oss-security mailing list - 2017/04

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2017/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 6	²
³ 4	⁴ 8	⁵ 1	⁶ 10	⁷ 6	⁸	⁹
¹⁰ 24	¹¹ 1	¹² 3	¹³ 3	¹⁴ 3	¹⁵ 4	¹⁶ 4
¹⁷ 8	¹⁸ 6	¹⁹ 7	²⁰ 4	²¹ 1	²² 3	²³ 3
²⁴ 7	²⁵ 10	²⁶ 9	²⁷ 12	²⁸ 6	²⁹ 13	³⁰ 5

Messages by day:

April 1 (6 messages)

podofo: heap-based buffer overflow in PoDoFo::PdfPainter::ExpandTabs (PdfPainter.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: heap-based buffer overflow in PoDoFo::PdfSimpleEncoding::ConvertToEncoding (PdfEncoding.cpp) ("Agostino Sarubbo" <ago@...too.org>)
podofo: four null pointer dereference ("Agostino Sarubbo" <ago@...too.org>)
Re: CVE-2017-7184: kernel: Local privilege escalation in XFRM framework (Solar Designer <solar@...nwall.com>)
Re: CVE-2017-7184: kernel: Local privilege escalation in XFRM framework (Solar Designer <solar@...nwall.com>)
Re: CVE-2017-7308: Linux kernel: integer overflow in packet_set_ring (Solar Designer <solar@...nwall.com>)

April 3 (4 messages)

Re: CVE-2017-7308: Linux kernel: integer overflow in packet_set_ring (Martin Prpic <mprpic@...hat.com>)
CVE-2017-7377 Qemu: 9pfs: host memory leakage via v9fs_create (P J P <ppandit@...hat.com>)
CVE-2017-7239: ninka license identification tool: insufficient escaping of external input [vs] (Dirk-Willem van Gulik <dirkx@...weaving.org>)
CVE Request - XStream: DoS when unmarshalling void (Jörg Schaible <joerg.schaible@....de>)

April 4 (8 messages)

CVE-2017-2667: Hammer CLI SSL certificate verification disabled (Dominic Cleal <dominic@...al.org>)
Re: CVE-2017-7184: kernel: Local privilege escalation in XFRM framework (Vladis Dronov <vdronov@...hat.com>)
Xen Security Advisory 212 (CVE-2017-7228) - x86: broken check in memory_exchange() permits PV guest breakout (Xen.org security team <security@....org>)
[CVE-2017-5649] Apache Geode information disclosure vulnerability (Anthony Baker <abaker@...che.org>)
[SECURITY ADVISORY] curl: --write-out out of buffer read (Daniel Stenberg <daniel@...x.se>)
Re: Linux kernel ping socket / AF_LLC connect() sin_family race (Marcus Meissner <meissner@...e.de>)
Django security releases issued: 1.10.7, 1.9.13, and 1.8.18 (Tim Graham <timograham@...il.com>)
Re: Linux kernel ping socket / AF_LLC connect() sin_family race (Kurt Seifried <kseifried@...hat.com>)

April 5 (1 message)

Blind SQL Injection and persistent XSS in Wordpress plugin image-gallery-with-slideshow v1.5.2 ("Larry W. Cashdollar" <larry0@...com>)

April 6 (10 messages)

[OSSA-2017-003] XSS in Horizon federation mappings UI (CVE-2017-7400) (Tristan Cacqueray <tdecacqu@...hat.com>)
libxslt math.random issue (Marcus Meissner <meissner@...e.de>)
Re: libxslt math.random issue (Florian Weimer <fweimer@...hat.com>)
Re: libxslt math.random issue (Hanno Böck <hanno@...eck.de>)
Re: libxslt math.random issue (Marcus Meissner <meissner@...e.de>)
CVE Request: Interger overflow vulnerability in ptp_unpack_OPL function of libmtp (version 1.1.12 and below) (rudykewang(王永科) <rudykewang@...cent.com>)
CVE Request: Interger overflow vulnerability in ptp_unpack_EOS_CustomFuncEx function of libmtp (version 1.1.12 and bel… (rudykewang(王永科) <rudykewang@...ce…)
CVE-2017-2672: Foreman image password disclosure in audit log (Dominic Cleal <dominic@...al.org>)
Re: CVE Request: Interger overflow vulnerability in ptp_unpack_EOS_CustomFuncEx function of libmtp (version 1.1.12 and below) (Agostino Sarubbo <ago@...too.org>)
WebKitGTK+ Security Advisory WSA-2017-0003 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

