oss-security mailing list - 2016/10

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2016/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 7	² 4
³ 7	⁴ 9	⁵ 21	⁶ 8	⁷ 6	⁸ 18	⁹ 1
¹⁰ 15	¹¹ 9	¹² 10	¹³ 12	¹⁴ 10	¹⁵ 9	¹⁶ 22
¹⁷ 4	¹⁸ 15	¹⁹ 12	²⁰ 9	²¹ 7	²² 2	²³ 9
²⁴ 6	²⁵ 12	²⁶ 11	²⁷ 18	²⁸ 4	²⁹	³⁰ 13
³¹ 4

Messages by day:

October 1 (7 messages)

Re: CVE request: pacemaker DoS when pacemaker remote is in use (cve-assign@...re.org)
Re: CVE Request - Ruby OpenSSL Library - IV Reuse in GCM Mode (cve-assign@...re.org)
CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)
imagemagick mogrify global buffer overflow (Marco Grassi <marco.gra@...il.com>)
GraphicsMagick CVE request: 8BIM/8BIMW unsigned underflow leads to heap overflow (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: imagemagick mogrify global buffer overflow (cve-assign@...re.org)
Re: GraphicsMagick CVE request: 8BIM/8BIMW unsigned underflow leads to heap overflow (cve-assign@...re.org)

October 2 (4 messages)

imagemagick mogrify use after free (Marco Grassi <marco.gra@...il.com>)
cJSON buffer out of bound read (Marco Grassi <marco.gra@...il.com>)
Re: imagemagick mogrify use after free (cve-assign@...re.org)
NSPR 4.12, NSS 3.22.1 and PR_GetEnvSecure (Florian Weimer <fw@...eb.enyo.de>)

October 3 (7 messages)

CVE request Qemu: net: inifinte loop in imx_fec_do_tx() function (P J P <ppandit@...hat.com>)
CVE request Qemu: net: Infinite loop in mcf_fec_do_tx (P J P <ppandit@...hat.com>)
CVE Request Qemu: net: pcnet: infinite loop in pcnet_rdra_addr (P J P <ppandit@...hat.com>)
Re: CVE request Qemu: net: inifinte loop in imx_fec_do_tx() function (cve-assign@...re.org)
Re: CVE request Qemu: net: Infinite loop in mcf_fec_do_tx (cve-assign@...re.org)
Re: CVE Request Qemu: net: pcnet: infinite loop in pcnet_rdra_addr (cve-assign@...re.org)
CVE-2016-1246: Buffer overflow in DBD-mysql error reporting (Perl DBI module) (Florian Weimer <fw@...eb.enyo.de>)

October 4 (9 messages)

Xen Security Advisory 190 (CVE-2016-7777) - CR0.TS and CR0.EM not always honored for x86 HVM guests (Xen.org security team <security@....org>)
X.Org security advisory: Protocol handling issues in X Window System client libraries (Matthieu Herrb <matthieu.herrb@...s.fr>)
Re: X.Org security advisory: Protocol handling issues in X Window System client libraries (Marcus Meissner <meissner@...e.de>)
Re: X.Org security advisory: Protocol handling issues in X Window System client libraries (cve-assign@...re.org)
CVE Request (Steve Richert <steve@...lectiveidea.com>)
CVE request for code execution via gem name collission in bundler (was Re: CVE Request) (Hanno Böck <hanno@...eck.de>)
Re: CVE request for code execution via gem name collission in bundler (was Re: CVE Request) (cve-assign@...re.org)
KMail vulnerabilites: need 3 CVE (Albert Astals Cid <aacid@....org>)
Handful of libass issues (Brandon Perry <bperry.volatile@...il.com>)

October 5 (21 messages)

