oss-security mailing list - 2017/05

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2017/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 20	² 7	³ 13	⁴ 3	⁵ 2	⁶	⁷ 4
⁸ 9	⁹ 9	¹⁰ 8	¹¹ 2	¹² 8	¹³	¹⁴ 2
¹⁵ 5	¹⁶ 10	¹⁷ 15	¹⁸ 10	¹⁹ 4	²⁰ 4	²¹
²² 14	²³ 17	²⁴ 1	²⁵ 2	²⁶ 1	²⁷	²⁸ 1
²⁹ 1	³⁰ 28	³¹ 9

Messages by day:

May 1 (20 messages)

libsndfile: global buffer overflow in flac_buffer_copy (flac.c) ("Agostino Sarubbo" <ago@...too.org>)
libsndfile: invalid memory read in flac_buffer_copy (flac.c) ("Agostino Sarubbo" <ago@...too.org>)
libsndfile: heap-based buffer overflow in flac_buffer_copy (flac.c) ("Agostino Sarubbo" <ago@...too.org>)
rzip: heap-based buffer overflow in read_buf (stream.c) ("Agostino Sarubbo" <ago@...too.org>)
libsndfile: global buffer overflow in i2les_array (pcm.c) ("Agostino Sarubbo" <ago@...too.org>)
ettercap: etterfilter: heap-based buffer overflow write ("Agostino Sarubbo" <ago@...too.org>)
libmad: assertion failure in layer3.c ("Agostino Sarubbo" <ago@...too.org>)
libmad: heap-based buffer overflow in mad_layer_III (layer3.c) ("Agostino Sarubbo" <ago@...too.org>)
libmad: heap-based buffer overflow in mad_bit_skip (bit.c) ("Agostino Sarubbo" <ago@...too.org>)
Re: SyntaxHighlight MediaWiki extension allows injection of arbitrary Pygments options (Brian Wolff <bawolff@...il.com>)
telegram-desktop: insecure permission of $HOME/.TelegramDesktop directory ("Agostino Sarubbo" <ago@...too.org>)
libarchive: two heap-based buffer overflow read ("Agostino Sarubbo" <ago@...too.org>)
terminal emulators' processing of escape sequences (Solar Designer <solar@...nwall.com>)
RuboCop: insecure use of /tmp (Jakub Wilk <jwilk@...lk.net>)
Integer Overflow in rxvt ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: terminal emulators' processing of escape sequences (Yves-Alexis Perez <corsac@...ian.org>)
Re: terminal emulators' processing of escape sequences (Yves-Alexis Perez <corsac@...sac.net>)
Re: Integer Overflow in rxvt ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: terminal emulators' processing of escape sequences (Michal Zalewski <lcamtuf@...edump.cx>)
Re: terminal emulators' processing of escape sequences (Robert Święcki <robert@...ecki.net>)

May 2 (7 messages)

Re: terminal emulators' processing of escape sequences (Steve Kemp <steve@...ve.org.uk>)
Xen Security Advisory 214 - grant transfer allows PV guest to elevate privileges (Xen.org security team <security@....org>)
Xen Security Advisory 213 - x86: 64bit PV guest breakout via pagetable use-after-mode-change (Xen.org security team <security@....org>)
Xen Security Advisory 215 - possible memory corruption via failsafe callback (Xen.org security team <security@....org>)
CVE-2017-7645 Linux kernel: nfsd: remote DoS (Ari Kauppi <Ari.Kauppi@...opsys.com>)
CVE-2017-7895 Linux kernel: nfsd: Remote arbitrary memory read (Ari Kauppi <Ari.Kauppi@...opsys.com>)
Re: terminal emulators' processing of escape sequences (Solar Designer <solar@...nwall.com>)

May 3 (13 messages)

