oss-security mailing list - 2015/11

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2015/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 5	³ 11	⁴ 3	⁵ 4	⁶ 6	⁷	⁸ 3
⁹ 8	¹⁰ 12	¹¹ 3	¹² 4	¹³ 14	¹⁴ 2	¹⁵ 1
¹⁶ 6	¹⁷ 19	¹⁸ 29	¹⁹ 6	²⁰ 9	²¹ 2	²² 4
²³ 5	²⁴ 12	²⁵ 14	²⁶ 3	²⁷ 4	²⁸ 3	²⁹ 4
³⁰ 9

Messages by day:

November 2 (5 messages)

Re: Re: CVE request for wget (Austin English <austinenglish@...il.com>)
CVE request: DoS in libxml2 if xz is enabled (Gustavo Grieco <gustavo.grieco@...il.com>)
tlsfuzzer - new tool (Hubert Kario <hkario@...hat.com>)
Re: CVE request: DoS in libxml2 if xz is enabled (cve-assign@...re.org)
Re: hostapd/wpa_supplicant - Incomplete WPS and P2P NFC NDEF record payload length validation (cve-assign@...re.org)

November 3 (11 messages)

Re: CVE request: DoS in libxml2 if xz is enabled (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: BD-J implementation in libbluray (Jean-Baptiste Kempf <jb@...eolan.org>)
CVE request: libsndfile 1.0.25 heap overflow (Martin Prpic <mprpic@...hat.com>)
CVE Request: pycurl use after free fixed in version 7.19.5.2 (Kristian Fiskerstrand <kristian.fiskerstrand@...ptuouscapital.com>)
Re: CVE request: libsndfile 1.0.25 heap overflow (Hanno Böck <hanno@...eck.de>)
Re: Pending CVE requests for glibc (Raphael Hertzog <hertzog@...ian.org>)
Re: CVE request: libsndfile 1.0.25 heap overflow (cve-assign@...re.org)
Re: CVE request: libsndfile 1.0.25 heap overflow (cve-assign@...re.org)
Re: libsndfile DoS/divide-by-zero (cve-assign@...re.org)
Re: CVE Request: pycurl use after free fixed in version 7.19.5.2 (cve-assign@...re.org)
Re: Pointer misuse unziping files with busybox (cve-assign@...re.org)

November 4 (3 messages)

Re: Re: CVE request for wget (Austin English <austinenglish@...il.com>)
CVE request -- Linux kernel: selinux: rate-limit unrecognized netlink message warnings in selinux_nlmsg_perm() (Vladis Dronov <vdronov@...hat.com>)
Re: CVE request: urlfetch range handling flaw in Cyrus IMAP (cve-assign@...re.org)

November 5 (4 messages)

CVE request: qt5-qtwebkit records visited URLS in private browsing mode (Adam Maris <amaris@...hat.com>)
Re: CVE request -- Linux kernel: selinux: rate-limit unrecognized netlink message warnings in selinux_nlmsg_perm() (cve-assign@...re.org)
Re: Re: CVE request: libsndfile 1.0.25 heap overflow (gauri@....by)
Re: CVE request: qt5-qtwebkit records visited URLS in private browsing (cve-assign@...re.org)

November 6 (6 messages)

CVE request: stored XSS in PowerDNS < 3.4.7 (Damien Cauquil <d.cauquil@...dream.com>)
Review+CVE request: multiple issues in redis EVAL command (lua sandbox) (Luca Bruno <lucab@...ian.org>)
Re: CVE request: stored XSS in PowerDNS < 3.4.7 (Pieter Lexis <pieter.lexis@...erdns.com>)
Re: Review+CVE request: multiple issues in redis EVAL command (lua sandbox) (cve-assign@...re.org)
[ANNOUNCE] CVE-2014-3576 - Apache ActiveMQ vulnerabilities (Timothy Bish <tabish121@...il.com>)
Re: Re: Review+CVE request: multiple issues in redis EVAL command (lua sandbox) (Luca Bruno <lucab@...ian.org>)

November 8 (3 messages)

Joomla CMS - Bad Cryptography - Multiple Vulnerabilities (Scott Arciszewski <scott@...agonie.com>)
CVE Request: TestLink 1.9.14 CSRF Vulnerability (Aravind <altoarun@...il.com>)
CVE Request: TestLink 1.9.14 Persistent XSS Vulnerability (Aravind <altoarun@...il.com>)

November 9 (8 messages)