Re: KMail vulnerabilites: need 3 CVE (cve-assign@...re.org)
Re: Handful of libass issues (cve-assign@...re.org)
Re: Re: CVE request for code execution via gem name collission in bundler (was Re: CVE Request) (Reed Loden <reed@...dloden.com>)
Re: openjpeg CVE-2016-3181, CVE-2016-3182 .. and CVE-2013-6045 (Raphael Geissert <geissert@...ian.org>)
CVE-2016-7903: Dotclear <= 2.10.2 Password Reset Address Spoof ("Hongkun Zeng" <hongkun.zeng@...ppsecurity.com.cn>)
CVE-2016-7902: Dotclear <= 2.10.2 (Media Manager) Unrestricted File Upload ("Hongkun Zeng" <hongkun.zeng@...ppsecurity.com.cn>)
CVE Request - multiple ghostscript -dSAFER sandbox problems (Tavis Ormandy <taviso@...gle.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Hanno Böck <hanno@...eck.de>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Tavis Ormandy <taviso@...gle.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Tavis Ormandy <taviso@...gle.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Tavis Ormandy <taviso@...gle.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Hanno Böck <hanno@...eck.de>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Hanno Böck <hanno@...eck.de>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (cve-assign@...re.org)
CVE request: sunxi-debug (root privilege escalation in Allwinner kernel) (David Manouchehri <david.manouchehri@...eup.net>)
SPIP vulnerabilities: request for 5 CVE (Sysdream Labs <labs@...dream.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Jakub Wilk <jwilk@...lk.net>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Tavis Ormandy <taviso@...gle.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Florian Weimer <fw@...eb.enyo.de>)
Re: NSPR 4.12, NSS 3.22.1 and PR_GetEnvSecure (Florian Weimer <fw@...eb.enyo.de>)

October 6 (8 messages)

librsvg and cairo are causing libpng to write out-of-bounds (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE request: openjpeg: incorrect fix for CVE-2013-6045 (was Re: openjpeg CVE-2016-3181, CVE-2016-3182 .. and CVE-2013-6045) (Doran Moppert <dmoppert@...hat.com>)
Re: CVE request: openjpeg: incorrect fix for CVE-2013-6045 (was Re: openjpeg CVE-2016-3181, CVE-2016-3182 .. and CVE-2013-6… (Doran Moppert <dmoppert@...hat.com>)
[SECURITY] CVE-2016-6808 Apache Tomcat JK ISAPI Connector buffer overflow (Mark Thomas <markt@...che.org>)
CVE request: DoS loading a SVG in Firefox (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: SPIP vulnerabilities: request for 5 CVE (cve-assign@...re.org)
Re: librsvg and cairo are causing libpng to write out-of-bounds (Glenn Randers-Pehrson <glennrp@...il.com>)
[OSSA 2016-012] Malicious qemu-img input may exhaust resources in Cinder, Glance, Nova (CVE-2015-5162) (Jeremy Stanley <fungi@...goth.org>)

October 7 (6 messages)

Re: librsvg and cairo are causing libpng to write out-of-bounds (John Bowler <john.cunningham.bowler@...il.com>)
CVE request Qemu virtio-gpu: memory leak in virtio_gpu_resource_create_2d (P J P <ppandit@...hat.com>)
CVE request Qemu: usb: hcd-ehci: memory leak in ehci_process_itd (P J P <ppandit@...hat.com>)
GraphicsMagick CVE Request - WPG Reader Issues (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: SPIP vulnerabilities: request for 5 CVE (Sysdream Labs <labs@...dream.com>)
Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME (Chet Ramey <chet.ramey@...e.edu>)

