oss-security mailing list - 2013/05

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2013/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 5	² 20	³ 4	⁴ 3	⁵ 3
⁶ 6	⁷ 4	⁸ 3	⁹ 4	¹⁰ 5	¹¹ 6	¹² 3
¹³ 4	¹⁴ 11	¹⁵ 8	¹⁶ 16	¹⁷ 3	¹⁸ 12	¹⁹ 5
²⁰ 7	²¹ 2	²² 16	²³ 4	²⁴ 7	²⁵ 3	²⁶ 1
²⁷ 5	²⁸ 7	²⁹ 13	³⁰ 3	³¹ 7

Messages by day:

May 1 (5 messages)

Mediawiki CVE request ( was Fw: [MediaWiki-announce] MediaWiki Security Release: 1.20.5 and 1.19.6) (Hanno Böck <hanno@...eck.de>)
Re: Mediawiki CVE request ( was Fw: [MediaWiki-announce] MediaWiki Security Release: 1.20.5 and 1.19.6) (Kurt Seifried <kseifried@...hat.com>)
Re: Flightgear remote format string (Andrés Gómez Ramírez <andresgomezram7@...il.com>)
Re: upstream source code authenticity checking (Robbie MacKay <robbie@...ahidi.com>)
CVE Request: httplib2 ssl cert incorrect error handling (Marc Deslauriers <marc.deslauriers@...onical.com>)

May 2 (20 messages)

CVE Request for Drupal contributed module (Forest Monsen <forest.monsen@...il.com>)
Re: Flightgear remote format string (Kurt Seifried <kseifried@...hat.com>)
Fwd: Two libtiff (tiff2pdf flaws) (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Two libtiff (tiff2pdf flaws) (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request for Drupal contributed module (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: httplib2 ssl cert incorrect error handling (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- gpsd 3.9 fixing a denial of service flaw (Jan Lieskovsky <jlieskov@...hat.com>)
Xen Security Advisory 45 (CVE-2013-1918) - Several long latency operations are not preemptible (Xen.org security team <security@....org>)
Xen Security Advisory 49 (CVE-2013-1952) - VT-d interrupt remapping source validation flaw for bridges (Xen.org security team <security@....org>)
Re: Flightgear remote format string (Andrés Gómez Ramírez <andresgomezram7@...il.com>)
Re: upstream source code authenticity checking (Alistair Crooks <agc@...src.org>)
RE: Flightgear remote format string ("Christey, Steven M." <coley@...re.org>)
OpenPGP certifications are identity assertions [was: Re: upstream source code authenticity checking] (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: upstream source code authenticity checking (Kurt Seifried <kseifried@...hat.com>)
Re: upstream source code authenticity checking (Russ Allbery <rra@...nford.edu>)
Re: OpenPGP certifications are identity assertions [was: Re: upstream source code authenticity checking] (Simon McVittie <smcv@...ian.org>)
Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw (Kurt Seifried <kseifried@...hat.com>)
Re: upstream source code authenticity checking (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: upstream source code authenticity checking (Russ Allbery <rra@...nford.edu>)
Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw ("Eric S. Raymond" <esr@...rsus.com>)

May 3 (4 messages)

Re: Flightgear remote format string (Andrés Gómez Ramírez <andresgomezram7@...il.com>)
CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (P J P <ppandit@...hat.com>)
Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE-2013-1942 jPlayer 2.2.19 XSS (Salvatore Bonaccorso <carnil@...ian.org>)

May 4 (3 messages)

Re: Re-emergence of CVE-2008-4796 in Nagios current (Michael Gilbert <mgilbert@...ian.org>)
Re: upstream source code authenticity checking (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
CVE Request: YaBB 2.5.2 and earlier arbitrary code execution (John Lightsey <john@...nuts.net>)

May 5 (3 messages)

Re: CVE Request: YaBB 2.5.2 and earlier arbitrary code execution (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE-2013-1942 jPlayer 2.2.19 XSS (Kurt Seifried <kseifried@...hat.com>)

May 6 (6 messages)