Assign CVE for common-collections remote code execution on deserialisation flaw (Jason Shepherd <jshepher@...hat.com>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Florian Weimer <fweimer@...hat.com>)
PowerDNS Security Announcement 2015-03 (Pieter Lexis <pieter.lexis@...erdns.com>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Pedro Vaz De Sousa Grilo <pedrosousagrilo@...il.com>)
CVE request: Jenkins remote code execution vulnerability due to unsafe deserialization (Daniel Beck <ml@...kweb.net>)
CVE request: net-snmp OpenBSD package - insecure file permission vulnerability (Pierre Kim <pierre.kim.sec@...il.com>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Tim <tim-security@...tinelchicken.org>)
Blind SQL injection in wp-championship wordpress plugin v5.8 (Larry Cashdollar <larry0@...com>)

November 10 (12 messages)

Xen Security Advisory 156 (CVE-2015-5307,CVE-2015-8104) - x86: CPU lockup during exception delivery (Xen.org security team <security@....org>)
race condition checking digests/checksums in sudoers (Alyssa Milburn <amilburn@...l.org>)
Re: CVE request: net-snmp OpenBSD package - insecure file permission vulnerability (cve-assign@...re.org)
CVE-2015-5307 kernel: kvm: guest to host DoS by triggering an infinite loop in microcode via #AC exception (P J P <ppandit@...hat.com>)
CVE-2015-8104 kernel: kvm: guest to host DoS by triggering an infinite loop in microcode via #DB exception (P J P <ppandit@...hat.com>)
Re: CVE-2015-5307 kernel: kvm: guest to host DoS by triggering an infinite loop in microcode via #AC exception (P J P <ppandit@...hat.com>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Moritz Bechler <mbechler@...terphace.org>)
Several reads out-of-bound in mplayer 1.1 (Gustavo Grieco <gustavo.grieco@...il.com>)
wpa_supplicant unauthorized WNM Sleep Mode GTK control (Jouni Malinen <j@...fi>)
hostapd/wpa_supplicant: EAP-pwd missing last fragment length validation (Jouni Malinen <j@...fi>)
wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message (Jouni Malinen <j@...fi>)
Re: race condition checking digests/checksums in sudoers (cve-assign@...re.org)

November 11 (3 messages)

Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Tim <tim-security@...tinelchicken.org>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Moritz Bechler <mbechler@...terphace.org>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Tim <tim-security@...tinelchicken.org>)

November 12 (4 messages)

CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Gsunde Orangen <gsunde.orangen@...il.com>)
CVE request: libpng buffer overflow in png_set_PLTE (Glenn Randers-Pehrson <glennrp@...il.com>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Mark Felder <feld@...d.me>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Tim <tim-security@...tinelchicken.org>)

November 13 (14 messages)

Re: CVE request: libpng buffer overflow in png_set_PLTE (cve-assign@...re.org)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Jason Shepherd <jshepher@...hat.com>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Gsunde Orangen <gsunde.orangen@...il.com>)
Re: Re: Assign CVE for common-collections remote code execution on deserialisation flaw (Gsunde Orangen <gsunde.orangen@...il.com>)
CVE request -- [media] usbvision: usbvision_probe() can trigger a kernel NULL pointer dereference (Vladis Dronov <vdronov@...hat.com>)
Re: CVE request -- [media] usbvision: usbvision_probe() can trigger a kernel NULL pointer dereference (Vladis Dronov <vdronov@...hat.com>)
CVE request: Reflected XSS in OcPortal CMS 9.0.20 (Dis close <disclose@...ersecurityworks.com>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Mark Felder <feld@...d.me>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Mark Felder <feld@...d.me>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw ("Lisa Bradley" <lbradley@...ibm.com>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Tim <tim-security@...tinelchicken.org>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Gsunde Orangen <gsunde.orangen@...il.com>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Mark Felder <feld@...d.me>)
Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Gsunde Orangen <gsunde.orangen@...il.com>)

November 14 (2 messages)

New security advisory for Apache CXF (Colm O hEigeartaigh <coheigea@...che.org>)
Re: New security advisory for Apache CXF (Hanno Böck <hanno@...eck.de>)

November 15 (1 message)

Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw (Gsunde Orangen <gsunde.orangen@...il.com>)

November 16 (6 messages)

