oss-security mailing list - 2013/06

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2013/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 2	² 1
³ 8	⁴ 13	⁵ 27	⁶ 14	⁷ 6	⁸ 9	⁹ 3
¹⁰ 9	¹¹ 5	¹² 7	¹³ 9	¹⁴ 15	¹⁵ 1	¹⁶ 1
¹⁷ 5	¹⁸ 13	¹⁹ 6	²⁰ 5	²¹ 4	²²	²³
²⁴ 2	²⁵ 2	²⁶ 9	²⁷ 9	²⁸ 4	²⁹ 1	³⁰ 11

Messages by day:

June 1 (2 messages)

Re: CVE-2013-2132 MongoDB: User-triggerable NULL pointer dereference due to utter plebbery (Kurt Seifried <kseifried@...hat.com>)
CVE-2013-2850: Linux kernel iSCSI target heap overflow (Kees Cook <keescook@...omium.org>)

June 2 (1 message)

CVE Request: kernel info leak in tkill/tgkill (Marcus Meissner <meissner@...e.de>)

June 3 (8 messages)

Xen Security Advisory 52 (CVE-2013-2076) - Information leak on XSAVE/XRSTOR capable AMD CPUs (Xen.org security team <security@....org>)
Xen Security Advisory 53 (CVE-2013-2077) - Hypervisor crash due to missing exception recovery on XRSTOR (Xen.org security team <security@....org>)
Xen Security Advisory 54 (CVE-2013-2078) - Hypervisor crash due to missing exception recovery on XSETBV (Xen.org security team <security@....org>)
Re: [Openstack] [OSSA 2013-013] Keystone client local information disclosure (CVE-2013-2013) (Jeremy Stanley <fungi@...goth.org>)
Re: [Openstack] [OSSA 2013-013] Keystone client local information disclosure (CVE-2013-2013) (Lloyd Dewolf <lloydostack@...il.com>)
Re: [Openstack] [OSSA 2013-013] Keystone client local information disclosure (CVE-2013-2013) (Lloyd Dewolf <lloydostack@...il.com>)
Re: [OSSA 2013-013] Keystone client local information disclosure (CVE-2013-2013) (Jeremy Stanley <fungi@...goth.org>)
Re: [Openstack] [OSSA 2013-013] Keystone client local information disclosure (CVE-2013-2013) (Robert Collins <robertc@...ertcollins.net>)

June 4 (13 messages)

CVE Request -- Gallery < 3.0.8 - Improper stripping of URL fragments in uploadify and flowplayer SWF files might lead to r… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: libraw: multiple issues (Raphael Geissert <geissert@...ian.org>)
CVE request: libsrtp buffer overflow flaw (Vincent Danen <vdanen@...hat.com>)
CVE Request: More perf security fixes (Marcus Meissner <meissner@...e.de>)
CVE request: CKEditor module for Drupal access bypass SA-CONTRIB-2011-054 (Henri Salo <henri@...v.fi>)
Re: CVE Request: More perf security fixes (Andi Kleen <ak@...ux.jf.intel.com>)
Re: CVE request: CKEditor module for Drupal access bypass SA-CONTRIB-2011-054 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: libsrtp buffer overflow flaw (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- Gallery < 3.0.8 - Improper stripping of URL fragments in uploadify and flowplayer SWF files might lead … (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: kernel info leak in tkill/tgkill (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: libimobiledevice insecure /tmp use (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: libsrtp buffer overflow flaw (Vincent Danen <vdanen@...hat.com>)
Re: [security] CVE request: CKEditor module for Drupal access bypass SA-CONTRIB-2011-054 (Derek Wright <drupal@...right.net>)

June 5 (27 messages)

