oss-security mailing list - 2012/08

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2012/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 10	² 8	³ 8	⁴ 5	⁵ 3
⁶ 8	⁷ 1	⁸ 4	⁹ 10	¹⁰ 8	¹¹ 7	¹²
¹³ 11	¹⁴ 1	¹⁵	¹⁶ 6	¹⁷ 3	¹⁸ 1	¹⁹ 2
²⁰ 13	²¹ 12	²² 10	²³ 2	²⁴ 8	²⁵ 4	²⁶ 3
²⁷ 10	²⁸ 15	²⁹ 7	³⁰ 7	³¹ 20

Messages by day:

August 1 (10 messages)

CVE Request: NVidia Linux driver (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE Request: NVidia Linux driver (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: NVidia Linux driver (Tavis Ormandy <taviso@...xchg8b.com>)
Re: CVE Request: NVidia Linux driver (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: CVE Request: NVidia Linux driver (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: CVE Request: NVidia Linux driver (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: NVidia Linux driver (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: NVidia Linux driver (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: CVE Request: NVidia Linux driver (Tavis Ormandy <taviso@...xchg8b.com>)
CVE request: Ganglia Web 3.5.1 (Vincent Danen <vdanen@...hat.com>)

August 2 (8 messages)

Re: CVE request: Ganglia Web 3.5.1 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Ushahidi (Robbie Mackay <robbie@...ahidi.com>)
CVE Request: php5 pdo array overread/crash (Marcus Meissner <meissner@...e.de>)
IcedTea-Web security fixes in 1.1.6 and 1.2.1 (Tomas Hoger <thoger@...hat.com>)
bind-dyndb-ldap DoS CVE-2012-3429 (Tomas Hoger <thoger@...hat.com>)
openvswitch world writable directories (CVE-2012-3449) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: php5 pdo array overread/crash (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal contributed modules (Greg Knaddison <greg.knaddison@...uia.com>)

August 3 (8 messages)

Re: openvswitch world writable directories (CVE-2012-3449) (Yves-Alexis Perez <corsac@...ian.org>)
Re: MySQL CVEs (was: Security vulnerability in MySQL/MariaDB sql/password.c) (Tomas Hoger <thoger@...hat.com>)
gnome-screensaver 3.4.2 locked only active screen (Marcus Meissner <meissner@...e.de>)
Remote DoS in Linux sfc driver through TCP MSS option (CVE-2012-3412) (Ben Hutchings <bhutchings@...arflare.com>)
Re: gnome-screensaver 3.4.2 locked only active screen (Kurt Seifried <kseifried@...hat.com>)
Re: openvswitch world writable directories (CVE-2012-3449) (Kurt Seifried <kseifried@...hat.com>)
CVE ASSIGNMENT: extplorer: creates world writable directory /var/lib/extplorer/ftp_tmp (Kurt Seifried <kseifried@...hat.com>)
CVE ASSIGNMENT: logol: creates world writable directory: /var/lib/logol/results (Kurt Seifried <kseifried@...hat.com>)

August 4 (5 messages)

CVE request for Calligra (Jeff Mitchell <mitchell@....org>)
Re: CVE request for Calligra (Agostino Sarubbo <ago@...too.org>)
Re: CVE request for Calligra (Jeff Mitchell <mitchell@....org>)
Re: CVE request for Calligra (Agostino Sarubbo <ago@...too.org>)
Re: CVE request for Calligra (Jeff Mitchell <mitchell@....org>)

August 5 (3 messages)

Re: CVE request for Calligra ("Jorge Manuel B. S. Vicetto" <jmbsvicetto@...il.com>)
Re: CVE request for Calligra (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Calligra (Kurt Seifried <kseifried@...hat.com>)

August 6 (8 messages)

