oss-security mailing list - 2017/02

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2017/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 24	² 22	³ 9	⁴ 4	⁵ 9
⁶ 6	⁷ 10	⁸ 9	⁹ 31	¹⁰ 20	¹¹ 16	¹² 3
¹³ 14	¹⁴ 9	¹⁵ 9	¹⁶ 6	¹⁷ 6	¹⁸ 1	¹⁹ 1
²⁰ 3	²¹ 6	²² 4	²³ 21	²⁴ 5	²⁵ 3	²⁶ 15
²⁷ 4	²⁸ 8

Messages by day:

February 1 (24 messages)

Re: FW: [DSA 3775-1] tcpdump security update] (Michal Hrusecky <Michal.Hrusecky@....cz>)
Re: FW: [DSA 3775-1] tcpdump security update] (Henri Salo <henri@...v.fi>)
mp3splt: NULL pointer dereference in free_options (options_manager.c) (Agostino Sarubbo <ago@...too.org>)
pax-utils: scanelf: out of bounds read in scanelf_file_textrel (scanelf.c) (Agostino Sarubbo <ago@...too.org>)
pax-utils: scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c) (Agostino Sarubbo <ago@...too.org>)
CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode (P J P <ppandit@...hat.com>)
Multiple memory access issues in gstreamer (Hanno Böck <hanno@...eck.de>)
CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables ("Laszlo Boszormenyi (GCS)" <gcs@...ian.org>)
Re: FW: [DSA 3775-1] tcpdump security update] (Michal Hrusecky <Michal.Hrusecky@....cz>)
Re: CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables (Agostino Sarubbo <ago@...too.org>)
podofo: multiple crashes (Agostino Sarubbo <ago@...too.org>)
podofo: infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject (PdfPage.cpp) (Agostino Sarubbo <ago@...too.org>)
podofo: signed integer overflow in PdfParser.cpp (Agostino Sarubbo <ago@...too.org>)
podofo: NULL pointer dereference in PdfOutputStream.cpp (Agostino Sarubbo <ago@...too.org>)
podofo: NULL pointer dereference in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) (Agostino Sarubbo <ago@...too.org>)
podofo: NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: multiple crashes (Hanno Böck <hanno@...eck.de>)
Re: podofo: multiple crashes (Agostino Sarubbo <ago@...too.org>)
CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd (P J P <ppandit@...hat.com>)
Re: podofo: multiple crashes (Hanno Böck <hanno@...eck.de>)
CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref (P J P <ppandit@...hat.com>)
CVE update - fixed in Apache Ranger 0.6.3 (Velmurugan Periasamy <vel@...che.org>)
CVE request: Use after free in libmysqlclient.so (was: Re: Use after free in libmysqlclient.so) (Bálint Réczey <balint@...intreczey.hu>)
Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)

February 2 (22 messages)

Re: CVE Request: ffmpeg remote exploitaion results code execution (<cve-assign@...re.org>)
Re: CVE request: Out-of-Bound read and write issues in put1bitbwtile()(tiff-4.0.7/libtiff/tif-getimage.c:1352) and putgreytile()(tiff-4.0… (<cve-assign@...re.org>)
Re: CVE request: multiples vulnerabilities in Revive Adserver (<cve-assign@...re.org>)
Re: CVE request: multiples vulnerabilities in libplist (<cve-assign@...re.org>)
Re: CVE requests: code injection in rubygem espeak-ruby and code injection in rubygem festivaltts4r (<cve-assign@...re.org>)
Re: CVE requests: OpenBSD httpd - 2 DoS (<cve-assign@...re.org>)
Re: Bugs fixed in libevent 2.1.6 (<cve-assign@...re.org>)
Re: mp3splt: NULL pointer dereference in free_options (options_manager.c) (<cve-assign@...re.org>)
Re: Multiple memory access issues in gstreamer (<cve-assign@...re.org>)
Re: podofo: infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject (PdfPage.cpp) (<cve-assign@...re.org>)
Re: podofo: signed integer overflow in PdfParser.cpp (<cve-assign@...re.org>)
Re: podofo: NULL pointer dereference in PdfOutputStream.cpp (<cve-assign@...re.org>)
Re: podofo: NULL pointer dereference in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) (<cve-assign@...re.org>)
Re: CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd (<cve-assign@...re.org>)
Re: podofo: multiple crashes (<cve-assign@...re.org>)
Re: CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref (<cve-assign@...re.org>)
Re: CVE requests: OpenBSD httpd - 2 DoS (Pierre Kim <pierre.kim.sec@...il.com>)
[FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues (FOXMOLE Advisories <advisories@...mole.com>)
curiosity for CVE-2016-10000 (Vladis Dronov <vdronov@...hat.com>)
Re: mp3splt: NULL pointer dereference in main (mp3splt.c) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp) (Agostino Sarubbo <ago@...too.org>)
CVE request tigervnc: vnc server can crash when TLS handshake terminates early (Matthias Gerstner <mgerstner@...e.de>)