October 8 (18 messages)

ffmpeg before 3.1.4 [CVE-2016-7562] [CVE-2016-7122] [CVE-2016-7450] [CVE-2016-7502] [CVE-2016-7555] [CVE-2016-7785] [CVE-2016-7905… (连一汉 <lianyihan@....cn>)
CVE request: invalid memory accesses parsing object files in libgit2 (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request Qemu virtio-gpu: memory leak in virtio_gpu_resource_create_2d (cve-assign@...re.org)
Re: CVE request Qemu: usb: hcd-ehci: memory leak in ehci_process_itd (cve-assign@...re.org)
Re: GraphicsMagick CVE Request - WPG Reader Issues (cve-assign@...re.org)
Re: SPIP vulnerabilities: request for 5 CVE (cve-assign@...re.org)
Re: CVE request: invalid memory accesses parsing object files in libgit2 (cve-assign@...re.org)
libav: null pointer dereference in get_vlc2 (get_bits.h) (Agostino Sarubbo <ago@...too.org>)
imagemagick: memory allocate failure in AcquireQuantumPixels (quantum.c) (Agostino Sarubbo <ago@...too.org>)
imagemagick: heap-based buffer overflow in IsPixelMonochrome (pixel-accessor.h) (Agostino Sarubbo <ago@...too.org>)
libdwarf: heap-based buffer overflow in _dwarf_get_size_of_val (dwarf_util.c) (Agostino Sarubbo <ago@...too.org>)
libdwarf: heap-based buffer overflow in _dwarf_get_abbrev_for_code (dwarf_util.c) (Agostino Sarubbo <ago@...too.org>)
libdwarf: heap-based buffer overflow in _dwarf_get_abbrev_for_code (dwarf_util.c) (ANOTHER ONE) (Agostino Sarubbo <ago@...too.org>)
graphicsmagick: stack-based buffer overflow in ReadSCTImage (sct.c) (Agostino Sarubbo <ago@...too.org>)
graphicsmagick: memory allocation failure in ReadPCXImage (pcx.c) (Agostino Sarubbo <ago@...too.org>)
graphicsmagick: memory allocation failure in MagickMalloc (memory.c) (Agostino Sarubbo <ago@...too.org>)
potrace: invalid memory access in findnext (decompose.c) (Agostino Sarubbo <ago@...too.org>)
potrace: memory allocation failure (Agostino Sarubbo <ago@...too.org>)

October 9 (1 message)

Re: potrace: memory allocation failure (Marcus Meissner <meissner@...e.de>)

October 10 (15 messages)

Re: potrace: memory allocation failure (Agostino Sarubbo <ago@...too.org>)
CVE-2016-5425 - Apache Tomcat packaging on RedHat-based distros - Root Privilege Escalation (affecting CentOS, Fedora, … (Dawid Golunski <dawid@...alhackers.com>)
RE: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME (Sona Sarmadi <sona.sarmadi@...a.com>)
Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME (Agostino Sarubbo <ago@...too.org>)
CVE request Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch (P J P <ppandit@...hat.com>)
CVE request: Qemu: 9pfs: host memory leakage in v9fs_read (P J P <ppandit@...hat.com>)
CVE request Qemu: 9pfs: potential NULL dereferencein 9pfs routines (P J P <ppandit@...hat.com>)
fd.o #98157: dbus format string vulnerability fixed in 1.10.12 (Simon McVittie <smcv@...ian.org>)
Re: fd.o #98157: dbus format string vulnerability fixed in 1.10.12 (Szabolcs Nagy <nsz@...t70.net>)
Re: fd.o #98157: dbus format string vulnerability fixed in 1.10.12 (Simon McVittie <smcv@...ian.org>)
Re: CVE request Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch (cve-assign@...re.org)
Re: CVE request: Qemu: 9pfs: host memory leakage in v9fs_read (cve-assign@...re.org)
Re: CVE request Qemu: 9pfs: potential NULL dereferencein 9pfs routines (cve-assign@...re.org)
CVE-2016-7039 Kernel: net: unbounded recursion in the vlan GRO processing (P J P <ppandit@...hat.com>)

October 11 (9 messages)

