4 location XSS (Henri Salo <henri@...v.fi>)
Re: CVE-request: Webcalendar 1.2.4 location XSS (Henri Salo <henri@...v.fi>)
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)

February 13 (6 messages)

Subscribe to linux-distros? (Matthias Weckbecker <mweckbecker@...e.de>)
Re: Subscribe to linux-distros? (Marcus Meissner <meissner@...e.de>)
CVE Request -- python (SimpleXMLRPCServer): DoS (excessive CPU usage) via malformed XML-RPC / HTTP POST request (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- python (SimpleXMLRPCServer): DoS (excessive CPU usage) via malformed XML-RPC / HTTP POST request (Kurt Seifried <kseifried@...hat.com>)
Re: CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: Webcalendar 1.2.4 location XSS (Kurt Seifried <kseifried@...hat.com>)

February 14 (4 messages)

Re: CVE Request -- python (SimpleXMLRPCServer): DoS (excessive CPU usage) via malformed XML-RPC / HTTP POST request (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Subscribe to linux-distros? (Solar Designer <solar@...nwall.com>)
Re: CVE Request -- python (SimpleXMLRPCServer): DoS (excessive CPU usage) via malformed XML-RPC / HTTP POST request (David Malcolm <dmalcolm@...hat.com>)
Re: CVE Requests for FFmpeg 0.9.1 (Kurt Seifried <kseifried@...hat.com>)

February 15 (2 messages)

CVE request: mumble local information disclosure (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: mumble local information disclosure (Kurt Seifried <kseifried@...hat.com>)

February 16 (3 messages)

Re: CVE request: mumble local information disclosure (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: mumble local information disclosure (Kurt Seifried <kseifried@...hat.com>)
Re: CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)

February 17 (2 messages)

Re: CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-0864 assignment notification -- glibc F_S format string protection bypass via "nargs" integer overflow (Stefan Cornelius <scorneli@...hat.com>)

February 18 (2 messages)

Re: CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability (Kurt Seifried <kseifried@...hat.com>)
TORCS 1.3.2 xml buffer overflow - CVE-2012-1189 (Andres Gomez <agomez@...idsignal.com>)

February 20 (11 messages)

Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (Nico Golde <oss-security+ml@...lde.de>)
Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (Henri Salo <henri@...v.fi>)
Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (Nico Golde <oss-security+ml@...lde.de>)
OxWall 1.1.1 <= Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Bugs in "file" program VU#621745 ("CERT(R) Coordination Center" <cert@...t.org>)
Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. (Kurt Seifried <kseifried@...hat.com>)
Re: Bugs in "file" program VU#621745 (Kurt Seifried <kseifried@...hat.com>)
Re: OxWall 1.1.1 <= Multiple Cross Site Scripting Vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities (Kurt Seifried <kseifried@...hat.com>)

February 22 (2 messages)

libxml2: hash table collisions CPU usage DoS (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE-2012-0875: systemtap memory disclosure/kernel panic when processing malformed DWARF unwind data (Vincent Danen <vdanen@...hat.com>)

February 23 (5 messages)

CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with "paster serve" as ro… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Vulnerabilitites in Debian F*EX <= 20100208 and F*EX 20111129-2. ("Steven M. Christey" <coley@...-smtp.mitre.org>)
CVE request -- kernel: block: CLONE_IO io_context refcounting issues (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- python-paste-script: Supplementary groups not dropped when started an application with "paster serve" a… (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request -- kernel: block: CLONE_IO io_context refcounting issues (Kurt Seifried <kseifried@...hat.com>)

February 24 (3 messages)

Re: MySQL 0-day - does it need a CVE? (Tomas Hoger <thoger@...hat.com>)
Re: MySQL 0-day - does it need a CVE? (Kurt Seifried <kseifried@...hat.com>)
Re: MySQL 0-day - does it need a CVE? (Larry Stefonic <larry@...sl.com>)

February 25 (2 messages)

Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)
Re: Attack on badly configured Netfilter-based firewalls (Yves-Alexis Perez <corsac@...ian.org>)

