oss-security mailing list - 2013/12

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2013/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 7	³ 15	⁴ 12	⁵ 4	⁶ 8	⁷ 3	⁸ 3
⁹ 16	¹⁰ 17	¹¹ 14	¹² 12	¹³ 5	¹⁴ 2	¹⁵ 6
¹⁶ 5	¹⁷ 3	¹⁸ 8	¹⁹ 3	²⁰ 5	²¹	²² 5
²³ 10	²⁴ 1	²⁵	²⁶ 2	²⁷ 9	²⁸ 2	²⁹ 1
³⁰ 13	³¹ 8

Messages by day:

December 2 (7 messages)

Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (Xen.org security team <security@....org>)
Re: Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (Ian Jackson <Ian.Jackson@...citrix.com>)
Re: Re: Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (Kurt Seifried <kseifried@...hat.com>)
CVE Rejections (Kurt Seifried <kseifried@...hat.com>)
CVE request: samba pam_winbind authentication fails open (Vincent Danen <vdanen@...hat.com>)
Re: Re: Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (Matthew Daley <mattd@...fuzz.com>)
Re: Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (cve-assign@...re.org)

December 3 (15 messages)

Command injection vulnerability in Ruby Gem sprout 0.7.246 ("Larry W. Cashdollar" <larry0@...com>)
Re: Re: Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (Kurt Seifried <kseifried@...hat.com>)
Re: kernel: uio: CVE-2013-6763 [was: Re: some unstracked linux kernel security fixes] (Greg Kroah-Hartman <gregkh@...uxfoundation.org>)
Re: kernel: uio: CVE-2013-6763 [was: Re: some unstracked linux kernel security fixes] (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: CVE request: samba pam_winbind authentication fails open (Kurt Seifried <kseifried@...hat.com>)
Re: Command injection vulnerability in Ruby Gem sprout 0.7.246 (Kurt Seifried <kseifried@...hat.com>)
SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out (Kurt Seifried <kseifried@...hat.com>)
CVE Request: xorg-server and pixman (Jamie Strandboge <jamie@...onical.com>)
[CVE-2013-6414] Denial of Service Vulnerability in Action View (Aaron Patterson <tenderlove@...y-lang.org>)
[CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (Aaron Patterson <tenderlove@...y-lang.org>)
[CVE-2013-6415] XSS Vulnerability in number_to_currency (Aaron Patterson <tenderlove@...y-lang.org>)
[CVE-2013-6417] Incomplete fix to CVE-2013-0155 (Unsafe Query Generation Risk) (Aaron Patterson <tenderlove@...y-lang.org>)
[CVE-2013-6416] XSS Vulnerability in simple_format helper (Aaron Patterson <tenderlove@...y-lang.org>)
Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (kpolitowicz@...onik.ca)
Re: Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (Kurt Seifried <kseifried@...hat.com>)

December 4 (12 messages)

Duplicate OpenStack CVEs for Horizon? (Jamie Strandboge <jamie@...onical.com>)
Re: Duplicate OpenStack CVEs for Horizon? (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: xorg-server and pixman (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: xorg-server and pixman (Murray McAllister <mmcallis@...hat.com>)
Re: kernel: uio: CVE-2013-6763 [was: Re: some unstracked linux kernel security fixes] (Petr Matousek <pmatouse@...hat.com>)
Fwd: [vs] multiple issues in openjpeg (Raphael Geissert <atomo64@...il.com>)
Re: CVE Request: xorg-server and pixman (Jamie Strandboge <jamie@...onical.com>)
Re: CVE Request: xorg-server and pixman (Kurt Seifried <kseifried@...hat.com>)
Re: SNMPD DoS #2411 snmpd crashes/hangs when AgentX subagent times-out (Kurt Seifried <kseifried@...hat.com>)
Re: [Xen-devel] Re: Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host hang (Andrew Cooper <andrew.cooper3@...rix.com>)
gimp - two xwd plugin issues (Tomas Hoger <thoger@...hat.com>)
mod_nss - NSSVerifyClient handling issue (Tomas Hoger <thoger@...hat.com>)

December 5 (4 messages)

CVE needed for hplip insecure auto update feature? (Murray McAllister <mmcallis@...hat.com>)
Re: CVE needed for hplip insecure auto update feature? (Kurt Seifried <kseifried@...hat.com>)
Re: Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (Christopher Dell <chris@...rish.com>)
Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (chris@...rish.com)

