oss-security mailing list - 2016/04

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2016/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 6	² 2	³ 3
⁴ 2	⁵ 5	⁶ 4	⁷ 5	⁸ 16	⁹ 6	¹⁰ 6
¹¹ 7	¹² 8	¹³ 8	¹⁴ 8	¹⁵ 1	¹⁶ 6	¹⁷ 2
¹⁸ 12	¹⁹ 11	²⁰ 11	²¹ 9	²² 2	²³ 4	²⁴ 4
²⁵ 2	²⁶ 2	²⁷ 12	²⁸ 7	²⁹ 8	³⁰ 4

Messages by day:

April 1 (6 messages)

Re: Re: Partial SMAP bypass on 64-bit Linux kernels (P J P <ppandit@...hat.com>)
CVE Request - Multiple remote command injection vulnerabilities in Veil-Evasion RPC (Brian Wallace <bwall9809@...il.com>)
Cross-site request forgery (CSRF) vulnerability in administrate gem (Tute Costa <tute@...ughtbot.com>)
Re: ext4 data corruption due to punch hole races (cve-assign@...re.org)
CVE Request: Squid HTTP Proxy (Amos Jeffries <squid3@...enet.co.nz>)
Re: CVE Request: Squid HTTP Proxy (cve-assign@...re.org)

April 2 (2 messages)

Re: ext4 data corruption due to punch hole races (Yves-Alexis Perez <corsac@...ian.org>)
Re: ext4 data corruption due to punch hole races (Theodore Ts'o <tytso@....edu>)

April 3 (3 messages)

Re: ext4 data corruption due to punch hole races (Ben Hutchings <ben@...adent.org.uk>)
Re: ext4 data corruption due to punch hole races (Theodore Ts'o <tytso@....edu>)
OpenZFS (Linux, FreeBSD, illumos) fails to transmit holes (Kash Pande <kash@...pleback.net>)

April 4 (2 messages)

Re: [security] CVE requests for Drupal contributed modules (from 2016-009 to 2016-014) (David Snopek <dsnopek@...il.com>)
CVE-2016-2191: optipng: invalid write (Hans Jerry Illikainen <hji@...topia.com>)

April 5 (5 messages)

CVE request - Go - DLL loading, Big int (Jason Buberel <jbuberel@...gle.com>)
Re: CVE request - Go - DLL loading, Big int (cve-assign@...re.org)
root escalation from any user on clusters managed with OAR (Vincent Danjean <vdanjean.ml@...e.fr>)
CVE Request - xchat/hexchat doesn't properly verify SSL certificates (Andrej Nemec <anemec@...hat.com>)
CVE request: Remote command execution/XSS vulnerability after login in IPFire's web user interface (Michael Tremer <michael.tremer@...ire.org>)

April 6 (4 messages)

CVE-2016-3672 - Unlimiting the stack not longer disables ASLR (Hector Marco-Gisbert <hecmargi@....es>)
Re: CVE Request - xchat/hexchat doesn't properly verify SSL certificates (cve-assign@...re.org)
Pulp 2.8.2 release for CVE-2016-3095 (Randy Barlow <rbarlow@...hat.com>)
Fwd: CVE Request: Linux: usbnet: memory corruption triggered by invalid USB descriptor (Andrey Konovalov <andreyknvl@...il.com>)

April 7 (5 messages)

CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool (王梅 <wangmei@....cn>)
CVE-2016-3620 libtiff: Out-of-bounds Read in the bmp2tiff tool (王梅 <wangmei@....cn>)
CVE-2016-3621 libtiff: Out-of-bounds Read in the bmp2tiff tool (王梅 <wangmei@....cn>)
CVE-2016-3622 libtiff: Divide By Zero in the tiff2rgba tool (王梅 <wangmei@....cn>)
CVE-2016-3622 libtiff: Divide By Zero in the tiff2rgba tool (张开翔 <zhangkaixiang@....cn>)

April 8 (16 messages)

