oss-security mailing list - 2012/11

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2012/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 2	² 10	³	⁴ 1
⁵ 10	⁶ 18	⁷ 6	⁸ 2	⁹ 8	¹⁰ 11	¹¹ 7
¹² 3	¹³ 16	¹⁴ 15	¹⁵ 6	¹⁶ 3	¹⁷	¹⁸ 1
¹⁹ 4	²⁰ 5	²¹ 2	²² 3	²³ 8	²⁴	²⁵
²⁶ 13	²⁷ 16	²⁸ 12	²⁹ 6	³⁰ 3

Messages by day:

November 1 (2 messages)

Re: CVE Request for Drupal Contributed Modules ("Steven M. Christey" <coley@...-smtp.mitre.org>)
CVE-2012-4233: multiple null pointer dereference flaws in LibreOffice/OpenOffice.org (Vincent Danen <vdanen@...hat.com>)

November 2 (10 messages)

Re: CVE-2012-4233: multiple null pointer dereference flaws in LibreOffice/OpenOffice.org (Marcus Meissner <meissner@...e.de>)
Re: CVE-2012-4233: multiple null pointer dereference flaws in LibreOffice/OpenOffice.org (Caolán McNamara <caolanm@...hat.com>)
libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request -- pgbouncer: DoS (pooler server shutdown) by adding database with large name (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Strange CVE situation (at least one ID should come of this) (Josh Bressers <bressers@...hat.com>)
Re: libfpx Duplicate CVEs (CVE-2011-5232 and CVE-2012-0025) ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- pgbouncer: DoS (pooler server shutdown) by adding database with large name (Kurt Seifried <kseifried@...hat.com>)
Re: Strange CVE situation (at least one ID should come of this) (cve-assign@...re.org)
Dokeos 2.1.1 XSS CVE-2012-5776 (cve-assign@...re.org)

November 4 (1 message)

YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (Reed Loden <reed@...dloden.com>)

November 5 (10 messages)

Re: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (Kurt Seifried <kseifried@...hat.com>)
Re: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (Reed Loden <reed@...dloden.com>)
Request for linux-distros@...openwall.org membership (Premchand Koneru <pkoneru@...sta.com>)
Re: CVE Request for Drupal Contributed Modules (Greg Knaddison <greg.knaddison@...il.com>)
Re: operator new[] overflow checking in G++ (Florian Weimer <fweimer@...hat.com>)
Re: Request for linux-distros@...openwall.org membership (Henri Salo <henri@...v.fi>)
Re: Request for linux-distros@...openwall.org membership (Kurt Seifried <kseifried@...hat.com>)
TTY handling when executing code in different lower-privileged context (su, virt containers) (halfdog <me@...fdog.net>)
Re: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (Kurt Seifried <kseifried@...hat.com>)
RE: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure ("Christey, Steven M." <coley@...re.org>)

November 6 (18 messages)

gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: Request for linux-distros@...openwall.org membership (Tomas Hoger <thoger@...hat.com>)
Re: TTY handling when executing code in different lower-privileged context (su, virt containers) (vladz <vladz@...zero.fr>)
Re: Request for linux-distros@...openwall.org membership (akuster <akuster@...sta.com>)
Re: Request for linux-distros@...openwall.org membership (John Haxby <john.haxby@...cle.com>)
Re: TTY handling when executing code in different lower-privileged context (su, virt containers) (David Black <disclosure@....org>)
Re: Request for linux-distros@...openwall.org membership (Tomas Hoger <thoger@...hat.com>)
Re: Re: TTY handling when executing code in different lower-privileged context (su, virt containers) (Marcus Meissner <meissner@...e.de>)
Re: Request for linux-distros@...openwall.org membership (akuster <akuster@...sta.com>)
Re: Request for linux-distros@...openwall.org membership (akuster <akuster@...sta.com>)
Re: Re: TTY handling when executing code in different lower-privileged context (su, virt containers) ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
Re: Request for linux-distros@...openwall.org membership (akuster <akuster@...sta.com>)
Re: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-2012-4461 -- kernel: kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek <pmatouse@...hat.com>)
Re: TTY handling when executing code in different lower-privileged context (su, virt containers) (halfdog <me@...fdog.net>)
Re: TTY handling when executing code in different lower-privileged context (su, virt containers) (halfdog <me@...fdog.net>)
Re: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (Kurt Seifried <kseifried@...hat.com>)
Re: Request for linux-distros@...openwall.org membership (Kurt Seifried <kseifried@...hat.com>)

November 7 (6 messages)