Re: CVE request for Calligra (Charlie Miller <charlie.miller@...uvant.com>)
CVE Request: Linux kernel net/rds max socket length checking (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: Linux kernel net/rds max socket length checking (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request for Calligra (Jeff Mitchell <mitchell@....org>)
Re: CVE request for Calligra (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Calligra (Kurt Seifried <kseifried@...hat.com>)
CVE ASSIGN: pnp4nagios: process_perfdata.cfg world readable (Kurt Seifried <kseifried@...hat.com>)
Re: CVE ASSIGN: pnp4nagios: process_perfdata.cfg world readable (Christoph Anton Mitterer <calestyo@...entia.net>)

August 7 (1 message)

[OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447) (Thierry Carrez <thierry@...nstack.org>)

August 8 (4 messages)

Re: CVE request for Calligra (Jeff Mitchell <mitchell@....org>)
Test email - please ignore (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- libotr: Multiple heap-based buffer overflows in the Base64 decoder (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: NVidia Linux driver (cve-assign@...re.org)

August 9 (10 messages)

CVE Request: gnome-keyring: improper caching of gpg password/passphrase (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request: gnome-keyring: improper caching of gpg password/passphrase (Kurt Seifried <kseifried@...hat.com>)
Xen Security Advisory 11 (CVE-2012-3433) - HVM destroy p2m host DoS (Xen.org security team <security@....org>)
Re: CVE request for Ushahidi (Tim <tim-security@...tinelchicken.org>)
Re: CVE request for Ushahidi (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-3467: Unauthorized access (authentication bypass) from client to broker due to use of NullAuthenticator in shadow co… (Vincent Danen <vdanen@...hat.com>)
Randomness Attacks Against PHP Applications (Yves-Alexis Perez <corsac@...ian.org>)
Ruby on Rails Potential XSS Vulnerability in select_tag prompt (Santiago Pastorino <santiago@...works.com>)
XSS Vulnerability in strip_tags (Santiago Pastorino <santiago@...works.com>)
Potential XSS Vulnerability in Ruby on Rails (Santiago Pastorino <santiago@...works.com>)

August 10 (8 messages)

Re: CVE request for Calligra (Jeff Mitchell <mitchell@....org>)
Re: MySQL CVEs (was: Security vulnerability in MySQL/MariaDB sql/password.c) (Tomas Hoger <thoger@...hat.com>)
Possible data loss or data modification in ownCloud (Bruno Kleinert <fuddl@...ian.org>)
CVE Request: NeoInvoice Blind SQL Injection in signup_check.php (Adam Caudill <adam@...mcaudill.com>)
Re: Randomness Attacks Against PHP Applications (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE Request: NeoInvoice Blind SQL Injection in signup_check.php (Kurt Seifried <kseifried@...hat.com>)
CVE Request: rssh command-line parsing vulnerability (Russ Allbery <rra@...nford.edu>)
Re: Possible data loss or data modification in ownCloud (Simon McVittie <smcv@...ian.org>)

August 11 (7 messages)

ownCloud - matching CVEs to fix information and vice versa (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: rssh command-line parsing vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: rssh command-line parsing vulnerability (Russ Allbery <rra@...nford.edu>)
Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) (Solar Designer <solar@...nwall.com>)
Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) (Kyle Creyts <kyle.creyts@...il.com>)

August 13 (11 messages)

Security flaw in GNU Emacs file-local variables (Chong Yidong <cyd@....org>)
Re: Security flaw in GNU Emacs file-local variables (Kurt Seifried <kseifried@...hat.com>)
Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines (Kurt Seifried <kseifried@...hat.com>)
Total Shop UK eCommerce Generic Cross-Site Scripting ("research" <research@...ctionis.co.uk>)
TCExam Edit SQL Injection ("research" <research@...ctionis.co.uk>)
CVE ID request for fetchmail segfault in NTLM protocol exchange (Matthias Andree <matthias.andree@....de>)
ANN: Beaker 1.6.4 released with important security update (Ben Bangert <ben@...ovie.org>)
Re: CVE ID request for fetchmail segfault in NTLM protocol exchange (Kurt Seifried <kseifried@...hat.com>)

