oss-security mailing list - 2017/03

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2017/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 11	² 12	³ 2	⁴ 1	⁵ 1
⁶ 8	⁷ 7	⁸ 1	⁹ 5	¹⁰ 2	¹¹ 2	¹² 3
¹³ 28	¹⁴ 7	¹⁵ 8	¹⁶ 10	¹⁷ 4	¹⁸ 3	¹⁹ 1
²⁰ 9	²¹ 3	²² 6	²³ 6	²⁴ 8	²⁵ 3	²⁶ 2
²⁷ 2	²⁸ 3	²⁹ 4	³⁰ 4	³¹ 5

Messages by day:

March 1 (11 messages)

three issues in xorg (CVE-2016-2624, CVE-2016-2625, CVE-2016-2626) (Doran Moppert <dmoppert@...hat.com>)
Re: three issues in xorg (CVE-*2017*-2624, CVE-*2017*-2625, CVE-*2017*-2626) (Doran Moppert <dmoppert@...hat.com>)
Multiple Cross-Site Scripting vulnerabilities affecting various WordPress Plugins (Summer of Pwnage <lists@...urify.nl>)
Multiple Cross-Site Request Forgery vulnerabilities affecting various WordPress Plugins (Summer of Pwnage <lists@...urify.nl>)
Multiple vulnerabilities affecting various WordPress Plugins (Summer of Pwnage <lists@...urify.nl>)
Re: kio vulnerability: need CVE (P J P <ppandit@...hat.com>)
CVE-2017-6386 Virglrenderer: memory leakage while in vrend_create_vertex_elements_state (P J P <ppandit@...hat.com>)
Persistent XSS in wordpress plugin rockhoist-badges v1.2.2 ("Larry W. Cashdollar" <larry0@...com>)
Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1 ("Larry W. Cashdollar" <larry0@...com>)
CVE-2016-10228: glibc iconv program can hang when invoked with the -c option (Florian Weimer <fweimer@...hat.com>)
CVE-2017-6414 Qemu: libcacard: host memory leakage while creating new APDU (P J P <ppandit@...hat.com>)

March 2 (12 messages)

podofo: invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement (graphicsstack.h) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: heap-based buffer overflow in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h) ("Agostino Sarubbo" <ago@...too.org>)
podofo: global buffer overflow in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in PoDoFo::PdfColor::operator= (PdfColor.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in PoDoFo::PdfXObject::PdfXObject (PdfXObject.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: NULL pointer dereference in PoDoFo::PdfColorGray::~PdfColorGray (PdfColor.cpp) ("Agostino Sarubbo" <ago@...too.org>)
another bunch of crashes in podofo ("Agostino Sarubbo" <ago@...too.org>)
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0 ("Larry W. Cashdollar" <larry0@...com>)

March 3 (2 messages)

potrace: heap-based buffer overflow in bm_readbody_bmp (bitmap_io.c) (incomplete fix for CVE-2016-8698) ("Agostino Sarubbo" <ago@...too.org>)
Re: MySQL / MariaDB / Percona - Root Privilege Escalation Exploit [ CVE-2016-6664 / CVE-2016-5617 ] (Tomas Hoger <thoger@...hat.com>)

March 4 (1 message)

One byte stack buffer overflow in keepassxc / zxcvbn-c (Hanno Böck <hanno@...eck.de>)

March 5 (1 message)

TeX Live: CVE-2016-10243: whitelists a insecure binary/utility to be run as external program (Salvatore Bonaccorso <carnil@...ian.org>)

March 6 (8 messages)

CVE-Request JasPer 2.0.12 NULL Pointer Dereference jp2_encode (jp2_enc.c) (Anthony Sasadeusz <sasadeu1@...c.edu>)
Re: CVE-Request JasPer 2.0.12 NULL Pointer Dereference jp2_encode (jp2_enc.c) (Emilio Pozuelo Monfort <pochu27@...il.com>)
Re: jasper: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (Agostino Sarubbo <ago@...too.org>)
Re: CVE-Request JasPer 2.0.12 NULL Pointer Dereference jp2_encode (jp2_enc.c) (Tomas Hoger <thoger@...hat.com>)
Remote file upload vulnerabilities in multiple wordpress plugins ("Larry W. Cashdollar" <larry0@...com>)
CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list (P J P <ppandit@...hat.com>)
Cross-Site Request Forgery in WordPress Press This function allows DoS (Summer of Pwnage <lists@...urify.nl>)
WordPress audio playlist functionality is affected by Cross-Site Scripting (Summer of Pwnage <lists@...urify.nl>)