[CVE-2016-3972]DotCMS Directory traversal vulnerability (xiong piaox <yahoo860201@...il.com>)
[CVE-2016-3971]DotCMS xss vulnerability (xiong piaox <yahoo860201@...il.com>)
CVE-2016-3623 libtiff: Divide By Zero in the rgb2ycbcr tool (王梅 <wangmei@....cn>)
CVE-2016-3624 libtiff: Out-of-bounds Write in the rgb2ycbcr tool (王梅 <wangmei@....cn>)
CVE-2016-3625 libtiff: Out-of-bounds Read in the tiff2bw tool (王梅 <wangmei@....cn>)
CVE-2016-3945 libtiff: Out-of-bounds Write in the tiff2rgba tool (王梅 <wangmei@....cn>)
Re: CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool (王梅 <wangmei@....cn>)
CVE-2016-3632 - libtiff 4.0.6 illegel write (张开翔 <zhangkaixiang@....cn>)
CVE-2016-3631 - libtiff 4.0.6 illegel read (张开翔 <zhangkaixiang@....cn>)
CVE-2016-3633 - libtiff 4.0.6 illegel read (张开翔 <zhangkaixiang@....cn>)
CVE-2016-3658 - libtiff 4.0.6 illegel read (张开翔 <zhangkaixiang@....cn>)
CVE-2016-3634 - libtiff illegel read (张开翔 <zhangkaixiang@....cn>)
CVE Request: systemd / journald created world readable journal files (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: systemd / journald created world readable journal files (cve-assign@...re.org)
Re: CVE-2016-3619 libtiff: Out-of-bounds Read in the bmp2tiff tool (Alan Coopersmith <alan.coopersmith@...cle.com>)

April 9 (6 messages)

CVE-2015-3268: Apache OFBiz information disclosure vulnerability ("jleroux@...che.org" <jleroux@...che.org>)
CVE-2016-2170: Apache OFBiz information disclosure vulnerability ("jleroux@...che.org" <jleroux@...che.org>)
CVE request: imlib2 integer overflow (Matthias Geerdsen <matthias@...lons.info>)
CVE request: cronic - predictable temporary files (Matthias Geerdsen <matthias@...lons.info>)
CVE request: imlib2 - off-by-one OOB read in __imlib_MergeUpdate() (Matthias Geerdsen <matthias@...lons.info>)
CVE request: imlib2 - GIF loader: OOB read (Matthias Geerdsen <matthias@...lons.info>)

April 10 (6 messages)

Re: CVE request: imlib2 integer overflow (cve-assign@...re.org)
Re: CVE request: cronic - predictable temporary files (cve-assign@...re.org)
Re: CVE request: imlib2 - off-by-one OOB read in __imlib_MergeUpdate() (cve-assign@...re.org)
Re: CVE request: imlib2 - GIF loader: OOB read (cve-assign@...re.org)
CVE request: imlib2 - potential divide-by-zero in imlib_image_draw_ellipse(). (Matthias Geerdsen <matthias@...lons.info>)
CVE request: libcrypto++ - Timing Attack Counter Measure (Matthias Geerdsen <matthias@...lons.info>)

April 11 (7 messages)

Re: CVE request: imlib2 - potential divide-by-zero in imlib_image_draw_ellipse (cve-assign@...re.org)
Re: CVE request: libcrypto++ - Timing Attack Counter Measure (cve-assign@...re.org)
Infinite loops parsing malicious DER certificates in libtasn1 4.7 (Pascal Cuoq <cuoq@...st-in-soft.com>)
CVE request: Qemu: net: buffer overflow in stellaris_enet emulator (P J P <ppandit@...hat.com>)
Large amount of uninitialized values in svg parsing and processing (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE Request: Qemu: net: buffer overflow in MIPSnet emulator (P J P <ppandit@...hat.com>)
CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases (Matthias Geerdsen <matthias@...lons.info>)

April 12 (8 messages)

CVE request: Poppler < 0.40.0 (Felipe <felipe.andres.manzano@...il.com>)
CVE-2016-3990 : out-of-bounds write in horizontalDifference8() in tiffcp tool (张开翔 <zhangkaixiang@....cn>)
CVE-2016-3991 : out-of-bounds write in loadImage() in tiffcrop tool (张开翔 <zhangkaixiang@....cn>)
CVE-Request for brltty auth bypass (Sebastian Krahmer <krahmer@...e.com>)
Re: CVE-Request for brltty auth bypass (Dave Mielke <dave@...lke.cc>)
Re: CVE request: Qemu: net: buffer overflow in stellaris_enet emulator (cve-assign@...re.org)
Re: CVE Request: Qemu: net: buffer overflow in MIPSnet emulator (cve-assign@...re.org)
39 XSS vulnerabilities in 35 wordpress plugins. ("Larry W. Cashdollar" <larry0@...com>)