August 14 (1 message)

Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) (Kurt Seifried <kseifried@...hat.com>)

August 16 (6 messages)

pcp: Multiple security flaws (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request: SquidClamav insufficient escaping flaws (Sean Amoss <ackle@...too.org>)
phpMyAdmin PMASA-2012-3 (CVE-2012-4219) and PMASA-2012-4 (CVE-2012-4345) issues (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request: SquidClamav insufficient escaping flaws (Kurt Seifried <kseifried@...hat.com>)
Re: MySQL CVEs (was: Security vulnerability in MySQL/MariaDB sql/password.c) ("Steven M. Christey" <coley@...-smtp.mitre.org>)
GIMP Scriptfu Python Remote Command Execution ("research" <research@...ctionis.co.uk>)

August 17 (3 messages)

Re: [Full-disclosure] GIMP Scriptfu Python Remote Command Execution (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: [Full-disclosure] GIMP Scriptfu Python Remote Command Execution (Giles Coochey <giles@...chey.net>)
CVE request: tinyproxy (Jamie Strandboge <jamie@...onical.com>)

August 18 (1 message)

Re: CVE request: tinyproxy (Kurt Seifried <kseifried@...hat.com>)

August 19 (2 messages)

ocPoral CMS 8.x | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
ocPoral CMS 8.x | Session Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)

August 20 (13 messages)

RE: [Full-disclosure] GIMP Scriptfu Python Remote Command Execution ("research" <research@...ctionis.co.uk>)
CVE-request: Roundcube XSS issues (Henri Salo <henri@...v.fi>)
Re: CVE-request: Roundcube XSS issues (Henri Salo <henri@...v.fi>)
Re: CVE-request: Roundcube XSS issues (Hanno Böck <hanno@...eck.de>)
Re: CVE-request: Roundcube XSS issues (Henri Salo <henri@...v.fi>)
The Gimp PSD plug-in CVE-2012-3402 issue (Jan Lieskovsky <jlieskov@...hat.com>)
The Gimp CEL plug-in CVE-2012-3403 issue (Jan Lieskovsky <jlieskov@...hat.com>)
The Gimp GIF plug-in CVE-2012-3481 issue (Matthias Weckbecker <mweckbecker@...e.de>)
Re: CVE-request: Roundcube XSS issues (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk() (Petr Matousek <pmatouse@...hat.com>)
CVE Request -- kernel: mm: use-after-free in madvise_remove() (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk() (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- kernel: mm: use-after-free in madvise_remove() (Kurt Seifried <kseifried@...hat.com>)

August 21 (12 messages)

Two munin issues, now with CVEs (Kurt Seifried <kseifried@...hat.com>)
ocaml-xml-light: hash table collisions CPU usage DoS CVE-2012-3514 (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- Tor 0.2.2.38: Three issues (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk() (akuster <akuster@...sta.com>)
Re: CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk() (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- Tor 0.2.2.38: Three issues (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- php-geshi / GeSHi (1.0.8.11): Remote directory traversal and information disclosure in the cssgen contrib m… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- inn (nnrpd): Prone to STARTTLS plaintext command injection (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- php-geshi / GeSHi (1.0.8.11): Remote directory traversal and information disclosure in the cssgen cont… (Raphael Geissert <geissert@...ian.org>)
CVE request: Typo3 (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE Request -- php-geshi / GeSHi (1.0.8.11): Remote directory traversal and information disclosure in the cssgen contr… (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- inn (nnrpd): Prone to STARTTLS plaintext command injection (Kurt Seifried <kseifried@...hat.com>)

August 22 (10 messages)