CVE Request -- axis2, axis2c (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE Request -- axis2, axis2c (David Jorm <djorm@...hat.com>)
CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix (Matthew Wilkes <matthew.wilkes@...ne.org>)
IcedTea-Web CVE-2012-4540 (Tomas Hoger <thoger@...hat.com>)
[OSSA 2012-017] Authentication bypass for image deletion (CVE-2012-4573) (Russell Bryant <rbryant@...hat.com>)

November 8 (2 messages)

CVE request --- acceptation of overlapping ipv6 fragments (Petr Matousek <pmatouse@...hat.com>)
Re: [OSSA 2012-017] Authentication bypass for image deletion (CVE-2012-4573) (Russell Bryant <rbryant@...hat.com>)

November 9 (8 messages)

Re: Re: [OSSA 2012-017] Authentication bypass for image deletion (CVE-2012-4573) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request --- acceptation of overlapping ipv6 fragments (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix (Kurt Seifried <kseifried@...hat.com>)
Re: Request for linux-distros@...openwall.org membership (akuster <akuster@...sta.com>)
[OSSA 2012-017.1] Authentication bypass for image deletion (CVE-2012-4573, CVE-2012-5482) ERRATA 1 (Russell Bryant <rbryant@...hat.com>)
Re: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix (cve-assign@...re.org)
Re: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix (Matthew Wilkes <matthew.wilkes@...ne.org>)
RE: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix ("Christey, Steven M." <coley@...re.org>)

November 10 (11 messages)

Re: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- WeeChat (prior to 0.3.9.1): Heap-based buffer overflow when decoding IRC colors in strings (Jan Lieskovsky <jlieskov@...hat.com>)
Privilege escalation (lpadmin -> root) in cups (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version (Ralf Schlatterbeck <rsc@...tux.com>)
Re: Privilege escalation (lpadmin -> root) in cups (Yves-Alexis Perez <corsac@...ian.org>)
Re: Request for linux-distros@...openwall.org membership (Solar Designer <solar@...nwall.com>)
CVE request: TYPO3-CORE-SA-2012-005 (Florian Weimer <fw@...eb.enyo.de>)
CVE request -- vdsm: certificate generation upon node creation (Petr Matousek <pmatouse@...hat.com>)
CVE request -- Linux kernel: mm/hotplug: failure in propagating hot-added memory to other nodes (Petr Matousek <pmatouse@...hat.com>)

November 11 (7 messages)

Re: CVE request: TYPO3-CORE-SA-2012-005 (Kurt Seifried <kseifried@...hat.com>)
Re: Privilege escalation (lpadmin -> root) in cups (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request -- vdsm: certificate generation upon node creation (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request -- Linux kernel: mm/hotplug: failure in propagating hot-added memory to other nodes (Kurt Seifried <kseifried@...hat.com>)
Re: Privilege escalation (lpadmin -> root) in cups (Yves-Alexis Perez <corsac@...ian.org>)
Gajim fails to handle invalid certificates (y33t <y33t@...mail.org>)
Re: Privilege escalation (lpadmin -> root) in cups (Yves-Alexis Perez <corsac@...ian.org>)

November 12 (3 messages)

Re: Request for linux-distros@...openwall.org membership (Premchand Koneru <pkoneru@...sta.com>)
Re: CVE Request -- WeeChat (prior to 0.3.9.1): Heap-based buffer overflow when decoding IRC colors in strings (cve-assign@...re.org)
VLC 2.0.4 SHAddToRecentDocs CVE-2012-5855 (cve-assign@...re.org)

November 13 (16 messages)

Xen Security Advisory 20 (CVE-2012-4535) - Timer overflow DoS vulnerability (Xen.org security team <security@....org>)
Xen Security Advisory 21 (CVE-2012-4536) - pirq range check DoS vulnerability (Xen.org security team <security@....org>)
Xen Security Advisory 23 (CVE-2012-4538) - Unhooking empty PAE entries DoS vulnerability (Xen.org security team <security@....org>)
Xen Security Advisory 24 (CVE-2012-4539) - Grant table hypercall infinite loop DoS vulnerability (Xen.org security team <security@....org>)
Xen Security Advisory 25 (CVE-2012-4544,CVE-2012-2625) - Xen domain builder Out-of-memory due to malicious kernel/ramdi… (Xen.org security team <security@....org…)
Xen Security Advisory 22 (CVE-2012-4537) - Memory mapping failure DoS vulnerability (Xen.org security team <security@....org>)
CVE Request -- quagga (ospf6d): Assertion failure when removing routes (retrieving information which route to remove) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: mantis before 1.2.12 (Hanno Böck <hanno@...eck.de>)
[OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Tim Brown <timb@...nvas.org>)
Re: CVE request -- Linux kernel: mm/hotplug: failure in propagating hot-added memory to other nodes (Marcus Meissner <meissner@...e.de>)
Re: CVE request -- Linux kernel: mm/hotplug: failure in propagating hot-added memory to other nodes (Petr Matousek <pmatouse@...hat.com>)
Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Tim Brown <timb@...nvas.org>)
Re: CVE request: mantis before 1.2.12 (Kurt Seiifried <kseifried@...hat.com>)
Re: CVE Request -- quagga (ospf6d): Assertion failure when removing routes (retrieving information which route to remove) (Kurt Seiifried <kseifried@...hat.com>)
Re: CVE request: mantis before 1.2.12 (Hanno Böck <hanno@...eck.de>)
Re: Privilege escalation (lpadmin -> root) in cups (Sean Amoss <ackle@...too.org>)

