Products Openwall GNU/*/Linux   server OS Linux Kernel Runtime Guard John the Ripper   password cracker Free & Open Source for any platform in the cloud Pro for Linux Pro for macOS Wordlists   for password cracking passwdqc   policy enforcement Free & Open Source for Unix Pro for Windows (Active Directory) yescrypt   KDF & password hashing yespower   Proof-of-Work (PoW) crypt_blowfish   password hashing phpass   ditto in PHP tcb   better password shadowing Pluggable Authentication Modules scanlogd   port scan detector popa3d   tiny POP3 daemon blists   web interface to mailing lists msulogin   single user mode login php_mt_seed   mt_rand() cracker Services Publications Articles Presentations Resources Mailing lists Community wiki Source code repositories (GitHub) Source code repositories (CVSweb) File archive & mirrors How to verify digital signatures OVE IDs What's new

oss-security mailing list - 2014/07

Messages by day:

July 1 (1 message)

• default cipher suites in curl (Marcus Meissner <meissner@...e.de>)

• CVE request: WordPress plugin wysija-newsletters remote file upload (Henri Salo <henri@...v.fi>)
• Re: Ansible CVE requests (cve-assign@...re.org)
• Re: Ansible CVE requests (Florian Weimer <fweimer@...hat.com>)
• CVE-2014-3532, -3533: two local DoS vulnerabilities in dbus-daemon (Simon McVittie <simon.mcvittie@...labora.co.uk>)
• [CVE-2014-3482] [CVE-2014-3483] Ruby on Rails: Two Active Record SQL Injection Vulnerabilities Affecting PostgreSQL (Rafael Mendonça França <rafaelmfranca@gm…)
• Re: [CVE-2014-3482] [CVE-2014-3483] Ruby on Rails: Two Active Record SQL Injection Vulnerabilities Affecting PostgreSQL (Rafael Mendonça França <rafaelmfranca…)
• [OSSA 2014-022] Keystone V2 trusts privilege escalation through user supplied project id (CVE-2014-3520) (Tristan Cacqueray <tristan.cacqueray@...vance.com>)
• Re: LMS-2014-06-16-6: LZ4 Core (P J P <ppandit@...hat.com>)
• Re: LMS-2014-06-16-5: Linux Kernel LZ4 (P J P <ppandit@...hat.com>)
• Amended Patches for CVE-2014-3483 for Rails 4.x (Rafael Mendonça França <rafaelmfranca@...il.com>)
• Re: Re: Ansible CVE requests (Brian Harring <ferringb@...il.com>)
• Varnish - no CVE == bug regression (Marek Kroemeke <kroemeke@...il.com>)
• CVE-2014-4715 for LZ4 issue 134 (cve-assign@...re.org)
• Re: Varnish - no CVE == bug regression (Solar Designer <solar@...nwall.com>)

• CVE request: XSS in PNP4Nagios (Murray McAllister <mmcallis@...hat.com>)
• Re: Varnish - no CVE == bug regression ("Poul-Henning Kamp" <phk@....freebsd.dk>)
• Re: Varnish - no CVE == bug regression (Marek Kroemeke <kroemeke@...il.com>)
• CVE-2014-0235 cleanup (Kurt Seifried <kseifried@...hat.com>)
• Re: CVE-2014-0235 cleanup (Solar Designer <solar@...nwall.com>)
• Re: Varnish - no CVE == bug regression ("Poul-Henning Kamp" <phk@....freebsd.dk>)
• Re: Varnish - no CVE == bug regression (Kurt Seifried <kseifried@...hat.com>)
• Re: CVE-2014-0235 cleanup (Kurt Seifried <kseifried@...hat.com>)
• Re: LMS-2014-06-16-6: LZ4 Core (P J P <ppandit@...hat.com>)
• Re: LMS-2014-06-16-5: Linux Kernel LZ4 (P J P <ppandit@...hat.com>)
• Re: Varnish - no CVE == bug regression (Sven Kieske <S.Kieske@...twald.de>)
• CVE request: pnp4nagios - Two URL Cross-Site Scripting Vulnerabilities (Vasyl Kaigorodov <vkaigoro@...hat.com>)
• Re: CVE request: pnp4nagios - Two URL Cross-Site Scripting Vulnerabilities (Henri Salo <henri@...v.fi>)
• Re: Varnish - no CVE == bug regression (Stefan Bühler <stbuehler@...httpd.net>)
• Possible CVE request: php5: phpinfo() Type Confusion Information Leak Vulnerability (Salvatore Bonaccorso <carnil@...ian.org>)
• Re: Varnish - no CVE == bug regression (Kurt Seifried <kseifried@...hat.com>)
• SaltStack - how to report security flaw? (Kurt Seifried <kseifried@...hat.com>)
• Re: Varnish - no CVE == bug regression (Marek Kroemeke <kroemeke@...il.com>)
• Re: Varnish - no CVE == bug regression (Stefan Bühler <stbuehler@...httpd.net>)
• Re: Varnish - no CVE == bug regression (Stefan Bühler <stbuehler@...httpd.net>)
• Re: SaltStack - how to report security flaw? (Murray McAllister <mmcallis@...hat.com>)
• Re: Varnish - no CVE == bug regression (Kurt Seifried <kseifried@...hat.com>)

