oss-security mailing list - 2015/10

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2015/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 11	² 13	³ 1	⁴ 2
⁵ 11	⁶ 7	⁷ 3	⁸ 6	⁹ 2	¹⁰ 4	¹¹ 5
¹² 7	¹³ 7	¹⁴ 2	¹⁵ 7	¹⁶ 8	¹⁷	¹⁸ 2
¹⁹ 10	²⁰ 8	²¹ 8	²² 11	²³ 18	²⁴ 4	²⁵ 3
²⁶ 8	²⁷ 11	²⁸ 4	²⁹ 15	³⁰ 7	³¹ 1

Messages by day:

October 1 (11 messages)

CVE Request: squid: Nonce replay vulnerability in Digest authentication (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: Apache James Server 2.3.2 security vulnerability fixed VU#988628 (cve-assign@...re.org)
CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE Request: Unauthorized access to IPC objects with SysV shm (Julien Tinnes <julien@....org>)
Re: CVE Request: Unauthorized access to IPC objects with SysV shm (cve-assign@...re.org)
Re: CVE request for wget (cve-assign@...re.org)
Re: Re: CVE request for wget (Seth Arnold <seth.arnold@...onical.com>)

October 2 (13 messages)

CVE request: OpenSMTPD 5.7.2 (Kristian Fiskerstrand <kristian.fiskerstrand@...ptuouscapital.com>)
CVE requests: Critical vulnerabilities in OpenSMTPD ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE requests: Critical vulnerabilities in OpenSMTPD (Arrigo Triulzi <arrigo@...hemistowl.org>)
Re: CVE requests: Critical vulnerabilities in OpenSMTPD ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE requests: Critical vulnerabilities in OpenSMTPD (Gilles Chehade <gilles@...lp.org>)
Re: CVE requests: Critical vulnerabilities in OpenSMTPD (Gilles Chehade <gilles@...lp.org>)
[OSSA 2015-020] Glance storage overrun (CVE-2015-5286) (Tristan Cacqueray <tdecacqu@...hat.com>)
Qualys Security Advisory - OpenSMTPD Audit Report (Qualys Security Advisory <qsa@...lys.com>)
Re: CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1 (cve-assign@...re.org)
Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1 (cve-assign@...re.org)
Re: DoS attack through Email-Address perl module v1.907 (CVE id request) (Pali Rohár <pali.rohar@...il.com>)
CVE-2015-5285: Kallithea: HTTP header injection (Andrew Shadura <andrew@...dura.me>)
Re: DoS attack through Email-Address perl module v1.907 (CVE id request) (cve-assign@...re.org)

October 3 (1 message)

Re: Qualys Security Advisory - OpenSMTPD Audit Report (cve-assign@...re.org)

October 4 (2 messages)

Re: CVE request: BD-J implementation in libbluray (Jean-Baptiste Kempf <jb@...eolan.org>)
Remotely triggerable buffer overflow in OpenSMTPD ("Jason A. Donenfeld" <Jason@...c4.com>)

October 5 (11 messages)

Re: Remotely triggerable buffer overflow in OpenSMTPD (Gilles Chehade <gilles@...lp.org>)
Re: Remotely triggerable buffer overflow in OpenSMTPD ("Jason A. Donenfeld" <zx2c4@...too.org>)
Re: CVE request: BD-J implementation in libbluray (Florian Weimer <fweimer@...hat.com>)
Re: CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1 (Andreas Stieger <astieger@...e.com>)
Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1 (Andreas Stieger <astieger@...e.com>)
Re: CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE request: issues fixed in PHP 5.6.14 and 5.5.30 (Martin Prpic <mprpic@...hat.com>)
CVE Request: OpenSMTPD <= 5.7.2 buffer overflow ("Jason A. Donenfeld" <Jason@...c4.com>)
CVE request for vulnerability in OpenStack Nova (Tristan Cacqueray <tdecacqu@...hat.com>)
Re: Re: CVE request: Heap overflow with a gif file in gdk-pixbuf < 2.32.1 (Yann Droneaud <ydroneaud@...eya.com>)

October 6 (7 messages)

CVE Request: git (Seth Arnold <seth.arnold@...onical.com>)
CVE Request: Audio File Library (Seth Arnold <seth.arnold@...onical.com>)
CVE Request: gvfsd-dav (Seth Arnold <seth.arnold@...onical.com>)
Fwd: [vs-plain] CVE-2015-5261 (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE request for vulnerability in OpenStack Nova (cve-assign@...re.org)
Re: CVE-Request for stored WCI (a.k.a XSS) in Visual Form Builder 2.7.5 - 2.8.4 (Anti Räis <antirais@...il.com>)
CVE request for sqlalchemy-utils (robert@...ert.io)