February 3 (9 messages)

Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read (Wade Mealing <wmealing@...hat.com>)
Re: curiosity for CVE-2016-10000 (Marcus Meissner <meissner@...e.de>)
Re: curiosity for CVE-2016-10000 (Justin Steven <justin@...tinsteven.com>)
podofo: heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp) (Agostino Sarubbo <ago@...too.org>)
CVE request for two input validation flaws in gtk-vnc (Adam Maris <amaris@...hat.com>)
Re: curiosity for CVE-2016-10000 (Vladis Dronov <vdronov@...hat.com>)
Re: Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read (John Haxby <john.haxby@...cle.com>)
Re: curiosity for CVE-2016-10000 (Kurt Seifried <kseifried@...hat.com>)
Re: Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read (Andreas Stieger <astieger@...e.com>)

February 4 (4 messages)

Re: CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables (Kristian Erik Hermansen <kristian.hermansen@...il.com>)
pax-utils: dumpelf: out of bounds read in dump_notes (dumpelf.c) (Agostino Sarubbo <ago@...too.org>)
pax-utils: dumpelf: multiple divide-by-zero in dumpelf.c (Agostino Sarubbo <ago@...too.org>)
pax-utils: dumpelf: two invalid memory read in dumpelf.c (Agostino Sarubbo <ago@...too.org>)

February 5 (9 messages)

Re: [FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues (<cve-assign@...re.org>)
Re: CVE request tigervnc: vnc server can crash when TLS handshake terminates early (<cve-assign@...re.org>)
Re: Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read (<cve-assign@...re.org>)
Re: podofo: heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp) (<cve-assign@...re.org>)
Re: CVE request for two input validation flaws in gtk-vnc (<cve-assign@...re.org>)
Re: CVE Request: s-nail local root (wapiflapi <wapiflapi@...oo.fr>)
CVE-2017-2581, CVE-2017-2579, CVE-2017-2580, CVE-2017-2586, CVE-2017-2587: Multiple vulnerabilities in netpbm (chunibalon <chunibalon@...il.com>)
Irssi 1.0.0 minor remote memory leak (Ailin Nemui <ailin.nemui@...il.com>)
Re: Irssi 1.0.0 minor remote memory leak (Ailin Nemui <ailin.nemui@...il.com>)

February 6 (6 messages)

Re: Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read (Wade Mealing <wmealing@...hat.com>)
mupdf: NULL pointer dereference in dodrawpage (Agostino Sarubbo <ago@...too.org>)
mupdf: heap-based buffer overflow in fz_subsample_pixmap (Agostino Sarubbo <ago@...too.org>)
CVE Request: Linux: ip6_gre: invalid reads in ip6gre_err() (Andrey Konovalov <andreyknvl@...gle.com>)
[KIS-2017-01] PEAR HTML_AJAX <= 0.5.7 (PHP Serializer) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest (P J P <ppandit@...hat.com>)

February 7 (10 messages)

Re: mupdf: heap-based buffer overflow in fz_subsample_pixmap (<cve-assign@...re.org>)
Re: CVE Request: Linux: ip6_gre: invalid reads in ip6gre_err() (<cve-assign@...re.org>)
Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest (<cve-assign@...re.org>)
Re: CVE Request: s-nail local root (<cve-assign@...re.org>)
CVE request: XXE in Openpyxl (Sébastien Delafond <seb@...ian.org>)
CVE request: PostfixAdmin allows to delete protected aliases (Christian Boltz <oss-security@...ltz.de>)
a simple replacement for setuid and confinement systems (pg@...ern.for.sabi.co.UK (Peter Grandi))
CVE request Qemu: virtio: integer overflow in handling virtio-crypto requests (P J P <ppandit@...hat.com>)
CVE Request - Code execution vulnerability in GNU/bash v4.4 autocompletion (Jens Heyens <jens.heyens@...pa.saarland>)
Re: CVE request: XXE in Openpyxl (Doran Moppert <dmoppert@...hat.com>)