• Re: Varnish - no CVE == bug regression (Seth Arnold <seth.arnold@...onical.com>)
• Re: Varnish - no CVE == bug regression (Sven Kieske <S.Kieske@...twald.de>)
• X.Org intel driver dev snapshots, backlight helper issue (Matthieu Herrb <matthieu.herrb@...s.fr>)
• CVE-2014-4699: Linux ptrace bug (Andy Lutomirski <luto@...capital.net>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: Possible CVE request: php5: phpinfo() Type Confusion Information Leak Vulnerability (Kurt Seifried <kseifried@...hat.com>)

• Re: LMS-2014-06-16-2: Linux Kernel LZO (Solar Designer <solar@...nwall.com>)
• Re: LMS-2014-06-16-2: Linux Kernel LZO ("Don A. Bailey" <donb@...uritymouse.com>)
• Re: Varnish - no CVE == bug regression ("Poul-Henning Kamp" <phk@....freebsd.dk>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Yves-Alexis Perez <corsac@...ian.org>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Yves-Alexis Perez <corsac@...ian.org>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Yves-Alexis Perez <corsac@...ian.org>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Yves-Alexis Perez <corsac@...ian.org>)

• Re: CVE-2014-4699: Linux ptrace bug (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Possible CVE request: php5: phpinfo() Type Confusion Information Leak Vulnerability (Loganaden Velvindron <loganaden@...il.com>)
• Re: CVE-2014-4699: Linux ptrace bug (John Johansen <john.johansen@...onical.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (John Johansen <john.johansen@...onical.com>)
• Re: Possible CVE request: php5: phpinfo() Type Confusion Information Leak Vulnerability (cve-assign@...re.org)
• Re: CVE-2014-4699: Linux ptrace bug (John Johansen <john.johansen@...onical.com>)

• Re: CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE (David Jorm <djorm@...hat.com>)
• Re: default cipher suites in curl (Michael Samuel <mik@...net.net>)
• Re: CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE (cve-assign@...re.org)
• [SECURITY] CVE-2014-3503 Apache Syncope (Francesco Chicchiriccò <ilgrosso@...che.org>)
• Re: default cipher suites in curl (Marcus Meissner <meissner@...e.de>)
• Re: default cipher suites in curl (Michael Samuel <mik@...net.net>)
• LMS-2014-07-07-1: python-lz4 ("Don A. Bailey" <donb@...uritymouse.com>)
• Vulnerability Report for Ruby Gem codders-dataset-1.3.2.1 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem cap-strap-0.1.5 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem codders-dataset-1.3.2.1 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem backup-agoddard-3.0.28 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem backup_checksum-3.0.23 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem gyazo-1.0.0 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem VladTheEnterprising-0.2 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem gnms-2.1.1 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem point-cli-0.0.1 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem kompanee-recipes-0.1.4 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem lean-ruport-0.3.8 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem kajam-1.0.3.rc2 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem lawn-login-0.0.7 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem kcapifony-2.1.6 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem karo-2.3.8 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem lynx-0.2.0 (larry0@...com (Larry W. Cashdollar))
• Vulnerability Report for Ruby Gem ciborg-3.0.0 (larry0@...com (Larry W. Cashdollar))
• Re: LMS-2014-07-07-1: python-lz4 ("Don A. Bailey" <donb@...uritymouse.com>)