CVE request: WordPress advanced-xml-reader XXE (Henri Salo <henri@...v.fi>)
Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (Marcus Meissner <meissner@...e.de>)
Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (Greg KH <greg@...ah.com>)
CVE request: OpenVPN use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt (Vincent Danen <vdanen@...hat.com>)
Xen Security Advisory 51 (CVE-2013-2007) - qemu guest agent (qga) insecure file permissions (Xen.org security team <security@....org>)
Re: CVE request: OpenVPN use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt (Kurt Seifried <kseifried@...hat.com>)

May 7 (4 messages)

CVE-2013-2060 OpenShift Origin: Potential remote command execution vulnerability in download cart url (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw (Jan Lieskovsky <jlieskov@...hat.com>)
nginx security advisory (CVE-2013-2028) (Andrew Alexeev <andrew@...nx.com>)
Re: nginx security advisory (CVE-2013-2028) (Florian Weimer <fweimer@...hat.com>)

May 8 (3 messages)

Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw ("Eric S. Raymond" <esr@...rsus.com>)
When does resource consumption become a security vulnerability? (Kurt Seifried <kseifried@...hat.com>)
CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun) (Peter Bex <Peter.Bex@...all.nl>)

May 9 (4 messages)

Re: CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun) (Peter Bex <Peter.Bex@...all.nl>)
[OSSA 2013-010] Nova uses insecure keystone middleware tmpdir by default (CVE-2013-2030) (Thierry Carrez <thierry@...nstack.org>)
[OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) (Thierry Carrez <thierry@...nstack.org>)
RE: [Openstack] [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) ("Miller, Mark M (EB SW Cloud - R&D - Corvalli…)

May 10 (5 messages)

Re: Multiple vulnerabilities in PHP Address Book v8.2.5 (Doraemon Sk8ers <doraemon.sk8ers@...il.com>)
CVE request: Linux kernel: tuntap refuse to re-attach to different tun_struct (P J P <ppandit@...hat.com>)
Re: CVE request: Linux kernel: tuntap refuse to re-attach to different tun_struct (Petr Matousek <pmatouse@...hat.com>)
CVE request: password exposure in kdelibs when showing "internal server error" messages (Vincent Danen <vdanen@...hat.com>)
CVE Request: kdelibs (Seth Arnold <seth.arnold@...onical.com>)

May 11 (6 messages)

Re: Multiple vulnerabilities in PHP Address Book v8.2.5 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: password exposure in kdelibs when showing "internal server error" messages (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: kdelibs (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Dolibarr - Multiple Vulnerabilities (chevalier 3as <chevalier3as@...il.com>)
Re: CVE Request: Dolibarr - Multiple Vulnerabilities (chevalier 3as <chevalier3as@...il.com>)

May 12 (3 messages)

CVE request: MoinMoin Wiki (remote code execution vulnerability) (Luciano Bello <luciano@...ian.org>)
CVE request: MoinMoin Wiki (remote code execution vulnerability) (Luciano Bello <luciano@...ian.org>)
Re: CVE request: MoinMoin Wiki (remote code execution vulnerability) (Thomas Waldmann <tw@...dmann-edv.de>)

May 13 (4 messages)

CVE Request: Storable::thaw called on cookie data in multiple CPAN modules (John Lightsey <john@...nuts.net>)
CVE request: Gallery multiple XSS vulnerabilities (Henri Salo <henri@...v.fi>)
nginx security advisory (CVE-2013-2070) (Andrew Alexeev <andrew@...nx.com>)
CVE-2002-2443: Kerberos kpasswd UDP ping-pong vulnerability (Vincent Danen <vdanen@...hat.com>)

May 14 (11 messages)

Re: CVE request: Gallery multiple XSS vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Storable::thaw called on cookie data in multiple CPAN modules (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request: Dolibarr - Multiple Vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
CVE Request: linux kernel perf out-of-bounds access (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE Request: linux kernel perf out-of-bounds access (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request: linux kernel perf out-of-bounds access (Petr Matousek <pmatouse@...hat.com>)
Re: CVE-2002-2443: Kerberos kpasswd UDP ping-pong vulnerability (George Theall <gtheall@...able.com>)
ownCloud Security Advisories oC-SA-0{19-27} (Lukas Reschke <lukas@...cloud.org>)
Re: Re: CVE-2002-2443: Kerberos kpasswd UDP ping-pong vulnerability (Vincent Danen <vdanen@...hat.com>)
Remote command Injection in Creme Fraiche 0.6 Ruby Gem ("Larry W. Cashdollar" <larry0@...com>)
Re: Remote command Injection in Creme Fraiche 0.6 Ruby Gem (Kurt Seifried <kseifried@...hat.com>)