CVE-2017-8309 Qemu: audio: host memory leakage via capture buffer (P J P <ppandit@...hat.com>)
CVE-2017-8379 Qemu: input: host memory lekage via keyboard (P J P <ppandit@...hat.com>)
CVE-2017-8380 Qemu: scsi: megasas: out-of-bounds read in megasas_mmio_write (P J P <ppandit@...hat.com>)
Re: terminal emulators' processing of escape sequences (Guido Berhoerster <guido+openwall.com@...hoerster.name>)
Sourcetree arbitrary command execution (redrain root <rootredrain@...il.com>)
Re: terminal emulators' processing of escape sequences (Robert Święcki <robert@...ecki.net>)
[CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15 (Sysdream Labs <labs@...dream.com>)
[CVE-2017-5870] Multiple XSS vulnerabilities in ViMbAdmin (Sysdream Labs <labs@...dream.com>)
Re: Sourcetree arbitrary command execution (Adrien Nader <adrien@...k.org>)
MySQL - Again Riddle vulnerability (public disclosure) (Pali Rohár <pali.rohar@...il.com>)
Re: MySQL - Again Riddle vulnerability (public disclosure) (Pali Rohár <pali.rohar@...il.com>)
rpcbomb: remote rpcbind denial-of-service (Guido Vranken <guidovranken@...il.com>)
[white-paper] Pwning PHP mail() function For Fun And RCE (ver 1.0) (Dawid Golunski <dawid@...alhackers.com>)

May 4 (3 messages)

Re: rpcbomb: remote rpcbind denial-of-service (Seth Arnold <seth.arnold@...onical.com>)
Re: [white-paper] Pwning PHP mail() function For Fun And RCE (ver 1.0) (Sam Pizzey <sam@...zey.me>)
Re: rpcbomb: remote rpcbind denial-of-service (Guido Vranken <guidovranken@...il.com>)

May 5 (2 messages)

Re: rpcbomb: remote rpcbind denial-of-service (Marcus Meissner <meissner@...e.de>)
Re: rpcbomb: remote rpcbind denial-of-service (Florian Weimer <fweimer@...hat.com>)

May 7 (4 messages)

libpcre: heap-based buffer overflow write in pcre2test.c ("Agostino Sarubbo" <ago@...too.org>)
Re: [white-paper] Pwning PHP mail() function For Fun And RCE (ver 1.0) (Kash Pande <kash@...pleback.net>)
Re: rpcbomb: remote rpcbind denial-of-service (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [white-paper] Pwning PHP mail() function For Fun And RCE (ver 1.0) (Dawid Golunski <dawid@...alhackers.com>)

May 8 (9 messages)

Reminder about CVE process? ("Perry E. Metzger" <perry@...rmont.com>)
Re: terminal emulators' processing of escape sequences (Shiz <hi@...z.me>)
CVE updates: fixes in Apache Atlas 0.7.1-incubating (Madhan Neethiraj <madhan@...che.org>)
Re: Reminder about CVE process? (Cliff Perry <cperry@...hat.com>)
Re: terminal emulators' processing of escape sequences (Ryan Munz <gcoc.devops@...il.com>)
libetpan: NULL dereference vulnerability ("Perry E. Metzger" <perry@...rmont.com>)
Re: remote DoS via CPU exhaustion in anon FTP server glob expansion (Russ Cox <rsc@...ch.com>)
Re: Re: remote DoS via CPU exhaustion in anon FTP server glob expansion (Kurt Seifried <kseifried@...hat.com>)
Re: rpcbomb: remote rpcbind denial-of-service (Florian Weimer <fweimer@...hat.com>)

May 9 (9 messages)

lxterminal: insecurely uses /tmp for a socket file (Medical Wei <mwei@...e.org>)
lrzip: divide-by-zero in bufRead::get (libzpaq.h) ("Agostino Sarubbo" <ago@...too.org>)
lrzip: NULL pointer dereference in bufRead::get (libzpaq.h) ("Agostino Sarubbo" <ago@...too.org>)
lrzip: NULL pointer dereference in join_pthread (stream.c) ("Agostino Sarubbo" <ago@...too.org>)
lrzip: invalid memory read in lzo_decompress_buf (stream.c) ("Agostino Sarubbo" <ago@...too.org>)
lrzip: heap-based buffer overflow write in read_1g (stream.c) ("Agostino Sarubbo" <ago@...too.org>)
lrzip: use-after-free in read_stream (stream.c) ("Agostino Sarubbo" <ago@...too.org>)
Numerous FreeTDS crashes fixed on master (Brandon Perry <bperry.volatile@...il.com>)
CVE-2016-6799: Internal system information leak (Simon MacDonald <macdonst@...che.org>)