October 7 (3 messages)

Re: CVE Request: Arm Mali gpu driver Dos vulnerability (cve-assign@...re.org)
CVE Request: ImageMagick (Seth Arnold <seth.arnold@...onical.com>)
[OSSA 2015-021] Nova network security group changes are not applied to running instances (CVE-2015-7713) (Tristan Cacqueray <tdecacqu@...hat.com>)

October 8 (6 messages)

Re: CVE Request: Audio File Library (cve-assign@...re.org)
CVE request - perl library UI::Dialog 1.09 - shell escaping vulnerability (Matthijs Kooijman <matthijs@...in.nl>)
Re: CVE Request: ImageMagick (Stefan Cornelius <scorneli@...hat.com>)
CVE request: Gummi (Daniel Stender <debian@...ielstender.com>)
Re: CVE request: Gummi (cve-assign@...re.org)
Re: CVE request - perl library UI::Dialog 1.09 - shell escaping vulnerability (cve-assign@...re.org)

October 9 (2 messages)

CVE request - Android OS - Using the PPP character device driver caused the system to restart (郭永刚 <guoyonggang@....cn>)
Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart (Nick Kralevich <nnk@...gle.com>)

October 10 (4 messages)

Re: CVE Request: Use-after-free in optipng 0.6.4 (cve-assign@...re.org)
Re: CVE Request: Buffer overflow in global memory affecting optipng 0.7.5 (cve-assign@...re.org)
Re: CVE request - Android OS - Using the PPP character device driver caused the system to restart - Linux kernel (cve-assign@...re.org)
Re: CVE request: issues fixed in PHP 5.6.14 and 5.5.30 (cve-assign@...re.org)

October 11 (5 messages)

ircd-ratbox and Derivatives OOM by MONITOR Command (Christine Dodrill <me@...istine.website>)
Re: CVE Request: twig remote code execution (cve-assign@...re.org)
Re: CVE Request: zendframework SQL injections (cve-assign@...re.org)
Re: CVE Request: squid: Nonce replay vulnerability in Digest authentication (cve-assign@...re.org)
Re: Heap overflow and DoS in unzip 6.0 (cve-assign@...re.org)

October 12 (7 messages)

Re: ircd-ratbox and Derivatives OOM by MONITOR Command (William Pitcock <nenolod@...eferenced.org>)
Re: Re: CVE Request: squid: Nonce replay vulnerability in Digest authentication (Amos Jeffries <squid3@...enet.co.nz>)
CVE Request: Plone CSRF (Nathan Van Gheem <nathan.van.gheem@...ne.org>)
Re: CVE Request: git (Blake Burkhart <bburky@...rky.com>)
Re: CVE Request: Plone CSRF (cve-assign@...re.org)
Re: CVE Request: Plone CSRF (Nathan Van Gheem <nathan.van.gheem@...ne.org>)
Re: CVE request: BD-J implementation in libbluray (cve-assign@...re.org)

October 13 (7 messages)

[CVE-2015-3186] Apache Ambari XSS vulnerability (Yusaku Sako <yusaku@...tonworks.com>)
[CVE-2015-1775] Apache Ambari Server Side Request Forgery vulnerability (Yusaku Sako <yusaku@...tonworks.com>)
[CVE-2015-3270] A non-administrative user can escalate themselves to have administrative privileges remotely (Yusaku Sako <yusaku@...tonworks.com>)
[CVE-2015-5210] Unvalidated Redirects and Forwards using targetURI parameter can enable phishing exploits (Yusaku Sako <yusaku@...tonworks.com>)
Re: CVE request: urlfetch range handling flaw in Cyrus IMAP (Florian Weimer <fweimer@...hat.com>)
Re: Re: CVE request: BD-J implementation in libbluray (Salvatore Bonaccorso <carnil@...ian.org>)
CVE Request: Openpgp.js Critical vulnerability in S2K (Gijs Hollestelle <g.hollestelle@...il.com>)

October 14 (2 messages)

CVE Requests for Drupal contributed modules (from SA-CONTRIB-2015-132 to SA-CONTRIB-2015-156) (Pere Orga <pere@...a.cat>)
CVE-2015-0856: sddm does not prevent access to the KDE crash handler (Florian Weimer <fw@...eb.enyo.de>)

October 15 (7 messages)