April 7 (6 messages)

CVE-2017-7578: libming: heap overflow in parser.c (Incomplete fix for CVE-2016-9831) ("Agostino Sarubbo" <ago@...too.org>)
CVE-2017-7572: backintime: usage of deprecated unix-process polkit authorization subject opens a race condition during au… (Matthias Gerstner <mgerstner@...e.de>)
[CVE-2016-6805] Arbitrary File Read due to eXternal Xml Entity attack in Apache Ignite (Denis Magda <dmagda@...che.org>)
Re: libxslt math.random issue (fche@...hat.com (Frank Ch. Eigler))
Re: Re: libxslt math.random issue (Florian Weimer <fweimer@...hat.com>)
Request CVE ID for information disclosure present in ForgeRock OpenIDM 4.0.0 and 4.5.0 (Oliveira Lima <oliveiralimajr@...il.com>)

April 10 (24 messages)

CVE-2017-7592: libtiff: left shift ("Agostino Sarubbo" <ago@...too.org>)
CVE-2017-7593: libtiff: Potential unitialized-memory access from tif_rawdata ("Agostino Sarubbo" <ago@...too.org>)
CVE-2017-7594: libtiff: Direct leak in tif_ojpeg.c ("Agostino Sarubbo" <ago@...too.org>)
libtiff: divide-by-zero in JPEGSetupEncode (tiff_jpeg.c) ("Agostino Sarubbo" <ago@...too.org>)
libtiff: multiple UBSAN crashes ("Agostino Sarubbo" <ago@...too.org>)
libaacplus: signed integer overflow, left shift and assertion failure ("Agostino Sarubbo" <ago@...too.org>)
imagemagick: undefined behavior in coders/rle.c ("Agostino Sarubbo" <ago@...too.org>)
elfutils: heap-based buffer overflow in handle_gnu_hash (readelf.c) ("Agostino Sarubbo" <ago@...too.org>)
elfutils: heap-based buffer overflow in ebl_object_note_type_name (eblobjnotetypename.c) ("Agostino Sarubbo" <ago@...too.org>)
Re: CVE-2017-7592: libtiff: left shift (Simon McVittie <smcv@...ian.org>)
elfutils: memory allocation failure in __libelf_decompress (elf_compress.c) ("Agostino Sarubbo" <ago@...too.org>)
elfutils: heap-based buffer overflow in check_group (elflint.c) ("Agostino Sarubbo" <ago@...too.org>)
elfutils: heap-based buffer overflow in check_symtab_shndx (elflint.c) ("Agostino Sarubbo" <ago@...too.org>)
elfutils: heap-based buffer overflow in check_sysv_hash (elflint.c) ("Agostino Sarubbo" <ago@...too.org>)
elfutils: memory allocation failure in xcalloc (xmalloc.c) ("Agostino Sarubbo" <ago@...too.org>)
binutils: two NULL pointer dereference in elflink.c ("Agostino Sarubbo" <ago@...too.org>)
Re: binutils: two NULL pointer dereference in elflink.c (Marcus Meissner <meissner@...e.de>)
alloca in inline functions can be dangerous ("Jason A. Donenfeld" <Jason@...c4.com>)
web2py: CVE-2016-10321: does not check if a host is denied before verifying passwords (Salvatore Bonaccorso <carnil@...ian.org>)
Re: alloca in inline functions can be dangerous (Leandro Pereira <leandro@...dinfo.org>)
[SECURITY] CVE-2017-5651 Apache Tomcat Information Disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2017-5650 Apache Tomcat Denial of Service (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2017-5648 Apache Tomcat Information Disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2017-5647 Apache Tomcat Information Disclosure (Mark Thomas <markt@...che.org>)

April 11 (1 message)

CVE-2017-2669: Dovecot DoS when passdb dict was used for authentication (Aki Tuomi <aki.tuomi@...ecot.fi>)

April 12 (3 messages)

libsamplerate: global buffer overflow in calc_output_single (src_sinc.c) ("Agostino Sarubbo" <ago@...too.org>)
Re: CVE-2017-7592: libtiff: left shift (Agostino Sarubbo <ago@...too.org>)
Re: CVE-2017-7592: libtiff: left shift (Hanno Böck <hanno@...eck.de>)

April 13 (3 messages)