May 10 (8 messages)

CVE Request: Denial of Service in Dropbox lepton (Insu Yun <wuninsu@...il.com>)
Re: CVE Request: Denial of Service in Dropbox lepton (Seth Arnold <seth.arnold@...onical.com>)
generic kde LPE (Sebastian Krahmer <krahmer@...e.com>)
Re: generic kde LPE (Simon McVittie <smcv@...ian.org>)
Re: CVE Request: Denial of Service in Dropbox lepton (Insu Yun <wuninsu@...il.com>)
Dolibarr ERP & CRM - Multiple Issues (FOXMOLE Advisories <advisories@...mole.com>)
Re: Numerous FreeTDS crashes fixed on master (Brandon Perry <bperry.volatile@...il.com>)
Re: CVE-2017-7308: Linux kernel: integer overflow in packet_set_ring (Andrey Konovalov <andreyknvl@...gle.com>)

May 11 (2 messages)

CVE-2017-7472 Linux kernel: KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Vladis Dronov <vdronov@...hat.com>)
CVE-2017-8798 - miniupnpc integer signedness error when parsing a chunked encoded http response ("oststrom \(public\)" <pub@...strom.com>)

May 12 (8 messages)

Xen Security Advisory 213 (CVE-2017-8903) - x86: 64bit PV guest breakout via pagetable use-after-mode-change (Xen.org security team <security@....org>)
Xen Security Advisory 215 (CVE-2017-8905) - possible memory corruption via failsafe callback (Xen.org security team <security@....org>)
Xen Security Advisory 214 (CVE-2017-8904) - grant transfer allows PV guest to elevate privileges (Xen.org security team <security@....org>)
CVE-2017-7487: Linux kernel: ipx: call ipxitf_put() in ioctl error path (Vladis Dronov <vdronov@...hat.com>)
Multiple crashes in OpenEXR (Brandon Perry <bperry.volatile@...il.com>)
Re: Multiple crashes in OpenEXR (Henri Salo <henri@...v.fi>)
Re: Multiple crashes in OpenEXR (Brandon Perry <bperry.volatile@...il.com>)
CVE-2017-8921: directory traversal vulnerability in FlightGear (Florent Rougon <f.rougon@...e.fr>)

May 14 (2 messages)

Kernel 4.1.y might not contain patches for CVE-2016-10229 (Yury German <yury@...hnologysecure.com>)
Re: Kernel 4.1.y might not contain patches for CVE-2016-10229 (Greg KH <greg@...ah.com>)

May 15 (5 messages)

Invalid writes and reads in libxml2 (Marcel Böhme <boehme.marcel@...il.com>)
CVE-2017-7495 kernel : information leak on ext4 when hardware reset. (Wade Mealing <wmealing@...hat.com>)
CVE-2017-8933 libmenu-cache: socket may be blocked by another user (Yao Wei <mwei@...e.org>)
CVE-2017-8934 pcmanfm: single instance socket may be blocked by another user (Yao Wei <mwei@...e.org>)
Re: CVE-2017-8934 pcmanfm: single instance socket may be blocked by another user (Guido Berhoerster <guido+openwall.com@...hoerster.name>)

May 16 (10 messages)