CVE request: kernel: cpqarray/c: info leak in ida_locked_ioctl() (P J P <ppandit@...hat.com>)
CVE Request: Linux kernel: fanotify: info leak in copy_event_to_user (P J P <ppandit@...hat.com>)
Re: CVE request: kernel: cpqarray/c: info leak in ida_locked_ioctl() (P J P <ppandit@...hat.com>)
Re: CVE Request: More perf security fixes (Peter Zijlstra <peterz@...radead.org>)
Re: CVE request: WordPress advanced-xml-reader XXE (Henri Salo <henri@...v.fi>)
Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: More perf security fixes (Peter Zijlstra <peterz@...radead.org>)
Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: More perf security fixes (Peter Zijlstra <peterz@...radead.org>)
Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Joomla URL change (Henri Salo <henri@...v.fi>)
Re: Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: More perf security fixes (Stephane Eranian <eranian@...gle.com>)
Re: CVE Request: More perf security fixes (Stephane Eranian <eranian@...gle.com>)
CVE-2013-2145: perl Module::Signature code execution vulnerability (Vincent Danen <vdanen@...hat.com>)
Re: CVE-2013-2145: perl Module::Signature code execution vulnerability (Russ Allbery <rra@...nford.edu>)
xen/blkback: Check device permissions before allowing OP_DISCARD (Konrad Rzeszutek Wilk <konrad.wilk@...cle.com>)
Re: CVE-2013-2145: perl Module::Signature code execution vulnerability (唐鳳 <audreyt@...reyt.org>)
Re: CVE-2013-2145: perl Module::Signature code execution vulnerability (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: xen/blkback: Check device permissions before allowing OP_DISCARD (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: More perf security fixes (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request: kernel: cpqarray/c: info leak in ida_locked_ioctl() (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Linux kernel: fanotify: info leak in copy_event_to_user (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: More perf security fixes (Andi Kleen <ak@...ux.jf.intel.com>)

June 6 (14 messages)

Re: CVE Request: pwgen (Michael Samuel <mik@...net.net>)
Re: CVE Request: More perf security fixes (Stephane Eranian <eranian@...gle.com>)
CVE Request: Linux Kernel - Leak information in cdrom driver. (Jonathan Salwan <jonathan.salwan@...il.com>)
[PATCH] perf: fix hypervisor branch sampling permission check (Stephane Eranian <eranian@...gle.com>)
Re: [PATCH] perf: fix hypervisor branch sampling permission check (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: More perf security fixes (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: More perf security fixes (Stephane Eranian <eranian@...gle.com>)
chroots & uid sharing ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: chroots & uid sharing ("Jason A. Donenfeld" <Jason@...c4.com>)
CVE request: WordPress plugin uk-cookie CSRF (Henri Salo <henri@...v.fi>)
Re: chroots & uid sharing (Seth Arnold <seth.arnold@...onical.com>)
CVE request for Drupal contributed module (Forest Monsen <forest.monsen@...il.com>)
Linux kernel format string flaws (Kees Cook <keescook@...omium.org>)
Re: Linux kernel format string flaws (Greg KH <greg@...ah.com>)

June 7 (6 messages)

Re: chroots & uid sharing (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Drupal contributed module (Kurt Seifried <kseifried@...hat.com>)
ownCloud Security Advisory oC-SA-2013-028 (Lukas Reschke <lukas@...cloud.org>)
Broken authentication on Monkey HTTPD Auth plugin (Felipe Pena <felipensp@...il.com>)
Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling (Xen.org security team <security@....org>)
Re: chroots & uid sharing (Tom Maher <tmaher@...oku.com>)

June 8 (9 messages)

CVE request: Monkey HTTPD - DoS due bug on Range header handling (Felipe Pena <felipensp@...il.com>)
CVE request: Debian's package "mysql-server" leaks credential information (vladz <vladz@...zero.fr>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (gremlin@...mlin.ru)
Re: CVE request: Debian's package "mysql-server" leaks credential information (larry Cashdollar <larry0@...com>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (gremlin@...mlin.ru)
Re: CVE request: Debian's package "mysql-server" leaks credential information (larry Cashdollar <larry0@...com>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (gremlin@...mlin.ru)
Re: CVE request: Debian's package "mysql-server" leaks credential information (larry Cashdollar <larry0@...com>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (Daniel Kahn Gillmor <dkg@...thhorseman.net>)

June 9 (3 messages)

Re: CVE request: Debian's package "mysql-server" leaks credential information (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (Kurt Seifried <kseifried@...hat.com>)
RE: CVE request: Debian's package "mysql-server" leaks credential information ("Christey, Steven M." <coley@...re.org>)

June 10 (9 messages)