November 14 (15 messages)

Re: CVE request: mantis before 1.2.12 (Kurt Seiifried <kseifried@...hat.com>)
Re: Gajim fails to handle invalid certificates (Kurt Seiifried <kseifried@...hat.com>)
Re: Gajim fails to handle invalid certificates (Florian Weimer <fweimer@...hat.com>)
Re: Gajim fails to handle invalid certificates (Kurt Seifried <kseifried@...hat.com>)
Re: Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- firebird: DoS (NULL pointer dereference) while preparing an empty query with trace enabled (Jan Lieskovsky <jlieskov@...hat.com>)
Linux kernel handling of IPv6 temporary addresses (George Kargiotakis <kargig@...d.gr>)
Re: CVE Request -- firebird: DoS (NULL pointer dereference) while preparing an empty query with trace enabled (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: SMF index.php msg parameter SQL-injection (2005) (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Michal Ambroz <rebus@...nam.cz>)
Re: Linux kernel handling of IPv6 temporary addresses (Greg KH <gregkh@...uxfoundation.org>)
Re: Vulnerabilities in Oki CUPS printer drivers (Kurt Seifried <kseifried@...hat.com>)
Re: Vulnerabilities in Oki CUPS printer drivers (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
HT Editor 2.0.20 buffer overflows CVE-2012-5867 (cve-assign@...re.org)

November 15 (6 messages)

Re: Request for linux-distros@...openwall.org membership (Solar Designer <solar@...nwall.com>)
Fwd: [ANNOUNCE] CGIT v0.9.1 Released ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Re: CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version (Ralf Schlatterbeck <rsc@...tux.com>)
CVE Request -- perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request -- vCalendar plugin for Claws Mail: credentials exposed on interface (Ricardo Mones <ricardo@...es.org>)
Re: CVE Request -- perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers (Kurt Seifried <kseifried@...hat.com>)

November 16 (3 messages)

Re: CVE request: mantis before 1.2.12 (cve-assign@...re.org)
CVE Request: Python keyring (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: YUI 2.x security issue regarding embedded SWF files -- or, How Not To Handle A Security Disclosure (cve-assign@...re.org)

November 18 (1 message)

CVE Request for Drupal Contributed Modules (Forest Monsen <forest.monsen@...il.com>)

November 19 (4 messages)

Moodle security notifications public (Michael de Raadt <michaeld@...dle.com>)
Fwd: [[Weechat-security] Security vulnerability in WeeChat 0.3.0 -> 0.3.9.1] (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
Re: CVE Request: Python keyring (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Fwd: [[Weechat-security] Security vulnerability in WeeChat 0.3.0 -> 0.3.9.1] (Kurt Seifried <kseifried@...hat.com>)

November 20 (5 messages)

Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names (Jan Lieskovsky <jlieskov@...hat.com>)
libssh 0.5.3 release fixes multiple security issues (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Forest Monsen <forest.monsen@...il.com>)

November 21 (2 messages)

lighttpd 1.4.32 released, fixing CVE-2012-5533 (Stefan Bühler <stbuehler@...httpd.net>)
CVE Request: Gimp memory corruption vulnerability (Andrés Gómez Ramírez <andresgomezram7@...il.com>)

November 22 (3 messages)

Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names (Matthias Weckbecker <mweckbecker@...e.de>)
Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names (Attila Bogár <attila.bogar@...guamatics.com>)
Re: CVE Request: Python keyring (Matthias Weckbecker <mweckbecker@...e.de>)

November 23 (8 messages)

CVE Request -- android-tools (server): Insecure temporary file used for logging (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Gajim fails to handle invalid certificates (Florian Weimer <fweimer@...hat.com>)
CVE Request -- kronolith: Two sets (3.0.17 && 3.0.18) of XSS flaws (Jan Lieskovsky <jlieskov@...hat.com>)
[oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision (Andrea Barisani <lcars@...rt.org>)
CVE Request -- (Horde) IMP (prior v5.0.24-git): Obscure XSS issue when uploading attachments. (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- (Horde) IMP (prior v5.0.24-git): Obscure XSS issue when uploading attachments. (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- kronolith: Two sets (3.0.17 && 3.0.18) of XSS flaws (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- android-tools (server): Insecure temporary file used for logging (Kurt Seifried <kseifried@...hat.com>)