NetBSD/pkgsrc membership on distros list (Solar Designer <solar@...nwall.com>)
Two new security advisories for Apache CXF Fediz (Colm O hEigeartaigh <coheigea@...che.org>)
Re: NetBSD/pkgsrc membership on distros list (Alistair Crooks <agc@...src.org>)
Re: NetBSD/pkgsrc membership on distros list (Solar Designer <solar@...nwall.com>)
Re: NetBSD/pkgsrc membership on distros list (christos@...las.com (Christos Zoulas))
Re: NetBSD/pkgsrc membership on distros list (christos@...las.com (Christos Zoulas))
Re: NetBSD/pkgsrc membership on distros list (Alistair Crooks <agc@...src.org>)
Re: NetBSD/pkgsrc membership on distros list (Solar Designer <solar@...nwall.com>)
Re: Integer Overflow in rxvt ("Jason A. Donenfeld" <zx2c4@...too.org>)
Re: terminal emulators' processing of escape sequences (Solar Designer <solar@...nwall.com>)

May 17 (15 messages)

Re: terminal emulators' processing of escape sequences (Robert Święcki <robert@...ecki.net>)
Re: terminal emulators' processing of escape sequences (Marc Lehmann <schmorp@...morp.de>)
Re: terminal emulators' processing of escape sequences ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: terminal emulators' processing of escape sequences (Dominique Martinet <asmadeus@...ewreck.org>)
Re: terminal emulators' processing of escape sequences (Robert Święcki <robert@...ecki.net>)
CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode (P J P <ppandit@...hat.com>)
Re: terminal emulators' processing of escape sequences (Solar Designer <solar@...nwall.com>)
Defense in depth patch for rxvt-unicode ("Jason A. Donenfeld" <Jason@...c4.com>)
AW: terminal emulators' processing of escape sequences (Fiedler Roman <Roman.Fiedler@....ac.at>)
Re: terminal emulators' processing of escape sequences (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: Cross-Site Request Forgery in WordPress Connection Information (Summer of Pwnage <lists@...urify.nl>)
rxvt-unicode "insecure" setting [Was: terminal emulators' processing of escape sequences] (Ian Zimmerman <itz@...mate.net>)
Re: Dolibarr ERP & CRM - Multiple Issues (Stefan Pietsch <stefan.pietsch@...mole.com>)
Re: Dolibarr ERP & CRM - Multiple Issues (Brandon Perry <bperry.volatile@...il.com>)
Re: terminal emulators' processing of escape sequences (Simon Lees <sflees@...e.de>)

May 18 (10 messages)

Re: terminal emulators' processing of escape sequences (Robert Święcki <robert@...ecki.net>)
Re: terminal emulators' processing of escape sequences (Robert Święcki <robert@...ecki.net>)
Re: Defense in depth patch for rxvt-unicode (Marc Lehmann <schmorp@...morp.de>)
Re: terminal emulators' processing of escape sequences (Marc Lehmann <schmorp@...morp.de>)
Re: Defense in depth patch for rxvt-unicode ("Jason A. Donenfeld" <Jason@...c4.com>)
libytnef: CVE-2017-9058: heap-based buffer overflow in SIZECHECK (ytnef.c) (Sébastien Delafond <seb@...ian.org>)
binutils: multiple crashes ("Agostino Sarubbo" <ago@...too.org>)
Re: terminal emulators' processing of escape sequences (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Deluge: CVE-2017-9031: WebUI component: directory traversal vulnerability (Salvatore Bonaccorso <carnil@...ian.org>)
jUDDI Security Bulletin ("Alex O'Ree" <alexoree@...che.org>)

May 19 (4 messages)

CVE-2017-9060 Qemu: virtio-gpu: host memory leakage in Virtio GPU device (P J P <ppandit@...hat.com>)
Re: terminal emulators' processing of escape sequences (Tavis Ormandy <taviso@...xchg8b.com>)
Re: terminal emulators' processing of escape sequences (Yui Hirasawa <yui@...k.li>)
[SECURITY] CVE-2017-5657: Apache Archiva CSRF vulnerability for REST endpoints (Martin <martin_s@...che.org>)

May 20 (4 messages)

ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Salvatore Bonaccorso <carnil@...ian.org>)
Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Ian Zimmerman <itz@...mate.net>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Leo Famulari <leo@...ulari.name>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)