February 8 (9 messages)

Re: CVE request: PostfixAdmin allows to delete protected aliases (<cve-assign@...re.org>)
Re: CVE request Qemu: virtio: integer overflow in handling virtio-crypto requests (<cve-assign@...re.org>)
Re: CVE Request - Code execution vulnerability in GNU/bash v4.4 autocompletion (<cve-assign@...re.org>)
CVE Request: Nova-LXD incorrectly applied Neutron security group rules (Tyler Hicks <tyhicks@...onical.com>)
CVE request virglrenderer: null pointer dereference in vrend_clear (P J P <ppandit@...hat.com>)
CVE request virglrenderer: host memory leak issue in virgl_resource_attach_backing (P J P <ppandit@...hat.com>)
CVE request: XSS in viewvc (Sébastien Delafond <seb@...ian.org>)
Re: CVE request: Null pointer derefence parsing xml file using libxml 2.9.4 (in recover mode) (Ian Zimmerman <itz@...mate.net>)
BIND9 CVE-2017-3135: Combination of DNS64 and RPZ Can Lead to Crash (ISC Security Officer <security-officer@....org>)

February 9 (31 messages)

Re: CVE request: PostfixAdmin allows to delete protected aliases (Christian Boltz <oss-security@...ltz.de>)
Re: Re: CVE request: Null pointer derefence parsing xml file using libxml 2.9.4 (in recover mode) (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE Request: Nova-LXD incorrectly applied Neutron security group rules (<cve-assign@...re.org>)
Re: CVE request virglrenderer: null pointer dereference in vrend_clear (<cve-assign@...re.org>)
Re: CVE request virglrenderer: host memory leak issue in virgl_resource_attach_backing (<cve-assign@...re.org>)
Re: CVE request: XSS in viewvc (<cve-assign@...re.org>)
MITRE is adding data intake to its CVE ID process (<cve-assign@...re.org>)
Re: MITRE is adding data intake to its CVE ID process (P J P <ppandit@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Simon McVittie <smcv@...ian.org>)
zziplib: heap-based buffer overflow in __zzip_get32 (fetch.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: heap-based buffer overflow in __zzip_get64 (fetch.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: heap-based buffer overflow in zzip_mem_entry_extra_block (memdisk.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: NULL pointer dereference in main (unzzipcat-mem.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: invalid memory read in zzip_mem_entry_extra_block (memdisk.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: NULL pointer dereference in prescan_entry (fseeko.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: NULL pointer dereference in main (unzzipcat.c) (Agostino Sarubbo <ago@...too.org>)
zziplib: load of misaligned address in memdisk.c (Agostino Sarubbo <ago@...too.org>)
zziplib: assertion failure in seeko.c (Agostino Sarubbo <ago@...too.org>)
A note about the multiple crashes in zziplib (Agostino Sarubbo <ago@...too.org>)
[OpenStack OSSN 0065] Users of Glance may be able to replace active image data (Luke Hinds <lhinds@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Jeremy Stanley <jeremy@...nstack.org>)
Re: MITRE is adding data intake to its CVE ID process (Peter Bex <peter@...e-magic.net>)
Re: mupdf: heap-based buffer overflow in fz_subsample_pixmap (Agostino Sarubbo <ago@...too.org>)
Re: Re: Firejail local root exploit (Thomas Deutschmann <whissi@...too.org>)
Multiple DoS parsing and executing extended regex expressions in GNU libc (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: MITRE is adding data intake to its CVE ID process ("Steven R. Loomis" <srl@...-project.org>)
CVE-2017-5589+ Multiple XMPP Clients User Impersonation Vulnerability (Georg Lukas <lukas@...solutions.de>)
Re: Multiple DoS parsing and executing extended regex expressions in GNU libc (Jakub Wilk <jwilk@...lk.net>)
Re: MITRE is adding data intake to its CVE ID process (Amos Jeffries <squid3@...enet.co.nz>)