CVE request: GNU Guile <= 2.0.12: Thread-unsafe umask modification (ludo@....org (Ludovic Courtès))
linux kernel do_blockdev_direct_IO invalid memory access (Marco Grassi <marco.gra@...il.com>)
Re: linux kernel do_blockdev_direct_IO invalid memory access (Greg KH <greg@...ah.com>)
Re: linux kernel do_blockdev_direct_IO invalid memory access (Greg KH <greg@...ah.com>)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Tavis Ormandy <taviso@...gle.com>)
Re: linux kernel do_blockdev_direct_IO invalid memory access (cve-assign@...re.org)
Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (cve-assign@...re.org)
Re: CVE-2016-7039 Kernel: net: unbounded recursion in the vlan GRO processing (P J P <ppandit@...hat.com>)
CVE request: GNU Guile <= 2.0.12: REPL server vulnerable to HTTP inter-protocol attacks (ludo@....org (Ludovic Courtès))

October 12 (10 messages)

Re: CVE request: GNU Guile <= 2.0.12: Thread-unsafe umask modification (cve-assign@...re.org)
Re: CVE request: GNU Guile <= 2.0.12: REPL server vulnerable to HTTP inter-protocol attacks (cve-assign@...re.org)
Re: Re: linux kernel do_blockdev_direct_IO invalid memory access (Greg KH <greg@...ah.com>)
CVE Request -- Broadcom Wifi Driver Brcmfmac brcmf_cfg80211_start_ap Buffer Overflow (freener <freener.gdx@...il.com>)
bubblewrap LPE (Sebastian Krahmer <krahmer@...e.com>)
CVE-2016-7980: SPIP 3.1.2 Exec Code Cross-Site Request Forgery (Sysdream Labs <labs@...dream.com>)
CVE-2016-7981: SPIP 3.1.2 Reflected Cross-Site Scripting (Sysdream Labs <labs@...dream.com>)
CVE-2016-7982: SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal (Sysdream Labs <labs@...dream.com>)
CVE-2016-7998: SPIP 3.1.2 Template Compiler/Composer PHP Code Execution (Sysdream Labs <labs@...dream.com>)
CVE-2016-7999: SPIP 3.1.2 Server Side Request Forgery (Sysdream Labs <labs@...dream.com>)

October 13 (12 messages)

Re: CVE Request -- Broadcom Wifi Driver Brcmfmac brcmf_cfg80211_start_ap Buffer Overflow (freener <freener.gdx@...il.com>)
Re: bubblewrap LPE (cve-assign@...re.org)
Re: CVE Request -- Broadcom Wifi Driver Brcmfmac brcmf_cfg80211_start_ap Buffer Overflow (cve-assign@...re.org)
Re: bubblewrap LPE (Simon McVittie <smcv@...ian.org>)
kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (Vladis Dronov <vdronov@...hat.com>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (Greg KH <greg@...ah.com>)
Re: cve request: systemd-machined: information exposure for docker containers (CAI Qian <caiqian@...hat.com>)
CVE request: kernel - local DoS due to a page lock order bug in the XFS seek hole/data implementation (CAI Qian <caiqian@...hat.com>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (Vladis Dronov <vdronov@...hat.com>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (John Haxby <john.haxby@...cle.com>)
CVE Request: another recursion in GRE (Marcus Meissner <meissner@...e.de>)
Re: CVE request: kernel - local DoS due to a page lock order bug in the XFS seek hole/data implementation (cve-assign@...re.org)

October 14 (10 messages)

docker2aci: infinite loop in deps walking(CVE-2016-8579) (张开翔 <zhangkaixiang@....cn>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (P J P <ppandit@...hat.com>)
Re: CVE Request: another recursion in GRE (cve-assign@...re.org)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (John Haxby <john.haxby@...cle.com>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (Petr Matousek <pmatouse@...hat.com>)
CVE request Qemu: dma: rc4030 divide by zero error in set_next_tick (P J P <ppandit@...hat.com>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (Petr Matousek <pmatouse@...hat.com>)
CVE request Qemu: net: OOB buffer access in rocker switch emulation (P J P <ppandit@...hat.com>)
CVE request Qemu: char: divide by zero error in serial_update_parameters (P J P <ppandit@...hat.com>)
Re: kernel: Stack corruption while reading /proc/keys (CVE-2016-7042) (John Haxby <john.haxby@...cle.com>)