March 7 (7 messages)

Re: JasPer 2.0.12 NULL Pointer Dereference jp2_encode (jp2_enc.c) (Anthony Sasadeusz <sasadeu1@...c.edu>)
[ANNOUNCE] CVE-2017-5635 and CVE-2017-5636 (Andy LoPresto <alopresto@...che.org>)
CVE Request: Wordpress: 6 security issues in Wordpress 4.7 2 (Craig Small <csmall@....com.au>)
Re: CVE Request: Wordpress: 6 security issues in Wordpress 4.7 2 (Emilio Pozuelo Monfort <pochu27@...il.com>)
Re: CVE Request: Wordpress: 6 security issues in Wordpress 4.7 2 (Kurt Seifried <kseifried@...hat.com>)
Linux kernel: CVE-2017-2636: local privilege escalation flaw in n_hdlc (Alexander Popov <alex.popov@...ux.com>)
Security issue in Linux kernel (v4.5+) persistent memory enabling (Dan Williams <dan.j.williams@...el.com>)

March 8 (1 message)

Re: Linux kernel: CVE-2017-2636: local privilege escalation flaw in n_hdlc (Alexander Popov <alex.popov@...ux.com>)

March 9 (5 messages)

Concerns about CVE-2017-5972 (Wade Mealing <wmealing@...hat.com>)
Re: Concerns about CVE-2017-5972 (Wade Mealing <wmealing@...hat.com>)
Multiple Blind SQL injection vulnerability in Wordpress Plugin DTracker v1.5 ("Larry W. Cashdollar" <larry0@...com>)
LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership (Tyler Hicks <tyhicks@...onical.com>)
CVE Request: Joomla! FLEXIcontent - Incorrect Authorization (Authorization Bypass) (Seth Art <sart@...nskycorp.com>)

March 10 (2 messages)

Advisory: XSS issues in MantisBT (CVE-2017-6797, CVE-2017-6799) (Damien Regad <dregad@...tisbt.org>)
Re: LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership (Stiepan <stie@....swiss>)

March 11 (2 messages)

Re: CVE Request: Wordpress: 6 security issues in Wordpress 4.7 2 (Craig Small <csmall@...ian.org>)
CVE Request: Irssi use after free in netjoin condition (2017/03) (Ailin Nemui <ailin.nemui@...il.com>)

March 12 (3 messages)

Re: CVE Request: Irssi use after free in netjoin condition (2017/03) (Emilio Pozuelo Monfort <pochu27@...il.com>)
Roundcube: CVE-2017-6820: XSS issue in handling of a style tag inside of an svg element (Salvatore Bonaccorso <carnil@...ian.org>)
Fwd: [scr305104] wordpress before 4.7.3 (Craig Small <csmall@...ian.org>)

March 13 (28 messages)

Re: audiofile: global buffer overflow in decodeSample (IMA.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: heap-based buffer overflow in alaw2linear_buf (G711.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: heap-based buffer overflow in IMA::decodeBlockWAVE (IMA.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: divide-by-zero in BlockCodec::runPull (BlockCodec.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: heap-based buffer overflow in ulaw2linear_buf (G711.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: divide-by-zero in BlockCodec::reset1 (BlockCodec.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: heap-based buffer overflow in Expand3To4Module::run (SimpleModule.h) (Agostino Sarubbo <ago@...too.org>)
Re: audiofile: multiple ubsan crashes (Agostino Sarubbo <ago@...too.org>)
Re: podofo: invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement (graphicsstack.h) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: heap-based buffer overflow in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: global buffer overflow in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in PoDoFo::PdfColor::operator= (PdfColor.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in PoDoFo::PdfXObject::PdfXObject (PdfXObject.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: podofo: NULL pointer dereference in PoDoFo::PdfColorGray::~PdfColorGray (PdfColor.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: mupdf: mujstest: global-buffer-overflow in my_getline (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)
Re: mupdf: mujstest: global-buffer-overflow in main (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)
Re: jasper: NULL pointer dereference in jpc_tsfb_synthesize (jpc_tsfb.c) (Agostino Sarubbo <ago@...too.org>)
Re: jasper: heap-based buffer overflow in jpc_dec_tiledecode (jpc_dec.c) (Agostino Sarubbo <ago@...too.org>)
Re: jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887) (Agostino Sarubbo <ago@...too.org>)
Re: jasper: use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (Agostino Sarubbo <ago@...too.org>)
Re: jasper: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (Agostino Sarubbo <ago@...too.org>)
Re: jasper: heap-based buffer overflow in jpc_dec_decodepkt (jpc_t2dec.c) (Agostino Sarubbo <ago@...too.org>)
Two Content Injection vulnerabilities in Wordpress Plugin DTracker v1.5 ("Larry W. Cashdollar" <larry0@...com>)