April 13 (8 messages)

CVE Request: Linux kernel: incorrect restoration of machine specific registers from signal handler. (Wade Mealing <wmealing@...hat.com>)
Re: 39 XSS vulnerabilities in 35 wordpress plugins. ("Larry W. Cashdollar" <larry0@...com>)
Re: Infinite loops parsing malicious DER certificates in libtasn1 4.7 (cve-assign@...re.org)
Re: CVE-Request for brltty auth bypass (cve-assign@...re.org)
Re: CVE Request: Linux kernel: incorrect restoration of machine specific registers from signal handler. (cve-assign@...re.org)
CVE request Qemu: i386: leakage of stack memory to guest in kvmvapic.c (P J P <ppandit@...hat.com>)
CVE for nodejs node-uuid (Kurt Seifried <kseifried@...hat.com>)
Re: CVE for nodejs node-uuid (cve-assign@...re.org)

April 14 (8 messages)

CVE request:SQL injection in TeamPass (das das <scusec2010@...il.com>)
Xen Security Advisory 174 (CVE-2016-3961) - hugetlbfs use may crash PV Linux guests (Xen.org security team <security@....org>)
Re: CVE request Qemu: i386: leakage of stack memory to guest in kvmvapic.c (cve-assign@...re.org)
Re: 39 XSS vulnerabilities in 35 wordpress plugins. ("Larry W. Cashdollar" <larry0@...com>)
CVE Request: imlib2: integer overflow resulting in insufficient heap allocation (Salvatore Bonaccorso <carnil@...ian.org>)
CVE request: OpenCart 2.1.0.2 to 2.2.0.0 - json_decode Function Remote Code Execution (Naser Farhadi <n4ser.farhadi@...il.com>)
Re: CVE request: OpenCart 2.1.0.2 to 2.2.0.0 - json_decode Function Remote Code Execution (Naser Farhadi <n4ser.farhadi@...il.com>)
Re: CVE Request: imlib2: integer overflow resulting in insufficient heap allocation (cve-assign@...re.org)

April 15 (1 message)

CVE request - Pulp < 2.3.0 shipped the same authentication CA key/cert to all users (Randy Barlow <rbarlow@...hat.com>)

April 16 (6 messages)

CVE request: Varnish 3 before 3.0.7 was vulnerable to HTTP Smuggling issues: Double Content Length and bad EOL (Régis Leroy <regis.leroy@...il.com>)
Unauthenticated XSS Vulnerability in kento-post-view-counter Wordpress Plugin 2.8 (shravan kumar <cor3sm4sh3r@...il.com>)
CSRF and Stored XSS in Kento post viewer counter wordpress Plugin 2.8 (shravan kumar <cor3sm4sh3r@...il.com>)
CSRF and Stored XSS in a WORDPRESS Plugin LeenkMe version 2.5.0. (shravan kumar <cor3sm4sh3r@...il.com>)
Reflected XSS Vulnerability in Wordpress Custom-metas plugin 1.5.1 (shravan kumar <cor3sm4sh3r@...il.com>)
Unauthenticated XSS Vulnerability in WORDPRESS FAQ WD plugin 1.0.14. (shravan kumar <cor3sm4sh3r@...il.com>)

April 17 (2 messages)

Re: CVE Request: cpio -- directory traversal (none <ytrezq@...-eu.org>)
CVE request - samsumg android phone msm_sensor_config function write some range kernel address with any value (Berry <throber3@...il.com>)

April 18 (12 messages)

Re: CVE request: Varnish 3 before 3.0.7 was vulnerable to HTTP Smuggling issues: Double Content Length and bad EOL (Sébastien Delafond <seb@...ian.org>)
CVE request: GnuPG classic & GnuPG modern ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process (P J P <ppandit@...hat.com>)
Xen Security Advisory 173 (CVE-2016-3960) - x86 shadow pagetables: address width overflow (Xen.org security team <security@....org>)
Re: CVE request - Pulp < 2.3.0 shipped the same authentication CA key/cert to all users (cve-assign@...re.org)
Re: Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process (cve-assign@...re.org)
Re: CVE request: Varnish 3 before 3.0.7 was vulnerable to HTTP Smuggling issues: Double Content Length and bad EOL (cve-assign@...re.org)
Re: CVE request - samsumg android phone msm_sensor_config function write some range kernel address with any value (cve-assign@...re.org)
Re: CVE request: GnuPG classic & GnuPG modern ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: CVE request - Pulp < 2.3.0 shipped the same authentication CA key/cert to all users (Randy Barlow <rbarlow@...hat.com>)
CVE-2013-7450: Pulp < 2.3.0 distributed the same CA key to all users (Randy Barlow <rbarlow@...hat.com>)
CVE request: opam - missing certificate validation (Matthias Geerdsen <matthias@...lons.info>)