CVE request-HUAWEI P8 GRA-UL00 (郭永刚 <guoyonggang@....cn>)
Re: CVE request-HUAWEI P8 GRA-UL00 (Solar Designer <solar@...nwall.com>)
CVE-2015-8106 - latex2rtf v2.3.8 format string vulnerability (김종권 <jgkim@...as.snu.ac.kr>)
CVE-2015-8107 - a2ps(gnu) v4.14 format string vulnerability (김종권 <jgkim@...as.snu.ac.kr>)
Re: CVE request-HUAWEI P8 GRA-UL00 (Fabio Olive Leite <fleite@...hat.com>)
Re: CVE request-HUAWEI P8 GRA-UL00 (Shawn <citypw@...il.com>)

November 17 (19 messages)

suckless sent and libxft-dev 2.3.2-1 crash ("Simon ." <bofh666ftw@...glemail.com>)
Re: suckless sent and libxft-dev 2.3.2-1 crash (Tim <timc@...wb.ro>)
Re: suckless sent and libxft-dev 2.3.2-1 crash (Agostino Sarubbo <ago@...too.org>)
Re: Several reads out-of-bound in mplayer 1.1 (cve-assign@...re.org)
Buffer overflow in libxml2 (GAURAV GUPTA <ya1gaurav@...il.com>)
x86 ROP mitigation (Solar Designer <solar@...nwall.com>)
Re: suckless sent and libxft-dev 2.3.2-1 crash (Alan Coopersmith <alan.coopersmith@...cle.com>)
CVE request for Gnome gdm/screen lock crash (Kurt Seifried <kseifried@...hat.com>)
CVE request for path traversal / info leak bug in Spiffy web server (Peter Bex <peter@...e-magic.net>)
Re: CVE request for Gnome gdm/screen lock crash (Kurt Seifried <kseifried@...hat.com>)
Re: Fwd: x86 ROP mitigation (Jeff Law <law@...hat.com>)
Re: Fwd: x86 ROP mitigation (Bernd Schmidt <bschmidt@...hat.com>)
Re: Re: Fwd: x86 ROP mitigation (Daniel Micay <danielmicay@...il.com>)
Re: Re: Fwd: x86 ROP mitigation (Josh Bressers <bressers@...hat.com>)
Re: Re: Fwd: x86 ROP mitigation (Daniel Micay <danielmicay@...il.com>)
Re: Re: Fwd: x86 ROP mitigation (Josh Bressers <bressers@...hat.com>)
CVE request for vulnerability in OpenStack Glance (Tristan Cacqueray <tdecacqu@...hat.com>)
Re: Re: Fwd: x86 ROP mitigation (Rich Felker <dalias@...c.org>)
Re: Assign CVE for common-collections remote code execution on deserialisation flaw (cve-assign@...re.org)

November 18 (29 messages)

Re: CVE-Request: Assign CVE for common-collections remote code execution on deserialisation flaw ("Oracle Security Alerts (Thomas)" <secalert_us@...cle.com>)
Re: CVE request: Jenkins remote code execution vulnerability due to unsafe deserialization (cve-assign@...re.org)
Re: Fwd: x86 ROP mitigation (Solar Designer <solar@...nwall.com>)
Re: Fwd: x86 ROP mitigation (Solar Designer <solar@...nwall.com>)
Re: Re: Fwd: x86 ROP mitigation (Daniel Micay <danielmicay@...il.com>)
[CFP] No Big Thing Conference #2 San Francisco, December 5 2015 (Jonathan Brossard <endrazine@...il.com>)
Re: Re: Fwd: x86 ROP mitigation (Daniel Micay <danielmicay@...il.com>)
Re: [CFP] No Big Thing Conference #2 San Francisco, December 5 2015 (Solar Designer <solar@...nwall.com>)
CVE request - Linux kernel - Unix sockets use after free - peer_wait_queue prematurely freed (Wade Mealing <wmealing@...hat.com>)
Re: CVE request - Linux kernel - Unix sockets use after free - peer_wait_queue prematurely freed (Mathias Krause <minipli@...glemail.com>)
Re: Re: CVE request: Jenkins remote code execution vulnerability due to unsafe deserialization (Daniel Beck <ml@...kweb.net>)
Re: Fwd: x86 ROP mitigation (Florian Weimer <fweimer@...hat.com>)
Re: CVE request: Jenkins remote code execution vulnerability due to unsafe deserialization (cve-assign@...re.org)
Re: Fwd: x86 ROP mitigation (Bernd Schmidt <bschmidt@...hat.com>)
Re: Re: Fwd: x86 ROP mitigation (Florian Weimer <fweimer@...hat.com>)
Re: CVE request - Linux kernel - Unix sockets use after free - peer_wait_queue prematurely freed (cve-assign@...re.org)
Data on Linux attacks (was Re: Re: Fwd: x86 ROP mitigation) (Josh Bressers <bressers@...hat.com>)
Re: CVE request for vulnerability in OpenStack Glance (cve-assign@...re.org)
Re: Data on Linux attacks (was Re: Re: Fwd: x86 ROP mitigation) (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE request: Jenkins remote code execution vulnerability due to unsafe deserialization (Moritz Bechler <mbechler@...terphace.org>)
Re: Re: Fwd: x86 ROP mitigation (Steve Grubb <sgrubb@...hat.com>)
Re: race condition checking digests/checksums in sudoers (cve-assign@...re.org)
Re: Buffer overflow in libxml2 (cve-assign@...re.org)
Re: Re: Fwd: x86 ROP mitigation (Fabio Pagani <pagabuc@...il.com>)
Re: CVE request for path traversal / info leak bug in Spiffy web server (cve-assign@...re.org)
Re: CVE request for path traversal / info leak bug in Spiffy web server (Peter Bex <peter@...e-magic.net>)
Re: Fwd: x86 ROP mitigation (Jeff Law <law@...hat.com>)
Re: Re: CVE request for vulnerability in OpenStack Glance (Tristan Cacqueray <tdecacqu@...hat.com>)
CVE-2015-7266 ("Zach W." <kestrel@...linux.us>)