May 15 (8 messages)

Re: CVE Request: linux kernel perf out-of-bounds access (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request: linux kernel perf out-of-bounds access (Michael Gilbert <mgilbert@...ian.org>)
Re: CVE Request: linux kernel perf out-of-bounds access (Greg KH <greg@...ah.com>)
Re: CVE Request: linux kernel perf out-of-bounds access (sd <sd@...ksheep.org>)
CVE Request: Man in the middle on Gentoo Portage binary package installer ("Jason A. Donenfeld" <Jason@...c4.com>)
CVE Request (minor) -- python-backports-ssl_match_hostname: Denial of service when matching certificate with many '*' wil… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request (minor) -- Python 3.2: DoS when matching certificate with many '*' wildcard characters {was: CVE Request (mino… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request for a Drupal contributed module (Forest Monsen <forest.monsen@...il.com>)

May 16 (16 messages)

CVE-2013-2097: zPanel themes remote command execution as root (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for a Drupal contributed module (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Man in the middle on Gentoo Portage binary package installer (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: linux kernel perf out-of-bounds access (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request (minor) -- python-backports-ssl_match_hostname: Denial of service when matching certificate with many '*'… (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request (minor) -- Python 3.2: DoS when matching certificate with many '*' wildcard characters {was: CVE Request … (Kurt Seifried <kseifried@...hat.com>)
[OSSA 2013-012] Nova fails to verify image virtual size (CVE-2013-2096) (Michael Still <mikal@...llhq.com>)
CVE request: WordPress plugin mail-on-update CSRF (Henri Salo <henri@...v.fi>)
CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool (Petr Matousek <pmatouse@...hat.com>)
CVE request: WordPress plugin wp-cleanfix CSRF (Henri Salo <henri@...v.fi>)
Re: WordPress plugins vulnerable to CVE-2013-1808 (Henri Salo <henri@...v.fi>)
Re: CVE-2013-2097: zPanel themes remote command execution as root (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool (Agostino Sarubbo <ago@...too.org>)
CVE Request: WebAuth: Authentication credential disclosure (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE Request: WebAuth: Authentication credential disclosure (Russ Allbery <rra@...ian.org>)
Re: CVE-2013-2097: zPanel themes remote command execution as root (Daniel Kahn Gillmor <dkg@...thhorseman.net>)

May 17 (3 messages)

Re: CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool (Petr Matousek <pmatouse@...hat.com>)
Xen Security Advisory 56 (CVE-2013-2072) - Buffer overflow in xencontrol Python bindings affecting xend (Xen.org security team <security@....org>)
Show In Browser 0.0.3 Ruby Gem /tmp file injection vulnerability ("Larry W. Cashdollar" <larry0@...com>)

May 18 (12 messages)

Re: CVE request: WordPress plugin wp-cleanfix CSRF (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: WordPress plugin mail-on-update CSRF (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: WebAuth: Authentication credential disclosure (Kurt Seifried <kseifried@...hat.com>)
Re: Show In Browser 0.0.3 Ruby Gem /tmp file injection vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: WebAuth: Authentication credential disclosure (Russ Allbery <rra@...ian.org>)
Re: CVE Request: WebAuth: Authentication credential disclosure (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: WordPress plugin wp-cleanfix CSRF (Henri Salo <henri@...v.fi>)
CVE Request: DoS in OpenSMTPD TLS Support ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE Request: DoS in OpenSMTPD TLS Support (Gilles Chehade <gilles@...lp.org>)
Re: Multiple vulnerabilities in PHP Address Book v8.2.5 (Henri Salo <henri@...v.fi>)
Re: CVE request: WordPress plugin wp-cleanfix CSRF (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request: DoS in OpenSMTPD TLS Support (Kurt Seifried <kseifried@...hat.com>)