March 14 (7 messages)

Re: LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership (Tyler Hicks <tyhicks@...onical.com>)
CVE-2016-9603 Qemu: cirrus: heap buffer overflow via vnc connection (P J P <ppandit@...hat.com>)
Xen Security Advisory 211 (CVE-2016-9603) - Cirrus VGA Heap overflow via display refresh (Xen.org security team <security@....org>)
Re: LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership (Stiepan <stie@....swiss>)
Arbitrary file download vulnerability in Wordpress Plugin Membership Simplified v1.58 ("Larry W. Cashdollar" <larry0@...com>)
Re: audiofile: heap-based buffer overflow in MSADPCM::initializeCoefficients (MSADPCM.cpp) (Solar Designer <solar@...nwall.com>)
Re: audiofile: heap-based buffer overflow in readValue (FileHandle.cpp) (Solar Designer <solar@...nwall.com>)

March 15 (8 messages)

Re: LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership (Stiepan <stie@....swiss>)
Re: Arbitrary file download vulnerability in Wordpress Plugin Membership Simplified v1.58 ("Larry W. Cashdollar" <larry0@...com>)
Dealing with CVEs that apply to unspecified package versions (ludo@....org (Ludovic Courtès))
Re: Dealing with CVEs that apply to unspecified package versions (Simon McVittie <smcv@...ian.org>)
Re: Dealing with CVEs that apply to unspecified package versions (Seth Arnold <seth.arnold@...onical.com>)
Re: Dealing with CVEs that apply to unspecified package versions (Leo Famulari <leo@...ulari.name>)
Re: Dealing with CVEs that apply to unspecified package versions (Kurt Seifried <kseifried@...hat.com>)
CVE request for unchecked size argument in malloc() in CHICKEN Scheme (Peter Bex <peter@...e-magic.net>)

March 16 (10 messages)

Re: CVE request for unchecked size argument in malloc() in CHICKEN Scheme (Adam Maris <amaris@...hat.com>)
Re: CVE request for unchecked size argument in malloc() in CHICKEN Scheme (Peter Bex <peter@...e-magic.net>)
Re: CVE request for unchecked size argument in malloc() in CHICKEN Scheme ("Don A. Bailey" <donb@...uritymouse.com>)
Re: Dealing with CVEs that apply to unspecified package versions (Jerome Athias <athiasjerome@...il.com>)
Re: CVE request for unchecked size argument in malloc() in CHICKEN Scheme (Peter Korsgaard <peter@...sgaard.com>)
Re: Dealing with CVEs that apply to unspecified package versions (Jerome Athias <athiasjerome@...il.com>)
Re: CVE request for unchecked size argument in malloc() in CHICKEN Scheme (Peter Bex <peter@...e-magic.net>)
CVE Request: multiple bugs found in BFD libraries and Binutils' utilities (Thuan Pham <thuanpv@...p.nus.edu.sg>)
Re: CVE Request: multiple bugs found in BFD libraries and Binutils' utilities (Agostino Sarubbo <ago@...too.org>)
Re: CVE request for unchecked size argument in malloc() in CHICKEN Scheme (Peter Korsgaard <peter@...sgaard.com>)

March 17 (4 messages)