October 15 (9 messages)

CVE Request: libgd: Stack Buffer Overflow in GD dynamicGetbuf (Salvatore Bonaccorso <carnil@...ian.org>)
Update on MatrixSSL miscalculation (incomplete fix for CVE-2016-6887) (Hanno Böck <hanno@...eck.de>)
Re: [SECURITY ADVISORY] c-ares: single byte out of buffer write (Solar Designer <solar@...nwall.com>)
Re: CVE request Qemu: dma: rc4030 divide by zero error in set_next_tick (cve-assign@...re.org)
Re: CVE request Qemu: char: divide by zero error in serial_update_parameters (cve-assign@...re.org)
Re: CVE Request: libgd: Stack Buffer Overflow in GD dynamicGetbuf (cve-assign@...re.org)
dcraw and CVE-2015-8366 + CVE-2015-8367 (Ben Woods <woodsb02@...il.com>)
Re: Update on MatrixSSL miscalculation (incomplete fix for CVE-2016-6887) (cve-assign@...re.org)
Re: CVE request Qemu: net: OOB buffer access in rocker switch emulation (cve-assign@...re.org)

October 16 (22 messages)

Re: imagemagick: memory allocate failure in AcquireQuantumPixels (quantum.c) (cve-assign@...re.org)
Re: imagemagick: heap-based buffer overflow in IsPixelMonochrome (pixel-accessor.h) (cve-assign@...re.org)
Re: libdwarf: heap-based buffer overflow in _dwarf_get_size_of_val (dwarf_util.c) (cve-assign@...re.org)
Re: libdwarf: heap-based buffer overflow in _dwarf_get_abbrev_for_code (dwarf_util.c) (cve-assign@...re.org)
Re: libdwarf: heap-based buffer overflow in _dwarf_get_abbrev_for_code (dwarf_util.c) (ANOTHER ONE) (cve-assign@...re.org)
Re: graphicsmagick: stack-based buffer overflow in ReadSCTImage (sct.c) (cve-assign@...re.org)
Re: graphicsmagick: memory allocation failure in ReadPCXImage (pcx.c) (cve-assign@...re.org)
Re: mupdf: use-after-free in pdf_to_num (pdf-object.c) (cve-assign@...re.org)
Re: potrace: invalid memory access in findnext (decompose.c) (cve-assign@...re.org)
Re: potrace: memory allocation failure (cve-assign@...re.org)
Re: Libarchive/bsdtar: multiple crashes (cve-assign@...re.org)
Re: potrace: multiple crashes (cve-assign@...re.org)
Re: libav: null pointer dereference in get_vlc2 (get_bits.h) (cve-assign@...re.org)
Re: Fuzzing jasper (cve-assign@...re.org)
Re: graphicsmagick: memory allocation failure in MagickMalloc (memory.c) (cve-assign@...re.org)
Re: Re: Fuzzing jasper (Agostino Sarubbo <ago@...too.org>)
Re: Fuzzing jasper (Agostino Sarubbo <ago@...too.org>)
Re: Re: Fuzzing jasper (Graham Christensen <graham@...hamc.com>)
mupdf: mujstest: global-buffer-overflow in my_getline (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)
mupdf: mujstest: global-buffer-overflow in main (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)
mupdf: mujstest: strcpy-param-overlap in main (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)
Re: Re: Fuzzing jasper (Hanno Böck <hanno@...eck.de>)

October 17 (4 messages)

Re: Re: Fuzzing jasper (Agostino Sarubbo <ago@...too.org>)
Re: potrace: invalid memory access in findnext (decompose.c) (Johannes Segitz <jsegitz@...e.com>)
Re: potrace: invalid memory access in findnext (decompose.c) (Agostino Sarubbo <ago@...too.org>)
imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (Agostino Sarubbo <ago@...too.org>)