May 19 (5 messages)

Re: CVE Request: DoS in OpenSMTPD TLS Support ("Jason A. Donenfeld" <Jason@...c4.com>)
More zPanel security flaws? Trying to sort them out (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request: DoS in OpenSMTPD TLS Support (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request: DoS in OpenSMTPD TLS Support (Gilles Chehade <gilles@...lp.org>)
Re: plone, rrdtool, zenoss bugs (Henri Salo <henri@...v.fi>)

May 20 (7 messages)

Re: CVE Request: Man in the middle on Gentoo Portage binary package installer (Pavel Labushev <pavel.labushev@...box.no>)
CVE Request -- Wireshark: Upstream v1.8.7, v1.6.15 fixes (Jan Lieskovsky <jlieskov@...hat.com>)
tty-hijacking & CVE-2005-4890 - redux ("mancha" <mancha1@...h.com>)
Re: CVE Request (minor) -- Python 3.2: DoS when matching certificate with many '*' wildcard characters {was: CVE Request (min… (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- Wireshark: Upstream v1.8.7, v1.6.15 fixes (cve-assign@...re.org)
Re: Re: CVE Request -- Wireshark: Upstream v1.8.7, v1.6.15 fixes (Kurt Seifried <kseifried@...hat.com>)
CVE assignments for Wireshark 1.8.7 and 1.6.15 (cve-assign@...re.org)

May 21 (2 messages)

Moodle security notifications public (Michael de Raadt <michaeld@...dle.com>)
CVE request: dovecot : "APPEND" Parameters Processing Denial of Service Vulnerability (Agostino Sarubbo <ago@...too.org>)

May 22 (16 messages)

Re: CVE Request (minor) -- Python 3.2: DoS when matching certificate with many '*' wildcard characters {was: CVE Request … (Kurt Seifried <kseifried@...hat.com>)
Re: nginx security advisory (CVE-2013-2028) (Solar Designer <solar@...nwall.com>)
CVE request: MediaWiki chunked uploads vulnerability (Thijs Kinkhorst <thijs@...ian.org>)
Re: CVE request: dovecot : "APPEND" Parameters Processing Denial of Service Vulnerability (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Matthias Weckbecker <mweckbecker@...e.de>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Oden Eriksson <oeriksson@...driva.com>)
Re: CVE request: dovecot : "APPEND" Parameters Processing Denial of Service Vulnerability (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: dovecot : "APPEND" Parameters Processing Denial of Service Vulnerability (Timo Sirainen <tss@....fi>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Vitezslav Cizek <civ@...ma.cz>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Matthias Weckbecker <mweckbecker@...e.de>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Zate <zate75@...il.com>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (George Theall <gtheall@...able.com>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Tavis Ormandy <taviso@...xchg8b.com>)
CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (The Doctor <drwho@...tadpt.net>)
Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability (Oden Eriksson <oeriksson@...driva.com>)

May 23 (4 messages)

Re: CVE Request (minor) -- Python 3.2: DoS when matching certificate with many '*' wildcard characters {was: CVE Request (min… (Tomas Hoger <thoger@...hat.com>)
CVE-2013-2069 livecd-tools: improper handling of passwords ("Brian C. Lane" <bcl@...hat.com>)
Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X Window System client libraries (Alan Coopersmith <alan.coopersmith@...cle.com>)
[OSSA 2013-013] Keystone client local information disclosure (CVE-2013-2013) (Jeremy Stanley <jeremy@...nstack.org>)

May 24 (7 messages)

Re: CVE request: dovecot : "APPEND" Parameters Processing Denial of Service Vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: plone, rrdtool, zenoss bugs (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: MediaWiki chunked uploads vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: plone, rrdtool, zenoss bugs (Henri Salo <henri@...v.fi>)
Re: plone, rrdtool, zenoss bugs (Kurt Seifried <kseifried@...hat.com>)
Re: plone, rrdtool, zenoss bugs (Matthew Wilkes <matthew@...thewwilkes.co.uk>)
CVE Request: pwgen (Seth Arnold <seth.arnold@...onical.com>)