November 19 (6 messages)

Re: CVE-2015-7266 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2015-7266 ("Zach W." <kestrel@...linux.us>)
Re: CVE-2015-7266 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2015-7266 (Solar Designer <solar@...nwall.com>)
Re: Fwd: x86 ROP mitigation (Solar Designer <solar@...nwall.com>)
Re: Re: Fwd: x86 ROP mitigation (Jonathan Salwan <jonathan.salwan@...il.com>)

November 20 (9 messages)

Instruction encoding which prevents execution of a suffix (Florian Weimer <fweimer@...hat.com>)
LXDM X authentication issues (Tomas Hoger <thoger@...hat.com>)
CVE Request: Various ("Curesec Research Team (CRT)" <crt@...esec.com>)
seccomp filters without PR_SET_NO_NEW_PRIVS (Florian Weimer <fweimer@...hat.com>)
Re: seccomp filters without PR_SET_NO_NEW_PRIVS (Daniel Micay <danielmicay@...il.com>)
Re: LXDM X authentication issues (cve-assign@...re.org)
CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android (Joe Bowser <bowserj@...il.com>)
CVE-2015-5256: Apache Cordova vulnerable to improper application of whitelist restrictions (Joe Bowser <bowserj@...il.com>)
Re: Re: LXDM X authentication issues (Tomas Hoger <thoger@...hat.com>)

November 21 (2 messages)

Libxml2: Several out of bounds reads (Hanno Böck <hanno@...eck.de>)
CVE request for LightDM - XDMCP denial of service (Yves-Alexis Perez <corsac@...ian.org>)

November 22 (4 messages)

Re: CVE request for LightDM - XDMCP denial of service (cve-assign@...re.org)
Re: CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Libxml2: Several out of bounds reads (cve-assign@...re.org)
Re: CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android (Fried Wil <wilfried.pascault@...il.com>)

November 23 (5 messages)

Re: CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android (cve-assign@...re.org)
CVE request -- linux kernel: Null pointer dereference when mounting ext4 filesystem (Vladis Dronov <vdronov@...hat.com>)
Re: CVE Request: git (Jan Rusnacko <jrusnack@...hat.com>)
CVE-2015-5255: SSRF vulnerability in Apache Flex BlazeDS 4.7.1 ("Christofer Dutz" <cdutz@...che.org>)
Re: CVE request -- linux kernel: Null pointer dereference when mounting ext4 filesystem (cve-assign@...re.org)

November 24 (12 messages)