• Re: CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE (cve-assign@...re.org)
• possible CVE-2010 request: Ruby older than 1.9.2 appending current directory to the load path (Murray McAllister <mmcallis@...hat.com>)
• Re: possible CVE-2010 request: Ruby older than 1.9.2 appending current directory to the load path ("Shota Fukumori (sora_h)" <her@...ah.jp>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• [OSSA 2014-023] Multiple XSS vulnerabilities in Horizon (CVE-2014-3473, CVE-2014-3474, and CVE-2014-3475) (Tristan Cacqueray <tristan.cacqueray@...vance.com>)
• Re: CVE request: WordPress plugin wysija-newsletters remote file upload (cve-assign@...re.org)
• Re: CVE-2014-4171 - Linux kernel mm/shmem.c denial of service (P J P <ppandit@...hat.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: Varnish - no CVE == bug regression (cve-assign@...re.org)
• Summer bug cleaning - some Hash DoS stuff (Kurt Seifried <kseifried@...hat.com>)
• Summer bug cleaning - rpcbind -h option (Kurt Seifried <kseifried@...hat.com>)
• Re: Varnish - no CVE == bug regression ("Poul-Henning Kamp" <phk@....freebsd.dk>)
• Re: CVE-2014-4171 - Linux kernel mm/shmem.c denial of service (yersinia <yersinia.spiros@...il.com>)
• Re: CVE-2014-4699: Linux ptrace bug (Andy Lutomirski <luto@...capital.net>)
• Re: CVE-2014-4699: Linux ptrace bug (Andy Lutomirski <luto@...capital.net>)
• FreeBSD Security Advisory FreeBSD-SA-14:17.kmem (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
• Zend Framework CVEs (Kurt Seifried <kseifried@...hat.com>)

• Re: Re: Varnish - no CVE == bug regression (Michael Samuel <mik@...net.net>)
• Re: Zend Framework CVEs (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Zend Framework CVEs (Murray McAllister <mmcallis@...hat.com>)
• Re: Zend Framework CVEs (Murray McAllister <mmcallis@...hat.com>)
• Re: Re: Varnish - no CVE == bug regression ("Poul-Henning Kamp" <phk@....freebsd.dk>)
• Re: CVE-2014-4699: Linux ptrace bug (Solar Designer <solar@...nwall.com>)
• Re: Re: Varnish - no CVE == bug regression (Michael Samuel <mik@...net.net>)
• Re: Re: Varnish - no CVE == bug regression ("Poul-Henning Kamp" <phk@....freebsd.dk>)
• Re: FreeBSD Security Advisory FreeBSD-SA-14:13.pam (Tomas Hoger <thoger@...hat.com>)
• Re: FreeBSD Security Advisory FreeBSD-SA-14:13.pam (Sven Kieske <S.Kieske@...twald.de>)
• CVE request - Snoopy incomplete fix for CVE-2008-4796 (Garth Mollett <gmollett@...hat.com>)
• Re: FreeBSD Security Advisory FreeBSD-SA-14:13.pam (Stuart Henderson <stu@...cehopper.org>)
• Fwd: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Ramon de C Valle <rdecvalle@...are.com>)
• LMS-2014-07-09-1: lz4-ruby Memory Corruption ("Don A. Bailey" <donb@...uritymouse.com>)

• Re: Fwd: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Murray McAllister <mmcallis@...hat.com>)
• Re: Fwd: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Tomas Hoger <thoger@...hat.com>)
• GnuPG computation error checks (Solar Designer <solar@...nwall.com>)
• CVE request: transmission peer communication vulnerability (Vasyl Kaigorodov <vkaigoro@...hat.com>)
• Re: GnuPG computation error checks (Florian Weimer <fweimer@...hat.com>)
• Vulnerabilities in Ruby Gem brbackup-0.1.1 ("Larry W. Cashdollar" <larry0@...com>)
• CVE-2014-0475: glibc directory traversal in LC_* locale handling (Florian Weimer <fw@...eb.enyo.de>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Rich Felker <dalias@...c.org>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Florian Weimer <fw@...eb.enyo.de>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Solar Designer <solar@...nwall.com>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Florian Weimer <fw@...eb.enyo.de>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Solar Designer <solar@...nwall.com>)
• Re: Fwd: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Ramon de C Valle <rdecvalle@...are.com>)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Ramon de C Valle <rdecvalle@...are.com>)

• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Rich Felker <dalias@...c.org>)
• Re: CVE request: XSS in PNP4Nagios (cve-assign@...re.org)
• Re: Zend Framework CVEs (cve-assign@...re.org)
• Re: CVE request: transmission peer communication vulnerability (cve-assign@...re.org)
• Re: X.Org intel driver dev snapshots, backlight helper issue (cve-assign@...re.org)
• Re: Re: CVE request: XSS in PNP4Nagios (Salvatore Bonaccorso <carnil@...ian.org>)
• Re: CVE request: XSS in PNP4Nagios (cve-assign@...re.org)
• Re: Vulnerability Report for Ruby Gem kompanee-recipes-0.1.4 (cve-assign@...re.org)
• Re: Re: CVE request: XSS in PNP4Nagios (Vasyl Kaigorodov <vkaigoro@...hat.com>)

• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Rich Felker <dalias@...c.org>)
• LMS-2014-07-10-1 - CloudFlare GoLang LZ4 Memory Corruption ("Don A. Bailey" <donb@...uritymouse.com>)

• glibc locale issues (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: glibc locale issues (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Florian Weimer <fweimer@...hat.com>)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Ramon de C Valle <rdecvalle@...are.com>)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Kurt Seifried <kseifried@...hat.com>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Rich Felker <dalias@...c.org>)

• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (cve-assign@...re.org)
• IPython Notebook Cross 2014-3429 (Kyle Kelley <rgbkrk@...il.com>)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Ramon de C Valle <rdecvalle@...are.com>)

• Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 (Kurt Seifried <kseifried@...hat.com>)
• Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 (cve-assign@...re.org)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (cve-assign@...re.org)
• Re: Vulnerability Report for Ruby Gem kompanee-recipes-0.1.4 (cve-assign@...re.org)
• Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 (Garth Mollett <gmollett@...hat.com>)
• CVE request: libressl before 2.0.2 under linux PRNG failure (Hanno Böck <hanno@...eck.de>)
• CVE request: rawstudio: Insecure use of temporary file (Vasyl Kaigorodov <vkaigoro@...hat.com>)
• qemu-bridge-helper minimizing patch (Sebastian Krahmer <krahmer@...e.de>)
• Re: Re: Vulnerability Report for Ruby Gem kompanee-recipes-0.1.4 (Larry Cashdollar <larry0@...com>)
• Re: Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 (Tomas Hoger <thoger@...hat.com>)
• Re: Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Tomas Hoger <thoger@...hat.com>)
• Re: Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Tomas Hoger <thoger@...hat.com>)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (Ramon de C Valle <rdecvalle@...are.com>)
• Re: CVE request: libressl before 2.0.2 under linux PRNG failure (cve-assign@...re.org)
• Re: CVE request: rawstudio: Insecure use of temporary file (cve-assign@...re.org)
• Re: CVE request: XSS in PNP4Nagios (cve-assign@...re.org)

• CVE-2014-4943: Linux privilege escalation in ppp over l2tp sockets (Kees Cook <kees@...flux.net>)
• [OSSA 2014-024] Use of non-constant time comparison operation (CVE-2014-3517) (Grant Murphy <gmurphy@...hat.com>)
• Re: CVE request: libressl before 2.0.2 under linux PRNG failure (Rich Felker <dalias@...c.org>)
• Re: [ruby-core:63604] [ruby-trunk - Bug #10019] [Open] segmentation fault/buffer overrun in pack.c (encodes) (cve-assign@...re.org)
• Re: Vulnerability Report for Ruby Gem codders-dataset-1.3.2.1 (etc.) (cve-assign@...re.org)

• Strong Security Processes Require Strong Privacy Protections (coderman <coderman@...il.com>)
• Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 (cve-assign@...re.org)
• CVE Request: bozohttpd: basic http authentication bypass (Salvatore Bonaccorso <carnil@...ian.org>)
• Re: Re: CVE request: libressl before 2.0.2 under linux PRNG failure (Stuart Henderson <stu@...cehopper.org>)
• Re: CVE request: libressl before 2.0.2 under linux PRNG failure (cve-assign@...re.org)
• Re: CVE Request: bozohttpd: basic http authentication bypass (cve-assign@...re.org)

• CVE's for intersection vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
• Re: CVE's for intersection vulnerabilities (cve-assign@...re.org)
• Good news and bad news on Python sockets and pickle (Kurt Seifried <kseifried@...hat.com>)
• Re: Good news and bad news on Python sockets and pickle (gremlin@...mlin.ru)
• Re: CVE's for intersection vulnerabilities (intrigeri <intrigeri@...m.org>)
• Re: Good news and bad news on Python sockets and pickle (Kurt Seifried <kseifried@...hat.com>)
• Re: Good news and bad news on Python sockets and pickle (cve-assign@...re.org)
• Re: CVE's for intersection vulnerabilities ("Dolev Farhi" <dolevf@...oo.com>)