October 18 (15 messages)

CVE assignment for PHP 5.6.27 and 7.0.12 (Lior Kaplan <kaplanlior@...il.com>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (Adam Maris <amaris@...hat.com>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (Lior Kaplan <kaplanlior@...il.com>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (Remi Collet <remi@...oraproject.org>)
jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690) (Agostino Sarubbo <ago@...too.org>)
jasper: memory allocation failure in jas_malloc (jas_malloc.c) (Agostino Sarubbo <ago@...too.org>)
jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (Agostino Sarubbo <ago@...too.org>)
snzip: memory allocation failure in work_buffer_resize (snzip.c) (Agostino Sarubbo <ago@...too.org>)
libwmf: memory allocation failure in wmf_malloc (api.c) (Agostino Sarubbo <ago@...too.org>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (cve-assign@...re.org)
CVE request for tor (Moritz Muehlenhoff <jmm@...ian.org>)
veracrypt security fixes in 1.19 (Christian Rebischke <Chris.Rebischke@...hlinux.org>)
Re: Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day ) (Gsunde Orangen <gsunde.orangen@...il.com>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (Emmanuel Law <emmanuel.law@...il.com>)

October 19 (12 messages)

CVE Request - TRE & musl libc regex integer overflows in buffer size computations (Rich Felker <dalias@...c.org>)
Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack (cve-assign@...re.org)
CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH (石磊 <shilei-c@....cn>)
Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day ) (Dawid Golunski <dawid@...alhackers.com>)
Re: Re: CVE Request - multiple ghostscript -dSAFER sandbox problems (Cedric Buissart <cbuissar@...hat.com>)
Re: Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack ("Seaman, Chad" <cseaman@...mai.com>)
Re: Re: CVE Request: IKEv1 protocol is vulnerable to DoS amplification attack ("Seaman, Chad" <cseaman@...mai.com>)
Re: CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH (cve-assign@...re.org)
Re: CVE Request - TRE & musl libc regex integer overflows in buffer size computations (cve-assign@...re.org)
Re: CVE request for tor (cve-assign@...re.org)
Re: CVE Request - TRE & musl libc regex integer overflows in buffer size computations (Rich Felker <dalias@...c.org>)

October 20 (9 messages)

Re: Re: CVE Request: OpenSSH: Memory exhaustion issue found in OpenSSH (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (cve-assign@...re.org)
imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862) (Agostino Sarubbo <ago@...too.org>)
Re: imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862) (Marcus Meissner <meissner@...e.de>)
jasper: NULL pointer dereference in jpc_tsfb_synthesize (jpc_tsfb.c) (Agostino Sarubbo <ago@...too.org>)
Re: CVE Request - Portable UPnP SDK 1.6.19 through 1.8.x (cve-assign@...re.org)
CVE-2016-2848 has been disclosed. (Michael McNally <mcnally@....org>)
Re: CVE-2016-2848 has been disclosed. (Florian Weimer <fw@...eb.enyo.de>)
CVE request - textract 1.4.0 - OS Command Injection (Pierre Ernst <pernst@...esforce.com>)

October 21 (7 messages)

CVE-2016-5195 "Dirty COW" Linux kernel privilege escalation vulnerability (Solar Designer <solar@...nwall.com>)
Requesting membership to linux-distros (Alex Crawford <alex.crawford@...eos.com>)
Re: Requesting membership to linux-distros (Kurt Seifried <kseifried@...hat.com>)
Re: Requesting membership to linux-distros (Alex Crawford <alex.crawford@...eos.com>)
Re: imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862) (cve-assign@...re.org)
Re: potrace: memory allocation failure (Agostino Sarubbo <ago@...too.org>)
Re: Requesting membership to linux-distros (Kurt Seifried <kseifried@...hat.com>)

October 22 (2 messages)