Re: CVE request: libraw: multiple issues (Alexander Bergmann <abergmann@...e.com>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (gremlin@...mlin.ru)
Re: CVE request: Debian's package "mysql-server" leaks credential information (Florian Weimer <fweimer@...hat.com>)
Re: CVE request: Debian's package "mysql-server" leaks credential information (Henri Salo <henri@...v.fi>)
Insecure temp files usage in phusion passenger (other than CVE-2013-2119) (Raphael Geissert <geissert@...ian.org>)
Re: Insecure temp files usage in phusion passenger (other than CVE-2013-2119) (vladz <vladz@...zero.fr>)
Re: Insecure temp files usage in phusion passenger (other than CVE-2013-2119) ("Larry W. Cashdollar" <larry0@...com>)
Re: CVE request: Monkey HTTPD - DoS due bug on Range header handling (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Linux Kernel - Leak information in cdrom driver. (Kurt Seifried <kseifried@...hat.com>)

June 11 (5 messages)

Re: CVE request: libraw: multiple issues (Raphael Geissert <geissert@...ian.org>)
CVE request: resin: Cross site scripting (Agostino Sarubbo <ago@...too.org>)
CVE request: WordPress 3.5.1 denial of service vulnerability (Henri Salo <henri@...v.fi>)
Re: CVE-2013-2145: perl Module::Signature code execution vulnerability (Vincent Danen <vdanen@...hat.com>)
CVE request for possible NULL ptr deref in XDM when using crypt() from glibc 2.17+ (Alan Coopersmith <alan.coopersmith@...cle.com>)

June 12 (7 messages)

Re: CVE request: WordPress 3.5.1 denial of service vulnerability (Solar Designer <solar@...nwall.com>)
Re: CVE request: WordPress 3.5.1 denial of service vulnerability (Andrew Nacin <nacin@...dpress.org>)
Re: CVE request: WordPress 3.5.1 denial of service vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: Fail2ban 0.8.9, Denial of Service (Apache rules only) (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE request: WordPress 3.5.1 denial of service vulnerability (Alexander Cherepanov <cherepan@...me.ru>)
CVE request for Drupal contrib module (Forest Monsen <forest.monsen@...il.com>)
Re: CVE request: WordPress 3.5.1 denial of service vulnerability (Solar Designer <solar@...nwall.com>)

June 13 (9 messages)

Re: KDE Paste Applet (Michael Samuel <mik@...net.net>)
CVE-2013-2168: dbus: DoS in system services caused by _dbus_printf_string_upper_bound (Simon McVittie <simon.mcvittie@...labora.co.uk>)
[OSSA 2013-015] Authentication bypass when using LDAP backend (CVE-2013-2157) (Thierry Carrez <thierry@...nstack.org>)
[OSSA 2013-016] Unchecked user input in Swift XML responses (CVE-2013-2161) (Jeremy Stanley <jeremy@...nstack.org>)
Re: CVE request: resin: Cross site scripting (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Drupal contrib module (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Fail2ban 0.8.9, Denial of Service (Apache rules only) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for possible NULL ptr deref in XDM when using crypt() from glibc 2.17+ (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: WordPress plugin uk-cookie CSRF (Kurt Seifried <kseifried@...hat.com>)

June 14 (15 messages)

CVE request: MovableType before 5.2.6 (John Lightsey <john@...nuts.net>)
Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling (Xen.org security team <security@....org>)
CVE request: XSS on Monkey HTTPD - dirlisting plugin (Felipe Pena <felipensp@...il.com>)
CVE request: Bypass protected directory by Monkey HTTPD - Mandril security plugin (Felipe Pena <felipensp@...il.com>)
CVE request: FD leakage for cgi program on Monkey HTTPD (Felipe Pena <felipensp@...il.com>)
RE: CVE request: FD leakage for cgi program on Monkey HTTPD ("Christey, Steven M." <coley@...re.org>)
Re: CVE request: FD leakage for cgi program on Monkey HTTPD (Felipe Pena <felipensp@...il.com>)
Re: CVE request: FD leakage for cgi program on Monkey HTTPD (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE request: MovableType before 5.2.6 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: XSS on Monkey HTTPD - dirlisting plugin (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Bypass protected directory by Monkey HTTPD - Mandril security plugin (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: FD leakage for cgi program on Monkey HTTPD (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: FD leakage for cgi program on Monkey HTTPD (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE request: FD leakage for cgi program on Monkey HTTPD (John Lightsey <john@...nuts.net>)
Re: CVE request: FD leakage for cgi program on Monkey HTTPD (Seth Arnold <seth.arnold@...onical.com>)

June 15 (1 message)