• Status of CVE-2012-4542/Linux? (Moritz Muehlenhoff <jmm@...ian.org>)
• CVE request: cacti XSS (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: CVE's for intersection vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
• Additional information on CVE-2014-2469? (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: CVE's for intersection vulnerabilities ("Dolev Farhi" <dolevf@...oo.com>)

• Moodle security notifications public (Michael de Raadt <michaeld@...dle.com>)
• Moodle security notifications public (Michael de Raadt <michaeld@...dle.com>)
• Re: Moodle security notifications public (cve-assign@...re.org)
• CVE-Request: KAuth authentication bypass (Sebastian Krahmer <krahmer@...e.de>)
• CVE Request for Drupal Core ("Jorge Manuel B. S. Vicetto" <jmbsvicetto@...il.com>)
• Re: CVE Request for Drupal Core (Loganaden Velvindron <loganaden@...il.com>)
• [OSSA 2014-025] Denial of Service in Neutron allowed address pair (CVE-2014-3555) (Tristan Cacqueray <tristan.cacqueray@...vance.com>)
• Re: Re: glibc locale issues (Florian Weimer <fweimer@...hat.com>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Stephane Chazelas <stephane.chazelas@...il.com>)
• Re: Moodle security notifications public (cve-assign@...re.org)
• Re: Re: glibc locale issues (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling (Stephane Chazelas <stephane.chazelas@...il.com>)
• Re: Additional information on CVE-2014-2469? (Ritwik Ghoshal <ritwik.ghoshal@...cle.com>)
• CVE requests for Review Board (Christian Hammond <christian@...nbaginc.com>)

• [oCERT-2014-004] Ansible input sanitization errors (Andrea Barisani <lcars@...rt.org>)
• CVE Request: cups: Incomplete fix for CVE-2014-3537 (Salvatore Bonaccorso <carnil@...ian.org>)
• Linux peer_cred Mischmasch (Sebastian Krahmer <krahmer@...e.de>)
• Re: Linux peer_cred Mischmasch (Simon McVittie <smcv@...ian.org>)
• Re: Linux peer_cred Mischmasch (Florian Weimer <fweimer@...hat.com>)
• GLPI: unprivileged users can access cost information (Raphael Geissert <geissert@...ian.org>)
• Exim: 4.83 Released, CVE-2014-2972 fix (Phil Pennock <oss-security-phil@...dhuis.org>)
• Re: Linux peer_cred Mischmasch (Andy Lutomirski <luto@...capital.net>)
• Re: CVE request: cacti XSS (cve-assign@...re.org)
• ecryptfs-setup-private nitpick (Raphael Geissert <geissert@...ian.org>)
• Re: CVE-Request: KAuth authentication bypass (cve-assign@...re.org)
• Re: CVE requests for Review Board (cve-assign@...re.org)
• Re: CVE Request: cups: Incomplete fix for CVE-2014-3537 (cve-assign@...re.org)
• Re: LMS-2014-06-16-3: Libav LZO ("Don A. Bailey" <donb@...uritymouse.com>)
• Re: GLPI: unprivileged users can access cost information (cve-assign@...re.org)
• Re: ecryptfs-setup-private nitpick (Tyler Hicks <tyhicks@...onical.com>)

• Re: CVE requests for Review Board (Christian Hammond <christian@...nbaginc.com>)
• Re: CVE-Request: KAuth authentication bypass (Sebastian Krahmer <krahmer@...e.de>)
• Re: Re: Linux peer_cred Mischmasch (Sebastian Krahmer <krahmer@...e.de>)
• Re: CVE-Request: KAuth authentication bypass (cve-assign@...re.org)
• Re: ecryptfs-setup-private nitpick (Dustin Kirkland <kirkland@...ntu.com>)
• [oCERT-2014-005] LPAR2RRD input sanitization errors (Daniele Bianco <danbia@...rt.org>)
• [CVE request] Array allocation fixes in libgfortran (Florian Weimer <fweimer@...hat.com>)
• Re: ecryptfs-setup-private nitpick (Michael Samuel <mik@...net.net>)
• Re: ecryptfs-setup-private nitpick (Michael Samuel <mik@...net.net>)
• CVE request: kernel: vfs: refcount issues during unmount on symlink (Vasily Averin <vvs@...allels.com>)
• Re: CVE Request for Drupal Core (Forest Monsen <forest.monsen@...il.com>)
• Re: CVE Request for Drupal Core (cve-assign@...re.org)