May 25 (3 messages)

Re: CVE Request: pwgen (Kurt Seifried <kseifried@...hat.com>)
CVE Request: SPIP privilege escalation (Salvatore Bonaccorso <carnil@...ian.org>)
CVE Request: cgit directory traversal ("Jason A. Donenfeld" <Jason@...c4.com>)

May 26 (1 message)

socat security advisory 4 - CVE-2013-3571 (Gerhard Rieger <gerhard@...t-unreach.org>)

May 27 (5 messages)

Re: CVE Request: cgit directory traversal (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request: SPIP privilege escalation (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: cgit directory traversal (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: cgit directory traversal ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE Request: cgit directory traversal ("Jason A. Donenfeld" <Jason@...c4.com>)

May 28 (7 messages)

Re: CVE Request: pwgen (Michael Samuel <mik@...net.net>)
Re: CVE Request: pwgen (Solar Designer <solar@...nwall.com>)
CVE request: libraw: multiple issues (Raphael Geissert <geissert@...ian.org>)
[Notification] CVE-2013-2765 mod_security: NULL pointer dereference (DoS, crash) when forceRequestBodyVariable action trig… (Jan Lieskovsky <jlieskov@...hat.com>)
KDE Paste Applet (Michael Samuel <mik@...net.net>)
Re: CVE request: libraw: multiple issues (Kurt Seifried <kseifried@...hat.com>)
[OSSA 2013-014] Missing expiration check in Keystone PKI tokens validation (CVE-2013-2104) (Thierry Carrez <thierry@...nstack.org>)

May 29 (13 messages)

Re: CVE request: libraw: multiple issues (Raphael Geissert <geissert@...ian.org>)
CVE Request -- libguestfs (1.21.6 | 1.22.0 | 1.23.0 <= X < 1.22.1 | 1.23.1): Denial of service due to a double-free when i… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- libguestfs (1.20.6 | 1.22.0 | 1.23.0 <= X < 1.22.1 | 1.23.1): Denial of service due to a double-free… ("Richard W.M. Jones" <rjones@...hat.com…)
CVE request for Drupal contributed modules (Forest Monsen <forest.monsen@...il.com>)
GnuTLS 2.x Lucky13 fix regression CVE-2013-2116 (Tomas Hoger <thoger@...hat.com>)
Re: KDE Paste Applet (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: libraw: multiple issues (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request -- libguestfs (1.20.6 | 1.22.0 | 1.23.0 <= X < 1.22.1 | 1.23.1): Denial of service due to a double-fre… (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Drupal contributed modules (Kurt Seifried <kseifried@...hat.com>)
CVE request: Linux kernel: net: oops from tcp_collapse() when using splice(2) (P J P <ppandit@...hat.com>)
Re: CVE request: Linux kernel: net: oops from tcp_collapse() when using splice(2) (Kurt Seifried <kseifried@...hat.com>)
Drupal contrib CVE (Forest Monsen <forest.monsen@...il.com>)
Re: Drupal contrib CVE (Kurt Seifried <kseifried@...hat.com>)

May 30 (3 messages)

CVE request: znc: null pointer dereference in webadmin (Raphael Geissert <geissert@...ian.org>)
CVE-2013-1431: telepathy-gabble: TLS bypass via use of legacy Jabber (Simon McVittie <simon.mcvittie@...labora.co.uk>)
Re: CVE request: znc: null pointer dereference in webadmin (Kurt Seifried <kseifried@...hat.com>)

May 31 (7 messages)

Re: KDE Paste Applet (Michael Samuel <mik@...net.net>)
Re: plone, rrdtool, zenoss bugs (Kurt Seifried <kseifried@...hat.com>)
Re: KDE Paste Applet (Jeff Mitchell <mitchell@....org>)
CVE request: monkeyd Denial of Service (Agostino Sarubbo <ago@...too.org>)
CVE Request: libimobiledevice insecure /tmp use (Marc Deslauriers <marc.deslauriers@...onical.com>)
CVE-2013-2132 MongoDB: User-triggerable NULL pointer dereference due to utter plebbery (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: monkeyd Denial of Service (cve-assign@...re.org)

200 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.