Re: CVE Request: multiple bugs found in BFD libraries and Binutils' utilities (Thuan Pham <thuanpv@...p.nus.edu.sg>)
Advisory: XSS in MantisBT Source Integration Plugin (CVE-2017-6958) (Damien Regad <dregad@...tisbt.org>)
CVE-2017-3305 - The Riddle vulnerability in MySQL client (public disclosure) (Pali Rohár <pali.rohar@...il.com>)
Re: CVE-2017-3305 - The Riddle vulnerability in MySQL client (public disclosure) (Solar Designer <solar@...nwall.com>)

March 18 (3 messages)

CVE-2017-6967 xrdp PAM auth_start_session() (Seth Arnold <seth.arnold@...onical.com>)
Re: Dealing with CVEs that apply to unspecified package versions (Brian May <brian@...uxpenguins.xyz>)
Re: Dealing with CVEs that apply to unspecified package versions (Jerome Athias <athiasjerome@...il.com>)

March 19 (1 message)

Re: CVE-2016-3631 - libtiff 4.0.6 illegel read (Alan Coopersmith <alan.coopersmith@...cle.com>)

March 20 (9 messages)

git: CVE-2014-9938: does not sanitize branch names in $PS1 allowing command execution (Salvatore Bonaccorso <carnil@...ian.org>)
libpcre: invalid memory read in phar (pcretest.c) ("Agostino Sarubbo" <ago@...too.org>)
libpcre: NULL pointer dereference in main (pcretest.c) ("Agostino Sarubbo" <ago@...too.org>)
libpcre: invalid memory read in match (pcre_exec.c) ("Agostino Sarubbo" <ago@...too.org>)
libpcre: two stack-based buffer overflow write in pcre32_copy_substring (pcre_get.c) ("Agostino Sarubbo" <ago@...too.org>)
libpcre: heap-based bufffer overflow in regexflip8_or_16 (pcretest.c) ("Agostino Sarubbo" <ago@...too.org>)
libpcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) ("Agostino Sarubbo" <ago@...too.org>)
Re: CVE Request: Irssi use after free in netjoin condition (2017/03) (Ailin Nemui <ailin.nemui@...il.com>)
CVE-2017-5644 - Possible DOS (Denial of Service) in Apache POI versions prior to 3.15 (Dominik Stadler <centic@...che.org>)

March 21 (3 messages)

Two Content Injection vulnerabilities in Wordpress Plugin DTracker v1.5 ("Larry W. Cashdollar" <larry0@...com>)
Jenkins plugins -- multiple vulnerabilities (Daniel Beck <ml@...kweb.net>)
subscription-manager: CVE-2017-2663 unsafe dbus interface (Cedric Buissart <cbuissar@...hat.com>)

March 22 (6 messages)

Re: elfutils: memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c) (Agostino Sarubbo <ago@...too.org>)
Re: elfutils: memory allocation failure in allocate_elf (common.h) (Agostino Sarubbo <ago@...too.org>)
information about pwn2own Kernel problem (Marcus Meissner <meissner@...e.de>)
Multiple Unauthenticated blind SQL injections in Wordpress Plugin Membership Simplified v1.58 ("Larry W. Cashdollar" <larry0@...com>)
Re: information about pwn2own Kernel problem (Tyler Hicks <tyhicks@...onical.com>)
Re: information about pwn2own Kernel problem ("Luedtke, Nicholas (HPE Linux Security)" <nicholas.luedtke@....com>)

March 23 (6 messages)

Re: information about pwn2own Kernel problem (Dave Null <noid23@...il.com>)
pcs: CVE-2017-2661 Improper node name field validation when creating clusters leads to XSS (Cedric Buissart <cbuissar@...hat.com>)
[OSSA-2017-002] Nova logs sensitive context from notification exceptions (CVE-2017-7214) (Jeremy Stanley <jeremy@...nstack.org>)
[CVE-2017-6088] EON 5.0 Multiple SQL Injection (Sydream Labs <labs@...dream.com>)
[CVE-2017-6087] EON 5.0 Remote Code Execution (Sydream Labs <labs@...dream.com>)
[CVE-2017-5869] Nuxeo Platform remote code execution (Sydream Labs <labs@...dream.com>)