CVE-2012-3520 kernel: af_netlink: invalid handling of SCM_CREDENTIALS passing (Petr Matousek <pmatouse@...hat.com>)
CVE Request: Apache mod RPAF denial of service (Thijs Kinkhorst <thijs@...ian.org>)
Any information on mesa/CVE-2012-2864? (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Randomness Attacks Against PHP Applications (Solar Designer <solar@...nwall.com>)
CVE Request -- jabberd2: Prone to unsolicited XMPP Dialback attacks (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- jabberd2: Prone to unsolicited XMPP Dialback attacks (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Apache mod RPAF denial of service (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Typo3 (Kurt Seifried <kseifried@...hat.com>)
Stripe Capture the Flag (John Collison <john@...lison.ie>)
Re: Stripe Capture the Flag (Solar Designer <solar@...nwall.com>)

August 23 (2 messages)

Re: Any information on mesa/CVE-2012-2864? (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: Stripe Capture the Flag (Carlos Alberto Lopez Perez <clopez@...lia.com>)

August 24 (8 messages)

Re: Stripe Capture the Flag (Thanh Nguyen <rd@...ecurity.net>)
Re: Stripe Capture the Flag (Filip Palian <s3810@...stk.edu.pl>)
zenoss issues (Thomas Pollet <thomas.pollet@...il.com>)
Re: zenoss issues (Thomas Pollet <thomas.pollet@...il.com>)
Re: Stripe Capture the Flag (Henri Salo <henri@...v.fi>)
oVirt 3.1 does not validate server certificates in python sdk and cli (CVE-2012-3533) (Vincent Danen <vdanen@...hat.com>)
Re: zenoss issues (Kurt Seifried <kseifried@...hat.com>)
Re: zenoss issues (Kurt Seifried <kseifried@...hat.com>)

August 25 (4 messages)

Re: CVE Request: SquidClamav insufficient escaping flaws ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE-request: Roundcube XSS issues ("Steven M. Christey" <coley@...-smtp.mitre.org>)
information request on security bug fix in GNU Gatekeeper 3.1 (Raphael Geissert <geissert@...ian.org>)
Re: information request on security bug fix in GNU Gatekeeper 3.1 (Jan Willamowius <jan@...lamowius.de>)

August 26 (3 messages)

Re: oVirt 3.1 does not validate server certificates in python sdk and cli (CVE-2012-3533) (Michael Pasternak <mpastern@...hat.com>)
Re: CVE-request: Roundcube XSS issues (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE-request: Roundcube XSS issues (Eygene Ryabinkin <rea-sec@...elabs.ru>)

August 27 (10 messages)

Re: Re: information request on security bug fix in GNU Gatekeeper 3.1 (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Heap-based buffer overflow in openjpeg (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request: Heap-based buffer overflow in openjpeg (Kurt Seifried <kseifried@...hat.com>)
CVE request: joomla before 1.5.26 password change (Hanno Böck <hanno@...eck.de>)
CVE request: crowbar ohai plugin: local privilege (root) escalation due to insecure tmp file handling (Thomas Biege <thomas@...e.de>)
Re: CVE request: joomla before 1.5.26 password change (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: crowbar ohai plugin: local privilege (root) escalation due to insecure tmp file handling (Kurt Seifried <kseifried@...hat.com>)
Re: Re: zenoss issues (Kurt Seifried <kseifried@...hat.com>)
Re: ownCloud - matching CVEs to fix information and vice versa (Kurt Seifried <kseifried@...hat.com>)
CVE request: letodms multiple issues (Raphael Geissert <geissert@...ian.org>)

August 28 (15 messages)

CVE Request: Java 7 code execution 0day (David Jorm <djorm@...hat.com>)
Re: CVE Request: Java 7 code execution 0day (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: letodms multiple issues (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Java 7 code execution 0day (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: letodms multiple issues (Raphael Geissert <geissert@...ian.org>)
Re: information request on security bug fix in GNU Gatekeeper 3.1 (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: letodms multiple issues (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: letodms multiple issues (Raphael Geissert <geissert@...ian.org>)
CVE for FreeBSD SCTP remote DoS? (Raphael Geissert <geissert@...ian.org>)
CVE-Request: apache2-mod_php5 AddHandler content confusion (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE for FreeBSD SCTP remote DoS? ("Simon L. B. Nielsen" <simon@...eBSD.org>)
CVE Request: Hash collision issue in Mono/C# (similar to Microsoft .NET issue) (Marcus Meissner <meissner@...e.de>)
Re: CVE-Request: apache2-mod_php5 AddHandler content confusion (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Hash collision issue in Mono/C# (similar to Microsoft .NET issue) (Kurt Seifried <kseifried@...hat.com>)
CVE request: FreeBSD SCTP remote DoS (Raphael Geissert <geissert@...ian.org>)