CVE Request - Linux kernel - securelevel/secureboot bypass. (Wade Mealing <wmealing@...hat.com>)
Re: CVE Request: Glibc Pointer guarding weakness (Florian Weimer <fweimer@...hat.com>)
CVE Request: Linux Kernel heap corruption on debug_read_tlb (Salva Peiró <speiro@....upv.es>)
Re: CVE Request: Linux Kernel heap corruption on debug_read_tlb (Greg KH <greg@...ah.com>)
Re: CVE Request - Linux kernel - securelevel/secureboot bypass. (Wade Mealing <wmealing@...hat.com>)
Re: CVE Request - Linux kernel - securelevel/secureboot bypass. (cve-assign@...re.org)
Re: Re: CVE Request - Linux kernel - securelevel/secureboot bypass. (Blibbet <blibbet@...il.com>)

October 16 (8 messages)

Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) (Qualys Security Advisory <qsa@...lys.com>)
CVE request: lldpd crash in lldp_decode due large management address (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Request: Linux Kernel heap corruption on debug_read_tlb (Salva Peiró <speiro@....upv.es>)
Re: CVE Request: Linux Kernel heap corruption on debug_read_tlb (Florian Weimer <fweimer@...hat.com>)
Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) (Agostino Sarubbo <ago@...too.org>)
Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) (Andreas Stieger <astieger@...e.com>)
Re: Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334) (Stuart Henderson <sthen@...nbsd.org>)
Re: CVE Request: Linux Kernel heap corruption on debug_read_tlb (Salva Peiró <speiro@....upv.es>)

October 18 (2 messages)

Re: CVE request for sqlalchemy-utils (robert@...ert.io)
Re: CVE request: lldpd crash in lldp_decode due large management address (Florian Weimer <fw@...eb.enyo.de>)

October 19 (10 messages)

Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)
Re: Prime example of a can of worms (Alex Gaynor <alex.gaynor@...il.com>)
Re: Prime example of a can of worms (Matt U <matt.u@...ressvpn.com>)
Re: Prime example of a can of worms (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE request for sqlalchemy-utils (Larry Cashdollar <larry0@...com>)
Re: Prime example of a can of worms (Brad Knowles <brad@...b-internet.org>)
Re: Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)
CVE Request: MediaWiki 1.25.3, 1.24.4 and 1.23.11 (Chris Steipp <csteipp@...imedia.org>)
Re: Prime example of a can of worms (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: Prime example of a can of worms (Tim <tim-security@...tinelchicken.org>)

October 20 (8 messages)

Re: Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)
Re: Prime example of a can of worms (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: CVE request for sqlalchemy-utils (cve-assign@...re.org)
Re: Prime example of a can of worms (Brad Knowles <brad@...b-internet.org>)
CVE request: crash when attempt to garbage collect an uninstantiated keyring (Adam Maris <amaris@...hat.com>)
Re: CVE request: crash when attempt to garbage collect an uninstantiated keyring - Linux kernel (cve-assign@...re.org)
Re: Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)
Re: Prime example of a can of worms (gremlin@...mlin.ru)

October 21 (8 messages)

CVE Request: Linux Kernel ioctl infoleaks on vivid-osd and dgnc (Salva Peiró <speirofr@...il.com>)
Re: CVE Requests for Drupal contributed modules (from SA-CONTRIB-2015-132 to SA-CONTRIB-2015-156) ("Evans, Jonathan L." <jevans@...re.org>)
Re: Prime example of a can of worms (Matthias Weckbecker <matthias@...kbecker.name>)
CVE Request: BusyBox tar directory traversal (Tyler Hicks <tyhicks@...onical.com>)
Re: CVE Request: BusyBox tar directory traversal (Tyler Hicks <tyhicks@...onical.com>)
CVE Requests for Drupal 7.41 and contributed modules (Pere Orga <pere@...a.cat>)
Re: CVE Request: BusyBox tar directory traversal (cve-assign@...re.org)
Re: CVE Request: Linux Kernel ioctl infoleaks on vivid-osd and dgnc (cve-assign@...re.org)

October 22 (11 messages)

Re: Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)
Re: Prime example of a can of worms (Loganaden Velvindron <loganaden@...il.com>)
Re: Prime example of a can of worms (Joshua Rogers <oss@...ernot.info>)
Re: Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)
Crafted xml causes out of bound memory access - Libxml2 (GAURAV GUPTA <ya1gaurav@...il.com>)
Re: Prime example of a can of worms (Florent Daigniere <florent.daigniere@...stmatta.com>)
CVE Request: invalid curve attack on bouncycastle (Raphael Hertzog <hertzog@...ian.org>)
Re: Crafted xml causes out of bound memory access - Libxml2 (cve-assign@...re.org)
Re: CVE Request: invalid curve attack on bouncycastle (cve-assign@...re.org)
Re: Prime example of a can of worms (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: Prime example of a can of worms (Kurt Seifried <kseifried@...hat.com>)