February 10 (20 messages)

mupdf: use-after-free in fz_subsample_pixmap (pixmap.c) (Agostino Sarubbo <ago@...too.org>)
Xen Security Advisory 208 (CVE-2017-2615) - oob access in cirrus bitblt copy (Xen.org security team <security@....org>)
Re: Use after free in libmysqlclient.so (pali@...n.org)
WebKitGTK+ Security Advisory WSA-2017-0002 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: Use after free in libmysqlclient.so (Solar Designer <solar@...nwall.com>)
Re: MITRE is adding data intake to its CVE ID process ("Priedhorsky, Reid" <reidpr@...l.gov>)
Re: MITRE is adding data intake to its CVE ID process (John Haxby <john.haxby@...cle.com>)
Re: Re: Use after free in libmysqlclient.so (Simon McVittie <smcv@...ian.org>)
Re: MITRE is adding data intake to its CVE ID process (Stiepan <stie@....swiss>)
Re: MITRE is adding data intake to its CVE ID process (Simon McVittie <smcv@...ian.org>)
Re: MITRE is adding data intake to its CVE ID process (Pierre Schweitzer <pierre@...ctos.org>)
RE: MITRE is adding data intake to its CVE ID process ("Maier, Kurt H" <kurt.maier@...l.gov>)
Re: MITRE is adding data intake to its CVE ID process (Seth Arnold <seth.arnold@...onical.com>)
RE: MITRE is adding data intake to its CVE ID process (Ben Tasker <ben@...tasker.co.uk>)
RE: MITRE is adding data intake to its CVE ID process ("Maier, Kurt H" <kurt.maier@...l.gov>)
Re: Asking for a CVE id for the WordPress Privilege Escalation vulnerability (4.7/4.7.1) (Josh Bressers <josh@...ss.net>)
Re: MITRE is adding data intake to its CVE ID process (Tim <tim-security@...tinelchicken.org>)
Re: MITRE is adding data intake to its CVE ID process (Kurt Seifried <kseifrie@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
RE: MITRE is adding data intake to its CVE ID process ("Williams, Ken" <Ken.Williams@...com>)

February 11 (16 messages)

Re: MITRE is adding data intake to its CVE ID process (Mats Wichmann <mats@...hmann.us>)
Re: MITRE is adding data intake to its CVE ID process (Tim <tim-security@...tinelchicken.org>)
Re: MITRE is adding data intake to its CVE ID process (Mike Gerwitz <mtg@....org>)
Re: MITRE is adding data intake to its CVE ID process (<cve-assign@...re.org>)
Re: MITRE is adding data intake to its CVE ID process (Adam Caudill <adam@...mcaudill.com>)
Re: MITRE is adding data intake to its CVE ID process (Tim <tim-security@...tinelchicken.org>)
Re: [Xen-users] Xen Security Advisory 208 (CVE-2017-2615) - oob access in cirrus bitblt copy (Roger Pau Monné <roger.pau@...rix.com>)
Re: MITRE is adding data intake to its CVE ID process (Moritz Muehlenhoff <jmm@...ian.org>)
CVE publication request - CVE 2016-8636 (Eyal Itkin <eyal.itkin@...il.com>)
Re: MITRE is adding data intake to its CVE ID process (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: Use after free in libmysqlclient.so (pali@...n.org)
Re: Re: Use after free in libmysqlclient.so (pali@...n.org)
posting without being subscribed (was: Use after free in libmysqlclient.so) (Solar Designer <solar@...nwall.com>)
Re: posting without being subscribed (pali@...n.org)
Re: posting without being subscribed (Solar Designer <solar@...nwall.com>)
Re: MITRE is adding data intake to its CVE ID process (Solar Designer <solar@...nwall.com>)

February 12 (3 messages)

Re: Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer (Leo Famulari <leo@...ulari.name>)
Re: MITRE is adding data intake to its CVE ID process (Kurt Seifried <kseifried@...hat.com>)
Fwd: [scr293903] Linux kernel - upstream (Andrey Konovalov <andreyknvl@...gle.com>)

February 13 (14 messages)