December 6 (8 messages)

Re: Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (Kurt Seifried <kseifried@...hat.com>)
CVE request: Kernel: ping: NULL pointer dereference on write to msg_name (P J P <ppandit@...hat.com>)
CVE request: Linux kernel: net: fib: fib6_add: potential NULL pointer dereference (P J P <ppandit@...hat.com>)
Re: CVE request: Kernel: ping: NULL pointer dereference on write to msg_name (Vasily Kulikov <segoon@...nwall.com>)
Re: CVE request: Linux kernel: net: fib: fib6_add: potential NULL pointer dereference (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Kernel: ping: NULL pointer dereference on write to msg_name (Kurt Seifried <kseifried@...hat.com>)
CVE request for Drupal core, and contributed modules (Forest Monsen <forest.monsen@...il.com>)
Re: CVE request for Drupal core, and contributed modules (Henri Salo <henri@...v.fi>)

December 7 (3 messages)

Re: CVE request: ClamAV vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: FFmpeg 2.1 multiple problems (Kurt Seifried <kseifried@...hat.com>)
CVE assignments on OSS-Security for Dec 7-15th handed over the Mitre (Kurt Seifried <kseifried@...hat.com>)

December 8 (3 messages)

Re: CVE request for Drupal core, and contributed modules (Forest Monsen <forest.monsen@...il.com>)
Re: CVE request for Drupal core, and contributed modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: FFmpeg 2.1 multiple problems (cve-assign@...re.org)

December 9 (16 messages)

CVE request: two issues in libmicrohttpd (Murray McAllister <mmcallis@...hat.com>)
Issue with PYTHON_EGG_CACHE (Grant Murphy <gmurphy@...hat.com>)
CPython hash secret can be recoved remotely (Nick Coghlan <ncoghlan@...hat.com>)
Re: CVE request: ClamAV vulnerabilities (Sergey Popov <pinkbyte@...too.org>)
CVE request: pam: password hashes aren't compared case-sensitively (Ratul Gupta <ratulg@...hat.com>)
CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (Ratul Gupta <ratulg@...hat.com>)
Re: CVE request: pam: password hashes aren't compared case-sensitively (Solar Designer <solar@...nwall.com>)
Re: CVE request: pam: password hashes aren't compared case-sensitively (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: two issues in libmicrohttpd (Florian Weimer <fweimer@...hat.com>)
Re: CVE request for Drupal core, and contributed modules (Forest Monsen <forest.monsen@...il.com>)
Re: CVE request: two issues in libmicrohttpd (cve-assign@...re.org)
Re: Issue with PYTHON_EGG_CACHE (cve-assign@...re.org)
Re: CPython hash secret can be recoved remotely (cve-assign@...re.org)
Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (cve-assign@...re.org)
Re: CVE request: ClamAV vulnerabilities (cve-assign@...re.org)
Re: CVE request: pam: password hashes aren't compared case-sensitively (cve-assign@...re.org)

December 10 (17 messages)

Re: CVE request for Drupal core, and contributed modules (Forest Monsen <forest.monsen@...il.com>)
Please REJECT CVE-2013-2215 (Garth Mollett <gmollett@...hat.com>)
CVE request: Linux kernel: net: memory leak in recvmsg handler msg_name & msg_namelen logic (P J P <ppandit@...hat.com>)
Re: CVE request: Linux kernel: net: memory leak in recvmsg handler msg_name & msg_namelen logic (Marcus Meissner <meissner@...e.de>)
Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (Ratul Gupta <ratulg@...hat.com>)
Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (George Theall <gtheall@...able.com>)
Xen Security Advisory 80 (CVE-2013-6400) - IOMMU TLB flushing may be inadvertently suppressed (Xen.org security team <security@....org>)
Xen Security Advisory 77 - Disaggregated domain management security status (Xen.org security team <security@....org>)
CVE Request: ack-grep: potential remote code execution via per-project .ackrc files (Salvatore Bonaccorso <carnil@...ian.org>)
CVE request for remote code execution in ack (Axel Beckert <abe@...ian.org>)
Re: CVE request for remote code execution in ack (Andy Lester <andy@...dance.com>)
Re: CVE request for remote code execution in ack (Axel Beckert <abe@...ian.org>)
Re: CVE request for remote code execution in ack (Andy Lester <andy@...dance.com>)
Re: CVE Request: ack-grep: potential remote code execution via per-project .ackrc files (Salvatore Bonaccorso <carnil@...ian.org>)
CVE request for Plone (Matthew Wilkes <matthew@...thewwilkes.co.uk>)
Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (cve-assign@...re.org)
Re: Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (George Theall <gtheall@...able.com>)