ISC announces three BIND vulnerabilities (Michael McNally <mcnally@....org>)
Re: CVE Request - XStream: DoS when unmarshalling void (Andrej Nemec <anemec@...hat.com>)
libsndfile: invalid memory READ and invalid memory WRITE in flac_buffer_copy (flac.c) ("Agostino Sarubbo" <ago@...too.org>)

April 14 (3 messages)

Re: CVE-2017-3305 - The Riddle vulnerability in MySQL client (public disclosure) (Pali Rohár <pali.rohar@...il.com>)
Re: alloca in inline functions can be dangerous (Florian Weimer <fw@...eb.enyo.de>)
Re: libsamplerate: global buffer overflow in calc_output_single (src_sinc.c) (Ian Zimmerman <itz@...mate.net>)

April 15 (4 messages)

Re: Re: libsamplerate: global buffer overflow in calc_output_single (src_sinc.c) (Agostino Sarubbo <ago@...too.org>)
Re: Re: libsamplerate: global buffer overflow in calc_output_single (src_sinc.c) (Leo Famulari <leo@...ulari.name>)
Re: alloca in inline functions can be dangerous (Andreas Lausch-Waas <andreas@...usch.at>)
Re: Re: libsamplerate: global buffer overflow in calc_output_single (src_sinc.c) (Nick Boyce <nick.boyce@...il.com>)

April 16 (4 messages)

Re: libsamplerate: global buffer overflow in calc_output_single (src_sinc.c) (Ian Zimmerman <itz@...mate.net>)
MantisBT - Full admin access vulnerability (<7b4xrw+5q6jtt69cnwlw@...rrillamail.com>)
Re: MantisBT - Full admin access vulnerability - CVE-2017-7615 (Damien Regad <dregad@...tisbt.org>)
Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass (Brad Spengler <spender@...ecurity.net>)

April 17 (8 messages)

Re: Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass (Greg KH <gregkh@...uxfoundation.org>)
CVE-2017-5645: Apache Log4j socket receiver deserialization vulnerability (Matt Sicker <mattsicker@...che.org>)
Re: CVE Request: Cap'n Proto: Bounds check elided by compiler optimization (Kenton Varda <kenton@...udflare.com>)
Re: Re: CVE Request: Cap'n Proto: Bounds check elided by compiler optimization (Solar Designer <solar@...nwall.com>)
Additional information for packagers concerning recent BIND security vulnerabilities (ISC Security Officer <security-officer@....org>)
Re: Re: CVE Request: Cap'n Proto: Bounds check elided by compiler optimization (Kenton Varda <kenton@...udflare.com>)
[ANNOUNCE] HPACK Bomb Attack vulnerability in ATS - CVE-2016-5396 (Bryan Call <bcall@...che.org>)
[ANNOUNCE] Chunking and content-length vulnerability in ATS - CVE-2017-5659 (Bryan Call <bcall@...che.org>)

April 18 (6 messages)

[CVE-2017-5662] Apache Batik information disclosure vulnerability ("Simon Steiner" <simonsteiner1984@...il.com>)
[CVE-2017-5661] Apache XML Graphics FOP information disclosure vulnerability ("Simon Steiner" <simonsteiner1984@...il.com>)
New security advisories for Apache CXF (Colm O hEigeartaigh <coheigea@...che.org>)
Re: Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass (Brad Spengler <spender@...ecurity.net>)
CVE-2017-7467: minicom and prl-vzvncserver vt100.c escparms[] buffer overflow (Solar Designer <solar@...nwall.com>)
Re: Apache XML Graphics FOP information disclosure vulnerability (Ian Zimmerman <itz@...mate.net>)

April 19 (7 messages)

[SECURITY ADVISORY] curl: TLS session resumption client cert bypass (again) (Daniel Stenberg <daniel@...x.se>)
CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host (P J P <ppandit@...hat.com>)
CVE-2017-7874 versus CVE-2009-1185 ? (Sebastian Krahmer <krahmer@...e.com>)
CVE-2017-7718 Qemu: display: cirrus: OOB read access issue (P J P <ppandit@...hat.com>)
Re: CVE-2017-7874 versus CVE-2009-1185 ? (Marcus Meissner <meissner@...e.de>)
CVE-2017-7692: Squirrelmail 1.4.22 Remote Code Execution (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)
Re: CVE-2017-7692: Squirrelmail 1.4.22 Remote Code Execution (Dawid Golunski <dawid@...alhackers.com>)

April 20 (4 messages)