October 23 (18 messages)

Re: CVE Request: BusyBox tar directory traversal (Robert Watson <robertcwatson1@...il.com>)
Re: Prime example of a can of worms (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: CVE Request: BusyBox tar directory traversal (Tim Brown <tmb@...35.com>)
Duplicate CVE: CVE-2015-7703 in NTP (Martin Prpic <mprpic@...hat.com>)
Re: CVE Request: BusyBox tar directory traversal (Robert Watson <robertcwatson1@...il.com>)
Re: CVE Requests for Drupal 7.41 and contributed modules (CVE ID Requests <cve-assign@...re.org>)
Re: CVE Request: BusyBox tar directory traversal (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE Request: BusyBox tar directory traversal (Robert Watson <robertcwatson1@...il.com>)
Re: CVE Request: BusyBox tar directory traversal (Jeremy Stanley <fungi@...goth.org>)
[CVE-2015-5215] Ipsilon: XSS in multiple pages (Patrick Uiterwijk <puiterwijk@...hat.com>)
Re: CVE Request: BusyBox tar directory traversal (Jeremy Stanley <fungi@...goth.org>)
Re: Prime example of a can of worms (gremlin@...mlin.ru)
Re: Duplicate CVE: CVE-2015-7703 in NTP (cve-assign@...re.org)
Re: Re: Duplicate CVE: CVE-2015-7703 in NTP (Kurt Seifried <kseifried@...hat.com>)
CVE request - Icinga 1.13.3 and older are vulnerable to XSS (Ricardo <ricardo@...chbrothers.com>)
Re: Re: Duplicate CVE: CVE-2015-7703 in NTP (Florian Weimer <fweimer@...hat.com>)
Re: CVE Request: BusyBox tar directory traversal (Russ Allbery <eagle@...ie.org>)
Re: Duplicate CVE: CVE-2015-7703 in NTP (Brad Knowles <brad@...b-internet.org>)

October 24 (4 messages)

Heap overflow and endless loop in exfatfsck / exfat-utils (Hanno Böck <hanno@...eck.de>)
CVE request: xscreensaver aborts when unpluging second monitor cable when asking password (Mamoru TASAKA <mtasaka@...oraproject.org>)
Two out of bounds reads in Zstandard / zstd (Hanno Böck <hanno@...eck.de>)
Re: CVE Requests for Drupal contributed modules (from SA-CONTRIB-2015-132 to SA-CONTRIB-2015-156) (Pere Orga <pere@...a.cat>)

October 25 (3 messages)

Re: CVE request: xscreensaver aborts when unpluging second monitor cable when asking password (Mamoru TASAKA <mtasaka@...oraproject.org>)
CVE Request regarding Firefox FindMyDevice Service Critical ClickJacking ("Mohamed A. Baset" <symbian2010@...il.com>)
Pointer misuse unziping files with busybox (Gustavo Grieco <gustavo.grieco@...il.com>)

October 26 (8 messages)

CVE Requests for read out of bound in libpng (xiaoqixue_1 <xiaoqixue_1@....com>)
RE: CVE Requests for Drupal contributed modules (from SA-CONTRIB-2015-132 to SA-CONTRIB-2015-156) ("Evans, Jonathan L." <jevans@...re.org>)
Re: CVE Requests for read out of bound in libpng (cve-assign@...re.org)
CVE request - open-vm-tools using predictable filename in /tmp (Michael Scherer <misc@...b.org>)
Re: CVE request - open-vm-tools using predictable filename in /tmp (Florian Weimer <fweimer@...hat.com>)
Re: Pointer misuse unziping files with busybox (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE Request: Wordpress: Cross-site scripting vulnerability in the user list table (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Re: CVE request for wget (Austin English <austinenglish@...il.com>)

October 27 (11 messages)