December 11 (14 messages)

CVE request: devscripts (uscan) command execution flaw (Murray McAllister <mmcallis@...hat.com>)
CVE request: devscripts (uscan) command execution flaw (Murray McAllister <mmcallis@...hat.com>)
Re: CVE request: devscripts (uscan) command execution flaw (Murray McAllister <mmcallis@...hat.com>)
Re: CVE request: Linux kernel: net: info leak in recvmsg handler msg_name & msg_namelen logic (P J P <ppandit@...hat.com>)
CVE request: TYPO3-CORE-SA-2013-004 and TYPO3-FLOW-SA-2013-001 (Henri Salo <henri@...v.fi>)
CVE request for a vulnerability in OpenStack Nova (Thierry Carrez <thierry@...nstack.org>)
[OSSA 2013-032] Keystone trust circumvention through EC2-style tokens (CVE-2013-6391) (Jeremy Stanley <jeremy@...nstack.org>)
[OSSA 2013-033] Metadata queries from Neutron to Nova are not restricted by tenant (CVE-2013-6419) (Jeremy Stanley <jeremy@...nstack.org>)
[OSSA 2013-034] Heat CFN policy rules not all enforced (CVE-2013-6426) (Jeremy Stanley <jeremy@...nstack.org>)
[OSSA 2013-034] Heat CFN policy rules not all enforced (CVE-2013-6426) (Jeremy Stanley <jeremy@...nstack.org>)
[OSSA 2013-035] Heat ReST API doesn't respect tenant scoping (CVE-2013-6428) (Jeremy Stanley <jeremy@...nstack.org>)
[OSSA 2013-036] Insufficient sanitization of Instance Name in Horizon (CVE-2013-6858) (Jeremy Stanley <jeremy@...nstack.org>)
Re: CVE request: ClamAV vulnerabilities (cve-assign@...re.org)
CVE Request: ZNC IRC Bouncer DoS in FiSH Plugin (Jurriaan Bremer <jurriaanbremer@...il.com>)

December 12 (12 messages)

Re: CVE request for Drupal core, and contributed modules (cve-assign@...re.org)
Re: CVE Request: ack-grep: potential remote code execution via per-project .ackrc files (cve-assign@...re.org)
Re: CVE request for Plone (cve-assign@...re.org)
Re: CVE request: devscripts (uscan) command execution flaw (cve-assign@...re.org)
Re: CVE request: TYPO3-CORE-SA-2013-004 and TYPO3-FLOW-SA-2013-001 (cve-assign@...re.org)
Re: CVE request for a vulnerability in OpenStack Nova (cve-assign@...re.org)
Re: CVE Request: ZNC IRC Bouncer DoS in FiSH Plugin (cve-assign@...re.org)
Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (cve-assign@...re.org)
CVE Request: devscripts (uscan) broken handling of filenames with whitespace (Ratul Gupta <ratulg@...hat.com>)
Reject augeas CVE-2012-6607 (Tomas Hoger <thoger@...hat.com>)
Command injection in Ruby Gem Webbynode 1.0.5.3 ("Larry W. Cashdollar" <larry0@...com>)
Re: [vs-plain] kvm issues (Petr Matousek <pmatouse@...hat.com>)

December 13 (5 messages)

Re: CVE request: ClamAV vulnerabilities (cve-assign@...re.org)
Re: CVE Request: devscripts (uscan) broken handling of filenames with whitespace (cve-assign@...re.org)
Re: Command injection in Ruby Gem Webbynode 1.0.5.3 (cve-assign@...re.org)
Re: [vs-plain] kvm issues (Paolo Bonzini <pbonzini@...hat.com>)
Re: CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9) (Tomas Hoger <thoger@...hat.com>)

December 14 (2 messages)

Re: Re: Issue with PYTHON_EGG_CACHE (Kurt Seifried <kseifried@...hat.com>)
Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via command line ("Larry W. Cashdollar" <larry0@...com>)