April 19 (11 messages)

CVE Request: Linux kernel: remote buffer overflow in usbip (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: Linux kernel: remote buffer overflow in usbip (P J P <ppandit@...hat.com>)
CVE Request: Insecure Direct Object Reference in OSTicket attachments (Fábio Pires <mail@...iopires.pt>)
Re: CVE Request: imlib2: integer overflow resulting in insufficient heap allocation (Loganaden Velvindron <loganaden@...il.com>)
Re: CVE Request: Linux kernel: remote buffer overflow in usbip (Greg KH <greg@...ah.com>)
Re: CVE Request: Linux kernel: remote buffer overflow in usbip (Ignat Korchagin <ignat.korchagin@...il.com>)
CVE Request: Stored Cross-Site Scripting in TYPO3 Bookmarks (Filipe Reis <fr@...egrity.pt>)
CVE Request: Privilege escalation in webdav (Nathan Van Gheem <vangheem@...il.com>)
CVE Request: Unauthorized disclosure of site content (Nathan Van Gheem <vangheem@...il.com>)
CVE Request: Bypass Restricted Python (Nathan Van Gheem <vangheem@...il.com>)
Re: CVE Request: Privilege escalation in webdav (Nathan Van Gheem <vangheem@...il.com>)

April 20 (11 messages)

Re: CVE Request: Privilege escalation in webdav - Plone (cve-assign@...re.org)
Re: CVE Request: Unauthorized disclosure of site content - Plone (cve-assign@...re.org)
Re: CVE Request: Bypass Restricted Python - Plone (cve-assign@...re.org)
Re: CVE request: opam - missing certificate validation (cve-assign@...re.org)
CVE Request: perl: denial-of-service / Regexp-matching "hangs" indefinitely on illegal input using binmode :utf8 using … (Salvatore Bonaccorso <carnil@...ian.org…)
CVE Request: Squid HTTP Caching Proxy multiple issues (Amos Jeffries <squid3@...enet.co.nz>)
Re: CVE Request: perl: denial-of-service / Regexp-matching "hangs" indefinitely on illegal input using binmode :utf8 using 100%CPU (cve-assign@...re.org)
CVE-2016-3693: Foreman application information leakage through templates (Dominic Cleal <dominic@...al.org>)
Re: CVE Request: Squid HTTP Caching Proxy multiple issues (cve-assign@...re.org)
CVE-2016-3694 modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection (Felix Maduakor <Felix.Maduakor@...r-uni-bochum.de>)
various vulnerabilities in Node.js packages (cve-assign@...re.org)

April 21 (9 messages)

Re: CVE Request: Stored Cross-Site Scripting in TYPO3 Bookmarks (cve-assign@...re.org)
Wordpress iThemes Security (Better WP Security) Insecure Backup/Logfile Generation (access rights) (Sysdream Labs <labs@...dream.com>)
Wordpress iThemes Security (Better WP Security) Insecure Backup/Logfile Generation (predicatable filename) (Sysdream Labs <labs@...dream.com>)
Re: CVE request: GnuPG classic & GnuPG modern (cve-assign@...re.org)
list mail bounces; libtiff (Solar Designer <solar@...nwall.com>)
CVE-2016-3074: libgd: signedness vulnerability (Hans Jerry Illikainen <hji@...topia.com>)
Re: CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: s/party/hack like it's 1999 (Jakub Wilk <jwilk@...lk.net>)

April 22 (2 messages)

CVE Request - XXE in Pentaho Business Analytics 6.0.1.0.386 (Brendan Scarvell <bscarvell@....net>)
Re: s/party/hack like it's 1999 (Solar Designer <solar@...nwall.com>)

April 23 (4 messages)