CVE-2017-5969: Null pointer derefence parsing xml file using libxml 2.9.4 (in recover mode) (Henri Salo <henri@...v.fi>)
CVE-2017-5956 virglrenderer: Virglrenderer: OOB access while in vrend_draw_vbo (P J P <ppandit@...hat.com>)
CVE-2017-5957 Virglrenderer: stack overflow in vrend_decode_set_framebuffer_state (P J P <ppandit@...hat.com>)
Re: CVE request: XXE in Openpyxl (Sébastien Delafond <seb@...ian.org>)
Re: [Xen-devel] [Xen-users] Xen Security Advisory 208 (CVE-2017-2615) - oob access in cirrus bitblt copy (George Dunlap <dunlapg@...ch.edu>)
RE: CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode (李强 <liqiang6-s@....cn>)
RE: [security-vendor] Re: MITRE is adding data intake to its CVE ID process ("Radzykewycz, T (Radzy)" <radzy@...driver.com>)
Re: MITRE is adding data intake to its CVE ID process ("Priedhorsky, Reid" <reidpr@...l.gov>)
RE: MITRE is adding data intake to its CVE ID process ("Maier, Kurt H" <kurt.maier@...l.gov>)
Xen Security Advisory 208 (CVE-2017-2615) - oob access in cirrus bitblt copy (Xen.org security team <security@....org>)
CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx (P J P <ppandit@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Ian Zimmerman <itz@...mate.net>)
Re: MITRE is adding data intake to its CVE ID process (Ian Zimmerman <itz@...mate.net>)
Re: Re: MITRE is adding data intake to its CVE ID process (Kurt Seifried <kseifried@...hat.com>)

February 14 (9 messages)

Re: Re: CVE request: XXE in Openpyxl (Doran Moppert <dmoppert@...hat.com>)
Re: CVE request: XXE in Openpyxl (Sébastien Delafond <seb@...ian.org>)
Re: A note about the multiple crashes in zziplib (Agostino Sarubbo <ago@...too.org>)
Linux kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf() (Vladis Dronov <vdronov@...hat.com>)
Re: Linux kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf() (Henri Salo <henri@...v.fi>)
Re: Linux kernel: Reachable BUG_ON from userspace in sctp_wait_for_sndbuf() (Vladis Dronov <vdronov@...hat.com>)
Re: A note about the multiple crashes in zziplib (Ian Zimmerman <itz@...mate.net>)
CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers (P J P <ppandit@...hat.com>)
Re: Pending CVE requests for glibc (Moritz Muehlenhoff <jmm@...ian.org>)

February 15 (9 messages)

Re: MITRE is adding data intake to its CVE ID process (Henri Salo <henri@...v.fi>)
CVE-2017-2630 Qemu: nbd: oob stack write in client routine drop_sync (P J P <ppandit@...hat.com>)
Xen Security Advisory 207 - memory leak when destroying guest without PT devices (Xen.org security team <security@....org>)
Advisory X41-2017-002: Multiple Vulnerabilities in ytnef (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
Re: MITRE is adding data intake to its CVE ID process (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: XXE in Openpyxl (Sébastien Delafond <seb@...ian.org>)
CVE-2017-5993 Virglrenderer: host memory leakage when initialising blitter context (P J P <ppandit@...hat.com>)
CVE-2017-5994 Virglrenderer: out-of-bounds access in vrend_create_vertex_elements_state (P J P <ppandit@...hat.com>)
Re: CVE request: sunxi-debug (root privilege escalation in Allwinner kernel) (David Manouchehri <david.manouchehri@...eup.net>)

February 16 (6 messages)

Linux: CVE-2017-6001: Incomplete fix for CVE-2016-6786: perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group… (Salvatore Bonaccorso <carnil@...ian.org…)
CVE-2017-6000 Qemu: crypto: memory leakage in qcrypto_ivgen_essiv_init (P J P <ppandit@...hat.com>)
Re: git-hub: missing sanitization of data received from GitHub (Jakub Wilk <jwilk@...lk.net>)
fd.o #99828: two symlink attacks fixed in dbus 1.10.16 (Simon McVittie <smcv@...ian.org>)
Re: MITRE is adding data intake to its CVE ID process (Fabio Olive Leite <fleite@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Solar Designer <solar@...nwall.com>)