December 15 (6 messages)

Re: Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via command line ("Larry W. Cashdollar" <larry0@...com>)
Re: Issue with PYTHON_EGG_CACHE (cve-assign@...re.org)
Re: CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9) (cve-assign@...re.org)
Re: Re: Issue with PYTHON_EGG_CACHE (Jeremy Stanley <jeremy@...nstack.org>)
Re: Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via command line (cve-assign@...re.org)
Re: Re: Issue with PYTHON_EGG_CACHE (Kurt Seifried <kseifried@...hat.com>)

December 16 (5 messages)

Re: Re: CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9) (Tomas Hoger <thoger@...hat.com>)
Re: Re: Issue with PYTHON_EGG_CACHE (Yves-Alexis Perez <corsac@...ian.org>)
CVE request: Juvia secret token handling (Stefan Bühler <stbuehler@...httpd.net>)
Fwd: Vulnerability (Buffer Overflow) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5250) Vulnerability (Off-by-one memory acces… (Ricardo <ricardo@...chbrothers.com>)
CVE Request: Proc::Daemon writes pidfile with mode 666 (Salvatore Bonaccorso <carnil@...ian.org>)

December 17 (3 messages)

Re: Re: CVE-2013-2073 transifex-client: Does not validate HTTPS server certificate (fixed in transifex-client v0.9) (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Issue with PYTHON_EGG_CACHE (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Issue with PYTHON_EGG_CACHE (Yves-Alexis Perez <corsac@...ian.org>)

December 18 (8 messages)

Re: CVE request: Juvia secret token handling (cve-assign@...re.org)
Re: CVE Request: Proc::Daemon writes pidfile with mode 666 (cve-assign@...re.org)
CVE Request: pywbem certificate TOCTOU (Sebastian Krahmer <krahmer@...e.de>)
[OSSA 2013-037] Nova compute DoS through ephemeral disk backing files (CVE-2013-6437) (Thierry Carrez <thierry@...nstack.org>)
GnuPG 1.4.16 fixes RSA key extraction via acoustic side channel (CVE-2013-4576) (Solar Designer <solar@...nwall.com>)
CVE already assigned for 1026891? (cve-assign@...re.org)
Re: CVE already assigned for 1026891? (Vincent Danen <vdanen@...hat.com>)
Re: GnuPG 1.4.16 fixes RSA key extraction via acoustic side channel (CVE-2013-4576) (mancha <mancha1@...h.com>)

December 19 (3 messages)

Re: CVE already assigned for 1026891? (Murray McAllister <mmcallis@...hat.com>)
possible CVE request for rpath issues fixed via slackware updates (Murray McAllister <mmcallis@...hat.com>)
CVE REJECTS (Kurt Seifried <kseifried@...hat.com>)

December 20 (5 messages)

Re: possible CVE request for rpath issues fixed via slackware updates (cve-assign@...re.org)
CVE request: Asterisk AST-2013-007 (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE already assigned for 1026891? (Marcus Meissner <meissner@...e.de>)
Re: CVE request: Asterisk AST-2013-007 (cve-assign@...re.org)
Re: CVE already assigned for 1026891? (Vincent Danen <vdanen@...hat.com>)

December 22 (5 messages)

Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (nick@...edev.com)
Re: [CVE-2013-4491] Reflective XSS Vulnerability in Ruby on Rails (Solar Designer <solar@...nwall.com>)
Re: CVE REJECTS (Solar Designer <solar@...nwall.com>)
Re: [SECURITY] [DSA 2826-1] denyhosts security update (Helmut Grohne <helmut@...divi.de>)
Re: Re: [SECURITY] [DSA 2826-1] denyhosts security update (Yves-Alexis Perez <corsac@...ian.org>)

December 23 (10 messages)

Re: CVE REJECTS (Kurt Seifried <kseifried@...hat.com>)
CVE Request: wordpress: information leakage and backdoor vulnerabilities in writing settings (Ratul Gupta <ratulg@...hat.com>)
Re: CVE Request: wordpress: information leakage and backdoor vulnerabilities in writing settings (cve-assign@...re.org)
CVE request: denial of service in Nagios (process_cgivars()) (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: denial of service in Nagios (process_cgivars()) (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE Request: gitolite world writable files for fresh installs of v3.5.3 (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE request: denial of service in Nagios (process_cgivars()) (cve-assign@...re.org)
Re: CVE Request: gitolite world writable files for fresh installs of v3.5.3 (cve-assign@...re.org)
Re: CVE request: denial of service in Nagios (process_cgivars()) (Vincent Danen <vdanen@...hat.com>)
CVE issues with recent python flaws (Vincent Danen <vdanen@...hat.com>)