Re: CVE request: FD leakage for cgi program on Monkey HTTPD (John Lightsey <john@...nuts.net>)

June 16 (1 message)

Re: [Ticket#2012111110000015] TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core (TYPO3 Security Team <security@...o3.org>)

June 17 (5 messages)

CVE Request: Linux - ext4 support (Jonathan Salwan <jonathan.salwan@...il.com>)
Re: CVE Request: Linux - ext4 support (Greg KH <greg@...ah.com>)
Re: CVE Request: Linux - ext4 support (Jonathan Salwan <jonathan.salwan@...il.com>)
Re: CVE Request: Linux - ext4 support (Greg KH <greg@...ah.com>)
CVE-2013-2175 : haproxy may crash when using header occurrences relative to the tail (Willy Tarreau <w@....eu>)

June 18 (13 messages)

Re: CVE Request: Linux - ext4 support (Kurt Seifried <kseifried@...hat.com>)
Thoughts on a vuln/CVE? (Kurt Seifried <kseifried@...hat.com>)
Re: Thoughts on a vuln/CVE? (Yves-Alexis Perez <corsac@...ian.org>)
Re: Thoughts on a vuln/CVE? (Russ Allbery <rra@...nford.edu>)
Re: Thoughts on a vuln/CVE? (Moritz Muehlenhoff <jmm@...til.org>)
Re: Thoughts on a vuln/CVE? (Kurt Seifried <kseifried@...hat.com>)
CVE request: gnome-shell crash, screen unlock on resume (Florian Weimer <fweimer@...hat.com>)
Re: Thoughts on a vuln/CVE? (Florian Weimer <fweimer@...hat.com>)
Re: Thoughts on a vuln/CVE? (Simon McVittie <smcv@...ian.org>)
Re: Thoughts on a vuln/CVE? (Dave Walker <davewalker@...ntu.com>)
Re: Thoughts on a vuln/CVE? (Tim <tim-security@...tinelchicken.org>)
Re: Thoughts on a vuln/CVE? (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Thoughts on a vuln/CVE? (Kurt Seifried <kseifried@...hat.com>)

June 19 (6 messages)

Re: CVE request: gnome-shell crash, screen unlock on resume (Kurt Seifried <kseifried@...hat.com>)
Re: Thoughts on a vuln/CVE? (Florian Weimer <fw@...eb.enyo.de>)
Re: Thoughts on a vuln/CVE? (Kurt Seifried <kseifried@...hat.com>)
Re: Re: [Ticket#2012111110000015] TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core (Kurt Seifried <kseifried@...hat.com>)
[OSSA 2013-017] Issues in Keystone middleware memcache signing/encryption feature (CVE-2013-2166, CVE-2013-2167) (Thierry Carrez <thierry@...nstack.org>)
[CVE identifier assignment notification] CVE-2013-2191 python-bugzilla: Does not verify Bugzilla server certificate (Jan Lieskovsky <jlieskov@...hat.com>)

June 20 (5 messages)

CVE request for Drupal contributed module (Forest Monsen <forest.monsen@...il.com>)
Re: Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for Drupal contributed module (Kurt Seifried <kseifried@...hat.com>)
Xen Security Advisory 55 (CVE-2013-2194,CVE-2013-2195,CVE-2013-2196) - Multiple vulnerabilities in libelf PV kernel han… (Xen.org security team <security@....org…)
CVE Request -- Linux kernel: sctp: duplicate cookie handling NULL pointer dereference (Petr Matousek <pmatouse@...hat.com>)

June 21 (4 messages)

Re: CVE Request -- Linux kernel: sctp: duplicate cookie handling NULL pointer dereference (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- tpp: Possibility of arbitrary code execution when processing untrusted TPP template (Jan Lieskovsky <jlieskov@...hat.com>)
Xen Security Advisory 57 - libxl allows guest write access to sensitive console related xenstore keys (Xen.org security team <security@....org>)
Re: CVE Request -- tpp: Possibility of arbitrary code execution when processing untrusted TPP template (Kurt Seifried <kseifried@...hat.com>)

June 24 (2 messages)

CVE Request -- Review Board: Stored XSS due improper sanitization of user's full name in the reviews dropdown (fixed in u… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Review Board: Stored XSS due improper sanitization of user's full name in the reviews dropdown (fixed … (Kurt Seifried <kseifried@...hat.com>)

June 25 (2 messages)