February 17 (6 messages)

Re: CVE-2017-6000 Qemu: crypto: memory leakage in qcrypto_ivgen_essiv_init (P J P <ppandit@...hat.com>)
CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping (P J P <ppandit@...hat.com>)
Re: MySQL / MariaDB / Percona - Root Privilege Escalation Exploit [ CVE-2016-6664 / CVE-2016-5617 ] (Tomas Hoger <thoger@...hat.com>)
Re: MySQL / MariaDB / Percona - Root Privilege Escalation Exploit [ CVE-2016-6664 / CVE-2016-5617 ] (Dawid Golunski <dawid@...alhackers.com>)
Re: MITRE is adding data intake to its CVE ID process (<cve-assign@...re.org>)
OpenID Connect authentication module for Apache: CVE-2017-6059 CVE-2017-6062 (Salvatore Bonaccorso <carnil@...ian.org>)

February 18 (1 message)

mupdf: mujstest: stack-based buffer overflow in main (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)

February 19 (1 message)

TCPDF: CVE-2017-6100: LFI posting internal files externally abusing default parameter (Salvatore Bonaccorso <carnil@...ian.org>)

February 20 (3 messages)

Blindspot Advisory: Java/Python FTP Injections Allow for Firewall Bypass ("Timothy D. Morgan" <tim.advisories@...ndspotsecurity.com>)
Re: Blindspot Advisory: Java/Python FTP Injections Allow for Firewall Bypass (Solar Designer <solar@...nwall.com>)
Re: Blindspot Advisory: Java/Python FTP Injections Allow for Firewall Bypass ("Timothy D. Morgan" <tim.advisories@...ndspotsecurity.com>)

February 21 (6 messages)

CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo (P J P <ppandit@...hat.com>)
Xen Security Advisory 209 (CVE-2017-2620) - cirrus_bitblt_cputovideo does not check if memory region is safe (Xen.org security team <security@....org>)
Re: CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo (P J P <ppandit@...hat.com>)
CVE Request - Multiple vulnerabilities in gdk-pixbuf (Ariel Zelivanski <ariel.zelivans@...il.com>)
Re: CVE Request - Multiple vulnerabilities in gdk-pixbuf (Leo Famulari <leo@...ulari.name>)
[SECURITY ADVISORY]: curl SSL_VERIFYSTATUS ignored (Daniel Stenberg <daniel@...x.se>)

February 22 (4 messages)

RE: CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode (李强 <liqiang6-s@....cn>)
CVE-2016-7078: Foreman organization/location authorization vulnerability (Dominic Cleal <dominic@...al.org>)
Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root) (Andrey Konovalov <andreyknvl@...gle.com>)
munin: CVE-2017-6188: Local file write vulnerability (Salvatore Bonaccorso <carnil@...ian.org>)

February 23 (21 messages)

CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit (P J P <ppandit@...hat.com>)
util-linux 2.29.2 fixes CVE-2017-2616 (Marcus Meissner <meissner@...e.de>)
spice-server: CVE-2016-9577, CVE-2016-9578: remote DoS and buffer overflow from crafted messages (Doran Moppert <dmoppert@...hat.com>)
Re: CVE Request - Multiple vulnerabilities in gdk-pixbuf (Ariel Zelivansky <ariel.zelivans@...il.com>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Hanno Böck <hanno@...eck.de>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Marcus Meissner <meissner@...e.de>)
Re: [Xen-devel] Xen Security Advisory 209 (CVE-2017-2620) - cirrus_bitblt_cputovideo does not check if memory region is… (Roger Pau Monné <roger.pau@...rix.com>)
Re: Xen Security Advisory 209 (CVE-2017-2620) - cirrus_bitblt_cputovideo does not check if memory region is safe (Steven Haigh <netwiz@....id.au>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Assaf Gordon <assafgordon@...il.com>)
Xen Security Advisory 209 (CVE-2017-2620) - cirrus_bitblt_cputovideo does not check if memory region is safe (Xen.org security team <security@....org>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Hanno Böck <hanno@...eck.de>)
Xen Security Advisory 210 - arm: memory corruption when freeing p2m pages (Xen.org security team <security@....org>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Bálint Réczey <balint@...intreczey.hu>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Emilio Pozuelo Monfort <pochu@...ian.org>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 ("Serge E. Hallyn" <serge@...lyn.com>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Leo Famulari <leo@...ulari.name>)
Advisory X41-2017-004: Multiple Vulnerabilities in tnef (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
Re: util-linux 2.29.2 fixes CVE-2017-2616 (Tobias Stöckmann <tobias@...eckmann.org>)
Linux: CVE-2017-6214: ipv4/tcp: infinite loop in tcp_splice_read() (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2017-6209 Virglrenderer: stack buffer oveflow in parse_identifier (P J P <ppandit@...hat.com>)
CVE-2017-6210 Virglrenderer: null pointer dereference in vrend_decode_reset (P J P <ppandit@...hat.com>)