March 24 (8 messages)

Re: libpcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) (Agostino Sarubbo <ago@...too.org>)
Re: libpcre: two stack-based buffer overflow write in pcre32_copy_substring (pcre_get.c) (Agostino Sarubbo <ago@...too.org>)
[ANNOUNCE] Linux Security Summit 2017 - CFP (James Morris <jmorris@...ei.org>)
Re: [ANNOUNCE] Linux Security Summit 2017 - CFP (Solar Designer <solar@...nwall.com>)
Re: [ANNOUNCE] Linux Security Summit 2017 - CFP (James Morris <jmorris@...ei.org>)
Linux kernel ping socket / AF_LLC connect() sin_family race (Solar Designer <solar@...nwall.com>)
Re: Linux kernel ping socket / AF_LLC connect() sin_family race (Andrey Konovalov <andreyknvl@...gle.com>)
Re: Linux kernel ping socket / AF_LLC connect() sin_family race (Eric Dumazet <edumazet@...gle.com>)

March 25 (3 messages)

Re: Linux kernel ping socket / AF_LLC connect() sin_family race (Solar Designer <solar@...nwall.com>)
Re: libtiff: multiple divide-by-zero (Agostino Sarubbo <ago@...too.org>)
Re: libtiff: multiple heap-based buffer overflow (Agostino Sarubbo <ago@...too.org>)

March 26 (2 messages)

Re: mupdf: use-after-free in fz_subsample_pixmap (pixmap.c) (Agostino Sarubbo <ago@...too.org>)
Re: potrace: heap-based buffer overflow in bm_readbody_bmp (bitmap_io.c) (incomplete fix for CVE-2016-8698) (Agostino Sarubbo <ago@...too.org>)

March 27 (2 messages)

inoERP - Multiple Issues (FOXMOLE Advisories <advisories@...mole.com>)
CVE: kernel: drm/vmwgfx: check that number of mip levels is above zero in in vmw_surface_define_ioctl() (Vladis Dronov <vdronov@...hat.com>)

March 28 (3 messages)

Re: LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership (Stiepan <stie@....swiss>)
imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862 and CVE-2016-8866… ("Agostino Sarubbo" <ago@...too.org>)
Re: LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership ("Serge E. Hallyn" <serge@...lyn.com>)

March 29 (4 messages)

CVE-2017-7294: kernel: drm/vmwgfx: limit mip levels in vmw_surface_define_ioctl() (Vladis Dronov <vdronov@...hat.com>)
CVE-2017-7184: kernel: Local privilege escalation in XFRM framework (Tyler Hicks <tyhicks@...onical.com>)
Re: information about pwn2own Kernel problem (Tyler Hicks <tyhicks@...onical.com>)
Re: [Xen-devel] Xen Security Advisory 206 - xenstore denial of service via repeated update (Michael Young <m.a.young@...ham.ac.uk>)

March 30 (4 messages)

Re: CVE-2017-7184: kernel: Local privilege escalation in XFRM framework (Lokesh Ubuntu <lokesh.ubuntu@...il.com>)
Re: Linux kernel: CVE-2017-2636: local privilege escalation flaw in n_hdlc (Alexander Popov <alex.popov@...ux.com>)
Re: CVE-2017-7184: kernel: Local privilege escalation in XFRM framework (Tyler Hicks <tyhicks@...onical.com>)
Advisory: XSS issues in MantisBT (CVE-2017-6973, CVE-2017-7241, CVE-2017-7309) (Damien Regad <dregad@...tisbt.org>)

March 31 (5 messages)

CVE-2017-7346: kernel: drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (Vladis Dronov <vdronov@...hat.com>)
CVE-2017-7308: Linux kernel: integer overflow in packet_set_ring (Andrey Konovalov <andreyknvl@...gle.com>)
Re: CVE-2017-7308: Linux kernel: integer overflow in packet_set_ring (Andrey Konovalov <andreyknvl@...gle.com>)
CVE Request -- mapr: information disclosure vulnerability (Mark Felder <feld@...d.me>)
Re: CVE Request -- mapr: information disclosure vulnerability (Mark Felder <feld@...d.me>)

171 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.