December 24 (1 message)

Re: CVE request: denial of service in Nagios (process_cgivars()) (cve-assign@...re.org)

December 26 (2 messages)

CVE Request: rubygem-will_paginate XSS vulnerabilities (Ratul Gupta <ratulg@...hat.com>)
CVE Request: rubygem-nokogiri Multiple DoS vulnerabilities (Ratul Gupta <ratulg@...hat.com>)

December 27 (9 messages)

Re: CVE Request: rubygem-will_paginate XSS vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: rubygem-nokogiri Multiple DoS vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE issues with recent python flaws (Kurt Seifried <kseifried@...hat.com>)
Two CVE request for gnome-shell/screensaver issues (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: Two CVE request for gnome-shell/screensaver issues (cve-assign@...re.org)
Re: Re: Two CVE request for gnome-shell/screensaver issues (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE request: monitorix: HTTP server 'handle_request()' session fixation & XSS vulnerabilities (clearing up confusion) (Jordi Sanfeliu <jordi@...ranet.cat>)
Re: Two CVE request for gnome-shell/screensaver issues (cve-assign@...re.org)
Re: CVE issues with recent python flaws (cve-assign@...re.org)

December 28 (2 messages)

CVE request: Fat Free CRM multiple vulnerabilities (Henri Salo <henri@...v.fi>)
Re: CVE request: Fat Free CRM multiple vulnerabilities (cve-assign@...re.org)

December 29 (1 message)

CVE request: Zenphoto 1.4.5.4 (Henri Salo <henri@...v.fi>)

December 30 (13 messages)

CVE request: SMF 1.1.19, 2.0.6 (Henri Salo <henri@...v.fi>)
Re: CVE request: cmsmadesimple before 1.11.8 / bad upstream behaviour vs. CVE assignment (Henri Salo <henri@...v.fi>)
Re: CVE request: SMF 1.1.19, 2.0.6 (cve-assign@...re.org)
CVE Request: SASL authentication allows wrong credentials to access memcache (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-request: Dewplayer issues (Henri Salo <henri@...v.fi>)
CVE to the ntp monlist DDoS issue? ("Mike O'Connor" <mjo@...o.mi.org>)
Re: CVE to the ntp monlist DDoS issue? (cve-assign@...re.org)
Re: CVE request: cmsmadesimple before 1.11.8 / bad upstream behaviour vs. CVE assignment (cve-assign@...re.org)
Re: CVE-request: Dewplayer issues (cve-assign@...re.org)
Re: CVE request: Zenphoto 1.4.5.4 (cve-assign@...re.org)
Re: CVE Request: SASL authentication allows wrong credentials to access memcache (cve-assign@...re.org)
Re: Re: CVE to the ntp monlist DDoS issue? (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Re: CVE to the ntp monlist DDoS issue? (Florian Weimer <fw@...eb.enyo.de>)

December 31 (8 messages)

Re: CVE request: Fat Free CRM multiple vulnerabilities (Steve Kenworthy <steveyken@...il.com>)
Re: CVE to the ntp monlist DDoS issue? (Xin Li <delphij@...phij.net>)
Re: CVE request: Linux kernel: net: memory leak in recvmsg handler msg_name & msg_namelen logic (P J P <ppandit@...hat.com>)
CVE request - kernel: char: Int overflow in lp_do_ioctl() (Yongjian Xu <xuyongjiande@...il.com>)
Re: CVE request - kernel: char: Int overflow in lp_do_ioctl() (Greg KH <greg@...ah.com>)
CVE request: Linux kernel: net: memory leak in recvmsg handlermsg_name & msg_namelen logic (P J P <ppandit@...hat.com>)
Re: CVE request: Linux kernel: net: memory leak in recvmsg handlermsg_name & msg_namelen logic (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Fat Free CRM multiple vulnerabilities (cve-assign@...re.org)

199 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.