February 26 (5 messages)

Re: Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)
Re: Attack on badly configured Netfilter-based firewalls (Kurt Seifried <kseifried@...hat.com>)
Re: Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)
Re: Attack on badly configured Netfilter-based firewalls (Solar Designer <solar@...nwall.com>)
Re: Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)

February 27 (27 messages)

Re: Attack on badly configured Netfilter-based firewalls (Eugene Teo <eugene@...hat.com>)
Re: Attack on badly configured Netfilter-based firewalls (Solar Designer <solar@...nwall.com>)
CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Attack on badly configured Netfilter-based firewalls (Sebastian Krahmer <krahmer@...e.de>)
Re: Attack on badly configured Netfilter-based firewalls (ArkanoiD <ark@...ex.net>)
Re: Attack on badly configured Netfilter-based firewalls (Sebastian Krahmer <krahmer@...e.de>)
Case YVS Image Gallery (Henri Salo <henri@...v.fi>)
CVE Request -- Multiple instances of insecure temporary file use (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)
CVE request: openssl: null pointer dereference issue (Matthias Weckbecker <mweckbecker@...e.de>)
Re: Case YVS Image Gallery (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- Multiple instances of insecure temporary file use (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: openssl: null pointer dereference issue (Kurt Seifried <kseifried@...hat.com>)
Re: Attack on badly configured Netfilter-based firewalls (Florian Weimer <fw@...eb.enyo.de>)
Re: Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)
Re: CVE request: smokeping XSS (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Rafał Malinowski <rafal.przemyslaw.malinow…)
Re: Attack on badly configured Netfilter-based firewalls (yersinia <yersinia.spiros@...il.com>)
DesktopOnNet 3 Beta LFI (Whitney Houston <i4m4l1v3b17ch3z@...il.com>)
Re: DesktopOnNet 3 Beta LFI (Whitney Houston <i4m4l1v3b17ch3z@...il.com>)
Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Mateusz Goik <mateusz.goik@...antsoft.pl>)
Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Mateusz Goik <mateusz.goik@...antsoft.pl>)
Re: Re: DesktopOnNet 3 Beta LFI (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Rafał Malinowski <rafal.przemyslaw.mal…)
Re: Case YVS Image Gallery (Henri Salo <henri@...v.fi>)

February 28 (16 messages)

Re: Attack on badly configured Netfilter-based firewalls (Eric Leblond <eric@...it.org>)
Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Rafał Malinowski <rafal.przemyslaw.malinow…)
CVE request -- kernel: cifs: dentry refcount leak when opening a FIFO on lookup leads to panic on unmount (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request -- kernel: cifs: dentry refcount leak when opening a FIFO on lookup leads to panic on unmount (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (cve-assign@...re.org)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
CVE request: init script x11-common creates directories in insecure manners (vladz <vladz@...zero.fr>)
CVE Request (minor) -- osc: Improper sanitization of terminal emulator escape sequences when displaying build log and buil… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (cve-assign@...re.org)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: openssl: null pointer dereference issue (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request (minor) -- osc: Improper sanitization of terminal emulator escape sequences when displaying build log and bui… (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE Request (minor) -- osc: Improper sanitization of terminal emulator escape sequences when displaying build log … (Kurt Seifried <kseifried@...hat.com>)

February 29 (9 messages)

Re: CVE request: init script x11-common creates directories in insecure manners (Kurt Seifried <kseifried@...hat.com>)
CVE Request: NetworkManager arbitrary file access (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Rafał Malinowski <rafal.przemyslaw.mal…)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE Request (minor) -- osc: Improper sanitization of terminal emulator escape sequences when displaying build log and… (Marcus Meissner <meissner@...e.de>)
Re: Bugs in "file" program VU#621745 (Florian Weimer <fw@...eb.enyo.de>)
Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history (cve-assign@...re.org)
Re: Bugs in "file" program VU#621745 (Kurt Seifried <kseifrie@...hat.com>)
Re: Bugs in "file" program VU#621745 (Kurt Seifried <kseifried@...hat.com>)

189 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.