CVE-2017-7979: Linux kernel: local DoS via packet action API (Fabian Grünbichler <f.gruenbichler@...xmox.com>)
Directory traversal in dpkg-source via indented patches on non-GNU systems (Guillem Jover <guillem@...ian.org>)
CVE-2017-2575 libbpg: NULL pointer dereference in image_alloc (Andrej Nemec <anemec@...hat.com>)
Cross-Site Request Forgery in WordPress Connection Information (Summer of Pwnage <lists@...urify.nl>)

April 21 (1 message)

CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routines (P J P <ppandit@...hat.com>)

April 22 (3 messages)

CVE Request: podofo: stack overflow in PoDoFo::PdfParser::ReadDocumentStructure(PdfParser.cpp ) (Xiaobo Xiang <xiangxb2112@...il.com>)
Re: CVE Request: podofo: stack overflow in PoDoFo::PdfParser::ReadDocumentStructure(PdfParser.cpp) (Agostino Sarubbo <ago@...too.org>)
Re: CVE Request: podofo: stack overflow in PoDoFo::PdfParser::ReadDocumentStructure(PdfParser.cpp) (Xiaobo Xiang <xiangxb2112@...il.com>)

April 23 (3 messages)

libcroco: heap overflow and undefined behavior (Agostino Sarubbo <ago@...too.org>)
imageworsener: divide-by-zero in iwgif_record_pixel (imagew-gif.c) (Agostino Sarubbo <ago@...too.org>)
imageworsener: multiple vulnerabilities (Agostino Sarubbo <ago@...too.org>)

April 24 (7 messages)

Re: CVE Request: podofo: stack overflow in PoDoFo::PdfParser::ReadDocumentStructure(PdfParser.cpp ) (Andrej Nemec <anemec@...hat.com>)
Re: libcroco: heap overflow and undefined behavior (Marcus Meissner <meissner@...e.de>)
remote DoS via CPU exhaustion in anon FTP server glob expansion (Russ Cox <rsc@...ch.com>)
CVE request: remote heap overflow in linux networking stack ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE request: remote heap overflow in linux networking stack (Solar Designer <solar@...nwall.com>)
SquirrelMail <= 1.4.23 Remote Code Execution (CVE-2017-7692) (Dawid Golunski <dawid@...alhackers.com>)
Re: remote DoS via CPU exhaustion in anon FTP server glob expansion (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)

April 25 (10 messages)

Re: CVE-2017-7692: Squirrelmail 1.4.22 Remote Code Execution (Dawid Golunski <dawid@...alhackers.com>)
Re: SquirrelMail <= 1.4.23 Remote Code Execution (CVE-2017-7692) (Kurt Seifried <kseifried@...hat.com>)
[ANNOUNCE] CVE-2015-7559 - DoS in client via shutdown command (Dejan Bosanac <dejan@...httale.net>)
CVE-2017-7477 kernel: net: Heap overflow in skb_to_sgvec in macsec.c (Andrej Nemec <anemec@...hat.com>)
CVE-2017-8086 Qemu: 9pfs: host memory leakage via v9pfs_list_xattr (P J P <ppandit@...hat.com>)
Re: CVE request: remote heap overflow in linux networking stack (Andrej Nemec <anemec@...hat.com>)
Re: CVE request: remote heap overflow in linux networking stack ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE request: remote heap overflow in linux networking stack ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE request: remote heap overflow in linux networking stack (Andrej Nemec <anemec@...hat.com>)
[OSSA-2017-004] federated user gets wrong role (CVE-2017-2673) (Tristan Cacqueray <tdecacqu@...hat.com>)

April 26 (9 messages)

CVE-2017-3162: Apache Hadoop DataNode web UI vulnerability (Chris Douglas <cdouglas@...che.org>)
CVE-2017-3161: Apache Hadoop NameNode XSS vulnerability (Chris Douglas <cdouglas@...che.org>)
Re: SquirrelMail <= 1.4.23 Remote Code Execution (CVE-2017-7692) (Stuart Gathman <stuart@...hman.org>)
Re: SquirrelMail <= 1.4.23 Remote Code Execution (CVE-2017-7692) (Dimitrios Glynos <dimitris@...sus-labs.com>)
CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2 (P J P <ppandit@...hat.com>)
Re: SquirrelMail <= 1.4.23 Remote Code Execution (CVE-2017-7692) (Dawid Golunski <dawid@...alhackers.com>)
Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: CVE request: remote heap overflow in linux networking stack ("Jason A. Donenfeld" <Jason@...c4.com>)
kedpm: Information leak via the command history file (anarcat@...ngeseeds.org (Antoine Beaupré))