Re: Requesting membership to linux-distros (Alex Crawford <alex.crawford@...eos.com>)
Addition to linux-distros for Arch Linux (Allan McRae <allan@...hlinux.org>)

October 23 (9 messages)

Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690) (cve-assign@...re.org)
Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c) (cve-assign@...re.org)
Re: jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (cve-assign@...re.org)
Re: Fuzzing jasper (cve-assign@...re.org)
Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690) (Agostino Sarubbo <ago@...too.org>)
jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887) (Agostino Sarubbo <ago@...too.org>)
jasper: heap-based buffer overflow in jpc_dec_tiledecode (jpc_dec.c) (Agostino Sarubbo <ago@...too.org>)
Re: Fuzzing jasper (cve-assign@...re.org)
Re: jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690) (cve-assign@...re.org)

October 24 (6 messages)

CVE request Qemu: audio: intel-hda: infinite loop in processing dma buffer stream (P J P <ppandit@...hat.com>)
CVE request Qemu: net: rtl8139: infinite loop while transmit in C+ mode (P J P <ppandit@...hat.com>)
CVE-2016-8610: SSL Death Alert: OpenSSL SSL/TLS SSL3_AL_WARNING undefined alert Remote DoS (石磊 <shilei-c@....cn>)
Re: CVE request Qemu: audio: intel-hda: infinite loop in processing dma buffer stream (cve-assign@...re.org)
Re: CVE request Qemu: net: rtl8139: infinite loop while transmit in C+ mode (cve-assign@...re.org)
Re: Re: CVE request Qemu: net: rtl8139: infinite loop while transmit in C+ mode (P J P <ppandit@...hat.com>)

October 25 (12 messages)

Re: libwmf: memory allocation failure in wmf_malloc (api.c) (cve-assign@...re.org)
membership request to the closed linux-distros (Sona Sarmadi <sona.sarmadi@...a.com>)
Re: CVE-2016-7545 -- SELinux sandbox escape (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day ) (Tomas Hoger <thoger@...hat.com>)
Re: libwmf: memory allocation failure in wmf_malloc (api.c) (Marcus Meissner <meissner@...e.de>)
Re: libwmf: memory allocation failure in wmf_malloc (api.c) (Agostino Sarubbo <ago@...too.org>)
Re: libwmf: memory allocation failure in wmf_malloc (api.c) (Marcus Meissner <meissner@...e.de>)
Re: CVE-2016-7545 -- SELinux sandbox escape (netblue30 <netblue30@...oo.com>)
Re: CVE-2016-7545 -- SELinux sandbox escape - Firejail is CVE-2016-9016 (cve-assign@...re.org)
Re: CVE-2016-7545 -- SELinux sandbox escape (up201407890@...nos.dcc.fc.up.pt)
Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c) (Tavis Ormandy <taviso@...gle.com>)
Re: CVE-2016-7545 -- SELinux sandbox escape - Firejail is CVE-2016-9016 (Yves-Alexis Perez <corsac@...ian.org>)

October 26 (11 messages)

Re: Addition to linux-distros for Arch Linux (Solar Designer <solar@...nwall.com>)
CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)
Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c) (Agostino Sarubbo <ago@...too.org>)
Re: Re: jasper: memory allocation failure in jas_malloc (jas_malloc.c) (Simon McVittie <smcv@...ian.org>)
CVE-2016-4455: subscription-manager: incorrect permisions in /var/lib/rhsm/ (Cedric Buissart <cbuissar@...hat.com>)
Re: CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation (Solar Designer <solar@...nwall.com>)
Re: CVE-2016-5195 "Dirty COW" Linux kernel privilege escalation vulnerability (Solar Designer <solar@...nwall.com>)
Re: Re: librsvg and cairo are causing libpng to write out-of-bounds (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE requests: some issues in gif2webp (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: DoS loading a SVG in Firefox (Gustavo Grieco <gustavo.grieco@...il.com>)
kernel: low-severity vfio driver integer overflow (Vlad Tsyrklevich <vlad@...rklevich.net>)