CVE Request: XSS in Blubrry PowerPress Podcasting wordpress plugin Version 6.0.4 (Dis close <disclose@...ersecurityworks.com>)
CVE Request: XSS in Fast Secure Contact Form version 4.0.37 (Dis close <disclose@...ersecurityworks.com>)
CVE Request: XSS Vulnerability in BulletProof Security Version .52.4 (Dis close <disclose@...ersecurityworks.com>)
CVE Request: Multiple XSS in NextGEN Gallery by Photocrati Version 2.1.7 (Dis close <disclose@...ersecurityworks.com>)
Re: CVE-2015-6937 - Linux kernel - NULL pointer dereference in net/rds/connection.c (Quentin Casasnovas <quentin.casasnovas@...cle.com>)
CVE Request: Malicious File Upload in NextGEN Gallery by Photocrati Version 2.1.10 (Dis close <disclose@...ersecurityworks.com>)
Re: CVE request - open-vm-tools using predictable filename in /tmp (Michael Scherer <misc@...b.org>)
Multiple CVE info for Ipsilon (Patrick Uiterwijk <puiterwijk@...hat.com>)
CVE Request: Cross Site Scripting (XSS) & Cross Site Request Forgery (CSRF) in Crony Cronjob Manager Version 0.4.4 (Dis close <disclose@...ersecurityworks.com>)
CVE request: libxslt xsltStylePreCompute() type confusion DoS (Stefan Cornelius <scorneli@...hat.com>)
CVE Request: Linux kernel: Buffer overflow when copying data from skbuff to userspace (Sabrina Dubroca <sd@...asysnail.net>)

October 28 (4 messages)

Re: CVE Request: Wordpress: Cross-site scripting vulnerability in the user list table (cve-assign@...re.org)
Re: CVE-2015-6937 - Linux kernel - NULL pointer dereference in net/rds/connection.c (cve-assign@...re.org)
csd-datetime forgets to authorize users (Sebastian Krahmer <krahmer@...e.com>)
Re: CVE request: libxslt xsltStylePreCompute() type confusion DoS (cve-assign@...re.org)

October 29 (15 messages)

Re: CVE Request: Linux kernel: Buffer overflow when copying data from skbuff to userspace (cve-assign@...re.org)
Re: Pointer misuse unziping files with busybox (cve-assign@...re.org)
Xen Security Advisory 145 (CVE-2015-7812) - arm: Host crash when preempting a multicall (Xen.org security team <security@....org>)
Xen Security Advisory 147 (CVE-2015-7814) - arm: Race between domain destruction and memory allocation decrease (Xen.org security team <security@....org>)
Xen Security Advisory 146 (CVE-2015-7813) - arm: various unimplemented hypercalls log without rate limiting (Xen.org security team <security@....org>)
Xen Security Advisory 149 (CVE-2015-7969) - leak of main per-domain vcpu pointer array (Xen.org security team <security@....org>)
Xen Security Advisory 152 (CVE-2015-7971) - x86: some pmu and profiling hypercalls log without rate limiting (Xen.org security team <security@....org>)
Xen Security Advisory 150 (CVE-2015-7970) - x86: Long latency populate-on-demand operation is not preemptible (Xen.org security team <security@....org>)
Xen Security Advisory 151 (CVE-2015-7969) - x86: leak of per-domain profiling-related vcpu pointer array (Xen.org security team <security@....org>)
Xen Security Advisory 148 (CVE-2015-7835) - x86: Uncontrolled creation of large page mappings by PV guests (Xen.org security team <security@....org>)
Xen Security Advisory 153 (CVE-2015-7972) - x86: populate-on-demand balloon size inaccuracy can crash guests (Xen.org security team <security@....org>)
Re: CVE request: xscreensaver aborts when unpluging second monitor cable when asking password (cve-assign@...re.org)
Re: Heap overflow and endless loop in exfatfsck / exfat-utils (cve-assign@...re.org)
Re: CVE Request: MediaWiki 1.25.3, 1.24.4 and 1.23.11 (cve-assign@...re.org)
Re: CVE request - Icinga 1.13.3 and older are vulnerable to XSS (cve-assign@...re.org)

October 30 (7 messages)

Re: Two out of bounds reads in Zstandard / zstd (cve-assign@...re.org)
Re: CVE request: lldpd crash in lldp_decode due large management address (cve-assign@...re.org)
Re: CVE Request: Glibc Pointer guarding weakness (akuster <akuster@...sta.com>)
Re: Pointer misuse unziping files with busybox (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE Request: Openpgp.js Critical vulnerability in S2K (cve-assign@...re.org)
Re: hostapd/wpa_supplicant - Incomplete WPS and P2P NFC NDEF record payload length validation (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Re: Pointer misuse unziping files with busybox (Rich Felker <dalias@...c.org>)

October 31 (1 message)

CVE request for Nullsoft Scriptable Install System ("Stefan Kanthak" <stefan.kanthak@...go.de>)

206 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.