April 27 (12 messages)

Re: SquirrelMail <= 1.4.23 Remote Code Execution (CVE-2017-7692) (Dawid Golunski <dawid@...alhackers.com>)
CVE-2017-8288: gnome-shell may leave extensions enabled in the lock screen (Emilio Pozuelo Monfort <pochu@...ian.org>)
Re: kedpm: Information leak via the command history file (Emilio Pozuelo Monfort <pochu27@...il.com>)
CVE Request: Two memory corruption vulnerabilities ldns 1.7 (Stephan Zeisberg <stephan.zeisberg@...one.com>)
Re: kedpm: Information leak via the command history file (Antoine Beaupré <anarcat@...ngeseeds.org>)
Re: CVE Request: Two memory corruption vulnerabilities ldns 1.7 (Andrej Nemec <anemec@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Solar Designer <solar@...nwall.com>)
Re: MITRE is adding data intake to its CVE ID process (Kurt Seifried <kseifried@...hat.com>)
Re: MITRE is adding data intake to its CVE ID process (Solar Designer <solar@...nwall.com>)
CVE-2017-8291 ghostscript remote code execution (Marcus Meissner <meissner@...e.de>)
CVE-2017-8301: TLS verification vulnerability in LibreSSL 2.5.1 - 2.5.3 (Jakub Jirutka <jakub@...utka.cz>)
Re: MITRE is adding data intake to its CVE ID process (Kash Pande <kash@...pleback.net>)

April 28 (6 messages)

Re: CVE-2017-8283 Directory traversal in dpkg-source via indented patches on non-GNU systems (Guillem Jover <guillem@...ian.org>)
Re: CVE-2017-8291 ghostscript remote code execution (security@...assian.com)
Re: CVE-2017-8291 ghostscript remote code execution (Kurt H Maier <khm@...ops.net>)
Re: CVE-2017-8291 ghostscript remote code execution (Kurt H Maier <khm@...ops.net>)
CVE-2017-7475 Cairo-1.15.4 Denial-of-Service Attack due to Logical Problem in Program (李琪 <pjqruc@...il.com>)
Re: CVE-2017-8291 ghostscript remote code execution (David Black <dblack@...assian.com>)

April 29 (13 messages)

Re: CVE-2017-8291 ghostscript remote code execution (redrain root <rootredrain@...il.com>)
Re: CVE-2017-8291 ghostscript remote code execution (Tavis Ormandy <taviso@...gle.com>)
Re: CVE-2017-8291 ghostscript remote code execution (redrain root <rootredrain@...il.com>)
Re: mupdf: mujstest: stack-based buffer overflow in main (jstest_main.c) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listswf: heap-based buffer overflow in parseSWF_DEFINEFONT (parser.c) (Agostino Sarubbo <ago@...too.org>)
Re: CVE-2017-7578: libming: heap overflow in parser.c (Incomplete fix for CVE-2016-9831) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listswf: NULL pointer dereference in dumpBuffer (read.c) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listswf: heap-based buffer overflow in _iprintf (outputtxt.c) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listmp3: divide-by-zero in printMP3Headers (listmp3.c) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listswf: heap-based buffer overflow in parseSWF_RGBA (parser.c) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listmp3: left shift in listmp3.c (Agostino Sarubbo <ago@...too.org>)
Re: libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c) (Agostino Sarubbo <ago@...too.org>)
SyntaxHighlight MediaWiki extension allows injection of arbitrary Pygments options ("Securify B.V." <lists@...urify.nl>)

April 30 (5 messages)

imageworsener: memory allocation failure in my_mallocfn (imagew-cmd.c) ("Agostino Sarubbo" <ago@...too.org>)
imageworsener: two left shift ("Agostino Sarubbo" <ago@...too.org>)
imageworsener: heap-based buffer overflow in iw_process_cols_to_intermediate (imagew-main.c) ("Agostino Sarubbo" <ago@...too.org>)
Arbitrary file upload vulnerability in Wordpress plugin flickr-picture-backup v0.7 ("Larry W. Cashdollar" <larry0@...com>)
radicale: CVE-2017-8342: prone to timing oracles and simple bruteforce attacks (Salvatore Bonaccorso <carnil@...ian.org>)

171 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.