oss-security mailing list - 2014/03/04

Follow @Openwall on Twitter for new release announcements and other news

[<prev day] [next day>] [month] [year] [list]

oss-security mailing list - 2014/03/04

possible CVE requests: perltidy insecure temporary file usage (Murray McAllister <mmcallis@...hat.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (cve-assign@...re.org)
CVE request: konqueror not providing any protection against clickjacking (Hanno Böck <hanno@...eck.de>)
CVE-2014-0100 -- Linux kernel: net: inet frag code race condition leading to user-after-free (Petr Matousek <pmatouse@...hat.com>)
Re: Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
CVE-2014-0101 -- Linux kernel: net: sctp: null pointer dereference when processing authenticated cookie_echo chunk (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (John Haxby <john.haxby@...cle.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (John Haxby <john.haxby@...cle.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
XML entity processing hardening (Florian Weimer <fweimer@...hat.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Hanno Böck <hanno@...eck.de>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (cve-assign@...re.org)
CVE-2013-6800 is a dup of CVE-2013-1418 (Marcus Meissner <meissner@...e.de>)
[OSSA 2014-006] Trustee token revocation does not work with memcache backend (CVE-2014-2237) (Tristan Cacqueray <tristan.cacqueray@...vance.com>)
Re: CVE request: MantisBT 1.2.13 SQL injection vulnerability (Damien Regad <dregad@...tisbt.org>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Felix Eckhofer <felix@...but.de>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Jann Horn <jann@...jh.net>)
Re: CVE-2013-6800 is a dup of CVE-2013-1418 (cve-assign@...re.org)
CVE-2014-0102 -- Linux kernel: security: keyring cycle detector DoS (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Moritz Naumann <info@...itz-naumann.com>)
Re: CVE Request?: konqueror - https uses all ciphers, even weak ones (Kurt Seifried <kseifried@...hat.com>)
Linux-PAM pam_unix/unix_chkpwd is fail-open (Solar Designer <solar@...nwall.com>)

24 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.