October 27 (18 messages)

Re: kernel: low-severity vfio driver integer overflow - Linux kernel (cve-assign@...re.org)
Re: librsvg and cairo are causing libpng to write out-of-bounds (cve-assign@...re.org)
Re: CVE requests: some issues in gif2webp (cve-assign@...re.org)
Re: CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)
Re: Re: Handful of libass issues (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2016-9015: Python urllib3 1.17 and 1.18 certificate verification failure (Cory Benfield <cory@...asa.co.uk>)
[SECURITY] CVE-2016-6797 Apache Tomcat Unrestricted Access to Global Resources (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2016-0762 Apache Tomcat Realm Timing Attack (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2016-5018 Apache Tomcat Security Manager Bypass (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2016-6794 Apache Tomcat Security System Property Disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2016-6796 Apache Tomcat Security Manager Bypass (Mark Thomas <markt@...che.org>)
Re: Re: Handful of libass issues (Brandon Perry <bperry.volatile@...il.com>)
CVE-2016-5195 test case (Andy Lutomirski <luto@...nel.org>)
CVE request Qemu: net: eepro100 memory leakage at device unplug (P J P <ppandit@...hat.com>)
CVE request Qemu: 9pfs: memory leakage when creating extended attribute (P J P <ppandit@...hat.com>)
[OSSN-0076] Glance Image service v1 and v2 api image-create vulnerability (Luke Hinds <lhinds@...hat.com>)
CVE-2016-7067 - CSRF in Monit Service Manager (Adith Sudhakar <adith.sudhakar@...il.com>)
Re: [OSSN-0076] Glance Image service v1 and v2 api image-create vulnerability (Kurt Seifried <kseifried@...hat.com>)

October 28 (4 messages)

CVE request Qemu: 9pfs: information leakage via xattribute (P J P <ppandit@...hat.com>)
CVE request Qemu: 9pfs: integer overflow leading to OOB access (P J P <ppandit@...hat.com>)
CVE request Qemu: memory leakage in v9fs_link (P J P <ppandit@...hat.com>)
CVE request Qemu: 9pfs: memory leakage in v9fs_write (P J P <ppandit@...hat.com>)

October 30 (13 messages)

Re: CVE-2016-5195 test case (Solar Designer <solar@...nwall.com>)
gajim otr plugin cleartext leak (Hanno Böck <hanno@...eck.de>)
CVE request - integer overflow and crash parsing regex in mujs (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: Re: CVE request - mujs Heap-Buffer-Overflow write and OOB Read (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request Qemu: net: eepro100 memory leakage at device unplug (<cve-assign@...re.org>)
Re: CVE request Qemu: 9pfs: memory leakage when creating extended attribute (<cve-assign@...re.org>)
Re: CVE request Qemu: 9pfs: information leakage via xattribute (<cve-assign@...re.org>)
Re: CVE request Qemu: 9pfs: integer overflow leading to OOB access (<cve-assign@...re.org>)
Re: CVE request Qemu: memory leakage in v9fs_link (<cve-assign@...re.org>)
Re: CVE request Qemu: 9pfs: memory leakage in v9fs_write (<cve-assign@...re.org>)
Re: gajim otr plugin cleartext leak (<cve-assign@...re.org>)
Re: CVE request - integer overflow and crash parsing regex in mujs (<cve-assign@...re.org>)
Re: CVE request - mujs Heap-Buffer-Overflow write and OOB Read (<cve-assign@...re.org>)

October 31 (4 messages)

Stack guard canary massaging (Florian Weimer <fweimer@...hat.com>)
Re: Stack guard canary massaging (Solar Designer <solar@...nwall.com>)
Re: [kernel-hardening] Re: Stack guard canary massaging (Daniel Micay <danielmicay@...il.com>)
Re: Re: Handful of libass issues (Salvatore Bonaccorso <carnil@...ian.org>)

294 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.