November 26 (13 messages)

CVE Request: slowloris for tomcat (David Jorm <djorm@...hat.com>)
Re: CVE Request: slowloris for tomcat (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Kurt Seifried <kseifried@...hat.com>)
Re: Security issue in icecast (Moritz Naumann <oss-security@...itz-naumann.com>)
CVE Request -- Symfony (php-symfony-symfony) < 1.4.20: Ability to read arbitrary files on the server, readable with the we… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: Curl insecure usage (Moritz Muehlenhoff <jmm@...ian.org>)
tor DoS via SENDME cells (Vincent Danen <vdanen@...hat.com>)
CVE Request -- Dancer.pm / perl-Dancer / libdancer-perl: Newline injection due to improper CRLF escaping in cookie() and c… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: Curl insecure usage (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- Dancer.pm / perl-Dancer / libdancer-perl: Newline injection due to improper CRLF escaping in cookie() a… (Kurt Seifried <kseifried@...hat.com>)
Re: tor DoS via SENDME cells (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- Symfony (php-symfony-symfony) < 1.4.20: Ability to read arbitrary files on the server, readable with th… (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Forest Monsen <forest.monsen@...il.com>)

November 27 (16 messages)

Re: CVE Request: Gimp memory corruption vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Python keyring (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Python keyring (Kurt Seifried <kseifried@...hat.com>)
CVE request: libproxy issue (Matthias Weckbecker <mweckbecker@...e.de>)
Re: CVE request: libproxy issue (Tomas Hoger <thoger@...hat.com>)
Re: [oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision (Jan Lieskovsky <jlieskov@...hat.com>)
Re: [oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision (Andrea Barisani <lcars@...rt.org>)
Re: CVE request: libproxy issue (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-5532 hypervkvpd DoS (Vincent Danen <vdanen@...hat.com>)
Re: CVE-2012-5532 hypervkvpd DoS (Vincent Danen <vdanen@...hat.com>)
Re: CVE-2012-5532 hypervkvpd DoS (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: Curl insecure usage ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: [oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision ("Steven M. Christey" <coley@...-smtp.mitre.org>)
rssh: incorrect filtering of command line options (Yves-Alexis Perez <corsac@...ian.org>)
Re: rssh: incorrect filtering of command line options (Yves-Alexis Perez <corsac@...ian.org>)

November 28 (12 messages)

libtiff: Stack based buffer overflow when handling DOTRANGE tags (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: rssh: incorrect filtering of command line options (Yves-Alexis Perez <corsac@...ian.org>)
Re: rssh: incorrect filtering of command line options (Derek Martin <code@...zashack.org>)
Re: CVE-2012-5532 hypervkvpd DoS (Sebastian Krahmer <krahmer@...e.de>)
[OSSA 2012-018] EC2-style credentials invalidation issue (CVE-2012-5571) (Thierry Carrez <thierry@...nstack.org>)
[OSSA 2012-019] Extension of token validity through token chaining (CVE-2012-5563) (Thierry Carrez <thierry@...nstack.org>)
Re: CVE request -- vCalendar plugin for Claws Mail: credentials exposed on interface (Vincent Danen <vdanen@...hat.com>)
Re: CVE request -- vCalendar plugin for Claws Mail: credentials exposed on interface (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request -- vCalendar plugin for Claws Mail: credentials exposed on interface (Ricardo Mones <ricardo@...es.org>)
Re: CVE request -- vCalendar plugin for Claws Mail: credentials exposed on interface (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: Curl insecure usage (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Curl insecure usage (Kurt Seifried <kseifried@...hat.com>)

November 29 (6 messages)

CVE request for Drupal contributed modules (Forest Monsen <forest.monsen@...il.com>)
Re: CVE request for Drupal contributed modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Curl insecure usage (Fabian Keil <fk@...iankeil.de>)
CVE Request -- wireshark: Wireshark 1.6.12 and Wireshark 1.8.4 fixes (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- wireshark: Wireshark 1.6.12 and Wireshark 1.8.4 fixes (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Curl insecure usage (Moritz Mühlenhoff <jmm@...til.org>)

November 30 (3 messages)

CVE request for Ushahidi security vulnerability 2012-008 (Robbie Mackay <robbie@...ahidi.com>)
CVE Request: owncloud (Jamie Strandboge <jamie@...onical.com>)
Re: CVE Request: owncloud (Kurt Seifried <kseifried@...hat.com>)

191 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.