CVE Request: jq: heap buffer overflow in tokenadd() function (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE Request: jq: heap buffer overflow in tokenadd() function (cve-assign@...re.org)
CVE Request: Roundcube: XSS issue in SVG image handling and protection for download urs against CSRF (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE Request: Roundcube: XSS issue in SVG image handling and protection for download urs against CSRF (cve-assign@...re.org)

April 24 (4 messages)

Re: CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases (cve-assign@...re.org)
Re: CVE request: Poppler < 0.40.0 (cve-assign@...re.org)
CVE Request: jq: stack exhaustion using jv_dump_term() function (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE Request: jq: stack exhaustion using jv_dump_term() function (cve-assign@...re.org)

April 25 (2 messages)

CVE requests: Multiple Wireshark vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE requests: Multiple Wireshark vulnerabilities (cve-assign@...re.org)

April 26 (2 messages)

CVE Request: vtun: denial-of-service: high CPU usage after SIGHUP (Salvatore Bonaccorso <carnil@...ian.org>)
CVE Request: Insecure Direct Object Reference in OSTicket (last versions availablle) (Fábio Pires <fp@...egrity.pt>)

April 27 (12 messages)

CVE-2016-0723: Linux kernel: Kernel memory disclosure. (Wade Mealing <wmealing@...hat.com>)
CVE Request: Out-of-bands write issue found in qemu (李强 <liqiang6-s@....cn>)
3 bugs refer to buffer overflow in in libtiff 4.0.6 ("PXO炳林" <271193918@...com>)
Re: 3 bugs refer to buffer overflow in in libtiff 4.0.6 (Jodie Cunningham <jodie.cunningham@...il.com>)
Re: CVE Request: Out-of-bands write issue found in qemu (P J P <ppandit@...hat.com>)
回复： 3 bugs refer to buffer overflow in in libtiff 4.0.6 ("PXO炳林" <271193918@...com>)
CVE-2016-4049: Denial of Service Vulnerability in Quagga BGP Routing Daemon (bgpd) (Evgeny Uskov <eu@...tor.net>)
CVE-2015-5207 - Bypass of Access Restrictions in Apache Cordova iOS (Tony Homer <ajh158@...il.com>)
CVE-2015-5208 - Arbitrary plugin execution issue in Apache Cordova iOS (Tony Homer <tony--@...che.org>)
CVE-2015-5207 - Bypass of Access Restrictions in Apache Cordova iOS (Tony Homer <tony--@...che.org>)
Re: 3 bugs refer to buffer overflow in in libtiff 4.0.6 (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: CVE Request: vtun: denial-of-service: high CPU usage after SIGHUP (cve-assign@...re.org)

April 28 (7 messages)

CVE-2016-3078: php: integer overflow in ZipArchive::getFrom* (Hans Jerry Illikainen <hji@...topia.com>)
[CVE Requests] PHP issues (Luật Nguyễn <manhluat93.php@...il.com>)
Re: CVE request:SQL injection in TeamPass (das das <scusec2010@...il.com>)
CVE requests: DoS in librsvg parsing SVGs with circular definitions (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request:SQL injection in TeamPass (Solar Designer <solar@...nwall.com>)
Re: [CVE Requests] PHP issues (cve-assign@...re.org)
Re: CVE requests: DoS in librsvg parsing SVGs with circular definitions (cve-assign@...re.org)

April 29 (8 messages)

buffer overflow and information leak in OCaml < 4.03.0 (Pascal Cuoq <cuoq@...st-in-soft.com>)
CVE Request - Multiple vulnerabilities in Activiti Explorer (Brendan Scarvell <bscarvell@....net>)
CVE request: Mplayer/Mencoder integer overflow parsing gif files (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: Mplayer/Mencoder integer overflow parsing gif files (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE request: three issues in libksba (Martin Prpic <mprpic@...hat.com>)
Re: buffer overflow and information leak in OCaml < 4.03.0 (cve-assign@...re.org)
Re: CVE request: Mplayer/Mencoder integer overflow parsing gif files (cve-assign@...re.org)
Re: CVE request: three issues in libksba (cve-assign@...re.org)

April 30 (4 messages)

Re: CVE Request: vtun: denial-of-service: high CPU usage after SIGHUP (Salvatore Bonaccorso <carnil@...ian.org>)
CVE request - Quassel IRC denial of service (Bas Pape <baspape@...il.com>)
Re: CVE requests: DoS in librsvg parsing SVGs with circular definitions (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request - Quassel IRC denial of service (cve-assign@...re.org)

183 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.