• Re: [CVE request] Array allocation fixes in libgfortran (cve-assign@...re.org)
• Re: CVE request: kernel: vfs: refcount issues during unmount on symlink (cve-assign@...re.org)
• CVE request: Mailpoet (wordpress-plugin) remote file upload exploited in the wild (Hanno Böck <hanno@...eck.de>)
• Re: CVE request: Mailpoet (wordpress-plugin) remote file upload exploited in the wild (Henri Salo <henri@...v.fi>)
• CVE request Linux Kernel: net: SCTP: NULL pointer dereference (P J P <ppandit@...hat.com>)
• CVE request: WordPress plugin vitamin traversal arbitrary file access (Henri Salo <henri@...v.fi>)
• Re: Linux peer_cred Mischmasch (Andy Lutomirski <luto@...capital.net>)
• Duplicated CVE - Cacti XSS (Adan Alvarez <adan.alvarez.90@...il.com>)
• Re: Duplicated CVE - Cacti XSS (cve-assign@...re.org)
• Re: Duplicated CVE - Cacti XSS (Adan Alvarez <adan.alvarez.90@...il.com>)

• Re: CVE request Linux Kernel: net: SCTP: NULL pointer dereference (cve-assign@...re.org)
• Re: Re: CVE request Linux Kernel: net: SCTP: NULL pointer dereference (Daniel Borkmann <dborkman@...hat.com>)

• rsync vulnerable to collisions (Michael Samuel <mik@...net.net>)
• Re: rsync vulnerable to collisions (Loganaden Velvindron <loganaden@...il.com>)
• Re: CVE request: WordPress plugin vitamin traversal arbitrary file access (cve-assign@...re.org)

• CVE Request: tboot failing to measure commandline parameters (Marcus Meissner <meissner@...e.de>)
• CVE-2014-3554: libndp buffer overflow (Murray McAllister <mmcallis@...hat.com>)
• [CVE Request] glibc iconv_open buffer overflow (was: Re: Re: glibc locale issues) (Florian Weimer <fweimer@...hat.com>)
• Re: Additional information on CVE-2014-2469? (Tomas Hoger <thoger@...hat.com>)
• Subscribtion request to linux-distros (Martin Schwidefsky <schwidefsky@...ibm.com>)
• Re: Subscribtion request to linux-distros (Solar Designer <solar@...nwall.com>)

• CVE-2014-3120 ElasticSearch (Henri Salo <henri@...v.fi>)
• CVE request: WordPress plugin wppageflip index.php pageflipbook_language parameter traversal local file inclusion (Henri Salo <henri@...v.fi>)
• CVE-2014-5117 - Tor before 0.2.4.23 RELAY_EARLY issue (cve-assign@...re.org)
• Re: CVE Request: tboot failing to measure commandline parameters (cve-assign@...re.org)
• CVE Request: dhcpcd DoS attack (Roy Marples <roy@...ples.name>)

• Re: CVE request: libressl before 2.0.2 under linux PRNG failure (cve-assign@...re.org)
• CVE request for Drupal contributed modules (Forest Monsen <forest.monsen@...il.com>)
• CVE Request: XML-DT: Insecure use of temporary files (Salvatore Bonaccorso <carnil@...ian.org>)
• Re: CVE request for Drupal contributed modules (cve-assign@...re.org)
• CVE-2014-3564 gpgme: heap-based buffer overflow in gpgsm status handler (Stefan Cornelius <scorneli@...hat.com>)
• Re: Re: [CVE request] Array allocation fixes in libgfortran (Florian Weimer <fweimer@...hat.com>)
• Re: Re: CVE request: libressl before 2.0.2 under linux PRNG failure (Stuart Henderson <stu@...cehopper.org>)
• Re: CVE request: WordPress plugin wppageflip index.php pageflipbook_language parameter traversal local file inclusion (cve-assign@...re.org)
• Possible CVE Request: MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2 (Salvatore Bonaccorso <carnil@...ian.org>)
• Re: Possible CVE Request: MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2 (Chris Steipp <csteipp@...imedia.org>)

273 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.