August 29 (7 messages)

Re: CVE Request: Java 7 code execution 0day (Eygene Ryabinkin <rea-sec@...elabs.ru>)
CVE Request -- wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-2012-3509: objalloc_alloc integer overflows in libiberty (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Request -- wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector (Kurt Seifried <kseifried@...hat.com>)
php header() header injection detection bypass (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: FreeBSD SCTP remote DoS (Kurt Seifried <kseifried@...hat.com>)
[icinga-web] rmtmp-files.sh ("Simon ." <bofh666ftw@...glemail.com>)

August 30 (7 messages)

Re: [icinga-web] rmtmp-files.sh (Kurt Seifried <kseifried@...hat.com>)
CVE request: crowbar XSS (Thomas Biege <thomas@...e.de>)
Re: Stripe Capture the Flag (Solar Designer <solar@...nwall.com>)
[OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3542) (Russell Bryant <rbryant@...hat.com>)
Re: [Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540) (Russell Bryant <rbryant@...hat.com>)
[OSSA 2012-013] Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542) (Russell Bryant <rbryant@...hat.com>)
Re: [icinga-web] rmtmp-files.sh ("Simon ." <bofh666ftw@...glemail.com>)

August 31 (20 messages)

Re: CVE request: crowbar XSS (Kurt Seifried <kseifried@...hat.com>)
CVE request: contao before 2.11.4 sql injection (Hanno Böck <hanno@...eck.de>)
Information on security issues fixed in ffmpeg 0.11? (Moritz Muehlenhoff <jmm@...til.org>)
Re: CVE Request -- wireshark (X >= 1.6.8): DoS (excessive CPU use and infinite loop) in DRDA dissector (Eygene Ryabinkin <rea-sec@...elabs.ru>)
operator new[] overflow checking in G++ (Florian Weimer <fweimer@...hat.com>)
CVE Request -- MediaWiki 1.19.2 and 1.18.5 multiple security flaws (Jan Lieskovsky <jlieskov@...hat.com>)
[Notification] CVE-2012-3500 - rpmdevtools, devscripts: TOCTOU race condition in annotate-output (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- kernel: net: slab corruption due to improper synchronization around inet->opt (Petr Matousek <pmatouse@...hat.com>)
Re: Three CVE requests: at-spi2-atk, as31, naxsi ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE Request -- MediaWiki 1.19.2 and 1.18.5 multiple security flaws (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- kernel: net: slab corruption due to improper synchronization around inet->opt (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- kernel: request_module() OOM local DoS (Petr Matousek <pmatouse@...hat.com>)
Re: Three CVE requests: at-spi2-atk, as31, naxsi (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: contao before 2.11.4 sql injection (Kurt Seifried <kseifried@...hat.com>)
Re: php header() header injection detection bypass (Kurt Seifried <kseifried@...hat.com>)
Re: [Notification] CVE-2012-3500 - rpmdevtools, devscripts: TOCTOU race condition in annotate-output (Jakub Wilk <jwilk@...ian.org>)
Re: CVE Request -- kernel: net: slab corruption due to improper synchronization around inet->opt (akuster <akuster@...sta.com>)
Re: operator new[] overflow checking in G++ (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: letodms multiple issues (Kurt Seifried <kseifried@...hat.com>)
Re: php header() header injection detection bypass (Raphael Geissert <geissert@...ian.org>)

207 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.