Re: Instruction encoding which prevents execution of a suffix (Josh Bressers <bressers@...hat.com>)
Re: Instruction encoding which prevents execution of a suffix (Florian Weimer <fweimer@...hat.com>)
Heap Overflow in PCRE (Hanno Böck <hanno@...eck.de>)
Re: Heap Overflow in PCRE (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Heap Overflow in PCRE (Hanno Böck <hanno@...eck.de>)
CVE Request: IPTables-Parse: Use of predictable names for temporary files (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Heap Overflow in PCRE (Fabian Keil <freebsd-listen@...iankeil.de>)
Re: Heap Overflow in PCRE (Hanno Böck <hanno@...eck.de>)
Xen Security Advisory 163 - virtual PMU is unsupported (Xen.org security team <security@....org>)
Re: CVE Request: IPTables-Parse: Use of predictable names for temporary files (cve-assign@...re.org)
CVE request: DoS in ONOS when handling jumbo ethernet frames (David Jorm <david.jorm@...il.com>)
[ANNOUNCE] Django security releases issued (1.7.11, 1.8.7, and 1.9rc2) (Tim Graham <timograham@...il.com>)

November 25 (14 messages)

CVE request: Redmine - information disclosure on the time logging form (Matthias Geerdsen <matthias@...lons.info>)
Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Kurt Seifried <kseifried@...hat.com>)
CVE request Qemu: net: eepro100: infinite loop in processing command block list (P J P <ppandit@...hat.com>)
Re: Heap Overflow in PCRE (Fabian Keil <freebsd-listen@...iankeil.de>)
CVE request: RCE in gitlab-shell 2.6.6-2.6.7 (Jacob Vosmaer <jacob@...lab.com>)
Xen Security Advisory 161 - WITHDRAWN: missing XSETBV intercept privilege check on AMD SVM (Xen.org security team <security@....org>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Reed Loden <reed@...dloden.com>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Kurt Seifried <kseifried@...hat.com>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Hanno Böck <hanno@...eck.de>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request Qemu: net: eepro100: infinite loop in processing command block list (cve-assign@...re.org)
Re: CVE request: Redmine - information disclosure on the time logging form (cve-assign@...re.org)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Gsunde Orangen <gsunde.orangen@...il.com>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Kurt Seifried <kseifried@...hat.com>)

November 26 (3 messages)

Re: CVE request: DoS in ONOS when handling jumbo ethernet frames (Kurt Seifried <kseifried@...hat.com>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Gsunde Orangen <gsunde.orangen@...il.com>)
Stack overflows and out of bounds read in dpkg (Debian) (Hanno Böck <hanno@...eck.de>)

November 27 (4 messages)

CVE-2015-5327 kernel: User triggerable out-of-bounds read (Adam Maris <amaris@...hat.com>)
CVE request: Linux kernel, information disclosure after file truncate on BTRFS (Johannes Segitz <jsegitz@...e.com>)
Re: CVE request: Linux kernel, information disclosure after file truncate on BTRFS (cve-assign@...re.org)
Major outstanding CVE requests (Kurt Seifried <kseifried@...hat.com>)

November 28 (3 messages)

CVE request: XSS to RCE in PHP-Fusion 9 (Brendan Scarvell <bscarvell@....net>)
[RFC] Keychain for GPG, SSH, X.509 etc. (inspired by Split GPG) (Andrey Utkin <andrey.od.utkin@...il.com>)
SQL injection in wordpress plugin double-opt-in-for-download v2.0.8 ("Larry W. Cashdollar" <larry0@...com>)

November 29 (4 messages)

Re: Heap Overflow in PCRE (cve-assign@...re.org)
Re: Re: Heap Overflow in PCRE (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Heap Overflow in PCRE (cve-assign@...re.org)
Re: CVE request: XSS to RCE in PHP-Fusion 9 (cve-assign@...re.org)

November 30 (9 messages)

Re: Re: Heap Overflow in PCRE (Tomas Hoger <thoger@...hat.com>)
CVE-2015-7504 Qemu: net: pcnet: heap overflow vulnerability in loopback mode (P J P <ppandit@...hat.com>)
CVE-2015-7512 Qemu: net: pcnet: buffer overflow in non-loopback mode (P J P <ppandit@...hat.com>)
CVE request for keepassx password database export (Yves-Alexis Perez <corsac@...ian.org>)
Xen Security Advisory 162 (CVE-2015-7504) - heap buffer overflow vulnerability in pcnet emulator (Xen.org security team <security@....org>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Josh Matthews <josh@...udo.com>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Kurt Seifried <kseifried@...hat.com>)
Re: Announcing https://github.com/RedHatProductSecurity/Certificates-Shipped/ (Daniel Micay <danielmicay@...il.com>)
Re: CVE request for keepassx password database export (cve-assign@...re.org)

205 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.