February 24 (5 messages)

GraphicsMagick heap out of bounds write issue (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: CVE-2017-5956 virglrenderer: Virglrenderer: OOB access while in vrend_draw_vbo (Matthias Gerstner <mgerstner@...e.de>)
Re: CVE-2017-5956 virglrenderer: Virglrenderer: OOB access while in vrend_draw_vbo (Matthias Gerstner <mgerstner@...e.de>)
Re: GraphicsMagick heap out of bounds write issue (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
CVE-2017-6317 Virglrenderer: memory leakage issue in add_shader_program (P J P <ppandit@...hat.com>)

February 25 (3 messages)

pax-utils: scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c) ("Agostino Sarubbo" <ago@...too.org>)
gnu-paxutils: multiple crashes ("Agostino Sarubbo" <ago@...too.org>)
Re: gnu-paxutils: multiple crashes (Assaf Gordon <assafgordon@...il.com>)

February 26 (15 messages)

Re: CVE Request - Multiple vulnerabilities in gdk-pixbuf (Ariel Zelivansky <ariel.zelivans@...il.com>)
Re: Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root) (Andrey Konovalov <andreyknvl@...gle.com>)
audiofile: multiple crashes ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in MSADPCM::initializeCoefficients (MSADPCM.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in readValue (FileHandle.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: global buffer overflow in decodeSample (IMA.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in alaw2linear_buf (G711.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in IMA::decodeBlockWAVE (IMA.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: divide-by-zero in BlockCodec::runPull (BlockCodec.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in ulaw2linear_buf (G711.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: heap-based buffer overflow in Expand3To4Module::run (SimpleModule.h) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: divide-by-zero in BlockCodec::reset1 (BlockCodec.cpp) ("Agostino Sarubbo" <ago@...too.org>)
audiofile: multiple ubsan crashes ("Agostino Sarubbo" <ago@...too.org>)
Re: gnu-paxutils: multiple crashes (Agostino Sarubbo <ago@...too.org>)

February 27 (4 messages)

Re: potrace: invalid memory access in findnext (decompose.c) (Agostino Sarubbo <ago@...too.org>)
Linux: CVE-2017-6353: sctp: deny peeloff operation on asocs with threads sleeping on it (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2017-6355 Virglrenderer: integer overflow while creating shader object (P J P <ppandit@...hat.com>)
CVE Request: PHP with Zend OPCache code permission/sensitive data protection vulnerability (php-dev@...dogsoftware.net)

February 28 (8 messages)

Re: CVE Request: PHP with Zend OPCache code permission/sensitive data protection vulnerability (php-dev@...dogsoftware.net)
Re: Re: GraphicsMagick heap out of bounds write issue (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Advisory X41-2017-001: Multiple Vulnerabilities in X.org (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
Linux: irda: Fix lockdep annotations in hashbin_delete() (CVE-2017-6348) (Salvatore Bonaccorso <carnil@...ian.org>)
Linux: ip: fix IP_CHECKSUM handling (CVE-2017-6347) (Salvatore Bonaccorso <carnil@...ian.org>)
Linux: packet: fix races in fanout_add() (CVE-2017-6346) (Salvatore Bonaccorso <carnil@...ian.org>)
Linux: net/llc: avoid BUG_ON() in skb_orphan() (CVE-2017-6345) (Salvatore Bonaccorso <carnil@...ian.org>)
kio vulnerability: need CVE (Albert Astals Cid <aacid@....org>)

278 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.