Re: Xen Security Advisory 57 - libxl allows guest write access to sensitive console related xenstore keys (Kurt Seifried <kseifried@...hat.com>)
Re: [LightDM] light-locker 0.1.0 released (Yves-Alexis Perez <corsac@...ian.org>)

June 26 (9 messages)

Re: KDE Paste Applet (Michael Samuel <mik@...net.net>)
Re: KDE Paste Applet (Kurt Seifried <kseifried@...hat.com>)
Re: KDE Paste Applet (Garth Mollett <gmollett@...hat.com>)
Xen Security Advisory 57 (CVE-2013-2211) - libxl allows guest write access to sensitive console related xenstore keys (Xen.org security team <security@....org>)
Xen Security Advisory 58 (CVE-2013-1432) - Page reference counting error due to XSA-45/CVE-2013-1918 fixes (Xen.org security team <security@....org>)
CVE request: unauthorized host/service views displayed in servicegroup view (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: unauthorized host/service views displayed in servicegroup view (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: unauthorized host/service views displayed in servicegroup view (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: unauthorized host/service views displayed in servicegroup view (Kurt Seifried <kseifried@...hat.com>)

June 27 (9 messages)

1.2k bug reports for Debian, some may be security (Kurt Seifried <kseifried@...hat.com>)
Re: 1.2k bug reports for Debian, some may be security (Russ Allbery <rra@...nford.edu>)
Re: 1.2k bug reports for Debian, some may be security (Kurt Seifried <kseifried@...hat.com>)
CVE request for GLPI ("Mehrenberger, Xavier" <Xavier.Mehrenberger@...sidian.com>)
CVE Request -- python-suds: Insecure temporary directory use when initializing file-based URL cache (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: GLPI, multiple issues (Raphael Geissert <geissert@...ian.org>)
Re: Re: CVE-2013-1942 jPlayer 2.2.19 XSS ("Steven M. Christey" <coley@...re.org>)
Re: CVE Request -- python-suds: Insecure temporary directory use when initializing file-based URL cache (Kurt Seifried <kseifried@...hat.com>)
Re: 1.2k bug reports for Debian, some may be security ("Steven M. Christey" <coley@...re.org>)

June 28 (4 messages)

Re: 1.2k bug reports for Debian, some may be security (Alexandre Rebert <alexandre.rebert@...il.com>)
CVE Request - PHP PECL Radius (php-pecl-radius) v1.2.7 fixing a security flaw in radius_get_vendor_attr() (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request - PHP PECL Radius (php-pecl-radius) v1.2.7 fixing a security flaw in radius_get_vendor_attr() (Kurt Seifried <kseifried@...hat.com>)
general Krb5 DNS vulnerabilities (e.g. krb5 web auth)? [was: Re: CVE request: rpc-gssd is vulnerable to DNS spoofing] (Daniel Kahn Gillmor <dkg@...thhorseman.ne…)

June 29 (1 message)

CVE request: Multiple issues in GNU ZRTPCPP (Dan Rosenberg <dan.j.rosenberg@...il.com>)

June 30 (11 messages)

CVE request: Kernel 2.6.32+ IP_RETOPTS Buffer Poisoning DoS (Steven Ciaburri <steve@...k911.com>)
Re: CVE request: Multiple issues in GNU ZRTPCPP (Kurt Seifried <kseifried@...hat.com>)
Re: 1.2k bug reports for Debian, some may be security (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Kernel 2.6.32+ IP_RETOPTS Buffer Poisoning DoS (Steven Ciaburri <steve@...k911.com>)
Re: CVE request: Kernel 2.6.32+ IP_RETOPTS Buffer Poisoning DoS (Kurt Seifried <kseifried@...hat.com>)
Kernel: 2.6.32+ IP_RETOPTS Buffer Poisoning DoS hemlock.c (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Kernel 2.6.32+ IP_RETOPTS Buffer Poisoning DoS (Kurt Seifried <kseifried@...hat.com>)
Re: Kernel: 2.6.32+ IP_RETOPTS Buffer Poisoning DoS hemlock.c (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for GLPI (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: GLPI, multiple issues (Kurt Seifried <kseifried@...hat.com>)
Re: Kernel: 2.6.32+ IP_RETOPTS Buffer Poisoning DoS hemlock.c (Steven Ciaburri <steve@...k911.com>)

201 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.