May 22 (14 messages)

Re: Invalid writes and reads in libxml2 (Manh Dung Nguyen <dungnguy@...p.nus.edu.sg>)
Code Execution through a variety Java (Un-)Marshallers (Moritz Bechler <mbechler@...terphace.org>)
Re: Multiple crashes in OpenEXR (Brandon Perry <bperry.volatile@...il.com>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Jodie Cunningham <jodie.cunningham@...il.com>)
How to request a CVE for open source projects (Michael Catanzaro <mcatanzaro@...lia.com>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Thomas Deutschmann <whissi@...too.org>)
Re: How to request a CVE for open source projects (Marcus Meissner <meissner@...e.de>)
Re: How to request a CVE for open source projects (Jeremy Stanley <jeremy@...nstack.org>)
Re: How to request a CVE for open source projects (Kurt Seifried <kseifried@...hat.com>)
Re: How to request a CVE for open source projects (Anthony Sasadeusz <sasadeu1@...c.edu>)
Re: How to request a CVE for open source projects (Kurt H Maier <khm@...ops.net>)
Re: How to request a CVE for open source projects (Martin <martin.gubri@...masoft.org>)
Re: How to request a CVE for open source projects (Kurt Seifried <kseifrie@...hat.com>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)

May 23 (17 messages)

Re: How to request a CVE for open source projects (Kurt H Maier <khm@...ops.net>)
Re: How to request a CVE for open source projects (Kurt Seifried <kseifried@...hat.com>)
Re: How to request a CVE for open source projects (Kurt Seifried <kseifried@...hat.com>)
Re: How to request a CVE for open source projects (Kurt H Maier <khm@...ops.net>)
Re: How to request a CVE for open source projects (Kurt Seifried <kseifried@...hat.com>)
Re: How to request a CVE for open source projects (Kurt H Maier <khm@...ops.net>)
Re: How to request a CVE for open source projects ("Perry E. Metzger" <perry@...rmont.com>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Solar Designer <solar@...nwall.com>)
imageworsener: multiple vulnerabilities ("Agostino Sarubbo" <ago@...too.org>)
qpdf: three infinite loop in libqpdf ("Agostino Sarubbo" <ago@...too.org>)
autotrace: multiple vulnerabilities (The autotrace nightmare) ("Agostino Sarubbo" <ago@...too.org>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Thomas Deutschmann <whissi@...too.org>)
[CVE-2017-5868] OpenVPN Access Server : CRLF injection with Session fixation (Sydream Labs <labs@...dream.com>)
Re: Re: ImageMagick: CVE-2017-9098: use of uninitialized memory in RLE decoder (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: How to request a CVE for open source projects (Kurt Seifried <kseifried@...hat.com>)
Linux lp.c Out-of-Bounds Write via Kernel Command-line (CVE-2017-1000363) (Roee Hay <roeehay@...il.com>)
CVE updates: fixes in Apache Atlas 0.8-incubating (Madhan Neethiraj <madhan@...che.org>)

May 24 (1 message)

CVE-2016-3083: Apache Hive SSL vulnerability bug disclosure (Vaibhav Gumashta <vgumashta@...tonworks.com>)

May 25 (2 messages)

WebKitGTK+ Security Advisory WSA-2017-0004 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
independent volunteers on distros list (Solar Designer <solar@...nwall.com>)

May 26 (1 message)

[ANNOUNCE] CVE-2017-5646: Apache Knox Impersonation Issue for WebHDFS (larry mccay <lmccay@...che.org>)

May 28 (1 message)

Gajim: CVE-2016-10376: possible to remote extract plain-text from encrypted sessions (Salvatore Bonaccorso <carnil@...ian.org>)

May 29 (1 message)

CVE-2017-9148 FreeRADIUS TLS resumption authentication bypass (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)

May 30 (28 messages)

Re: independent volunteers on distros list (Josh Bressers <josh@...ss.net>)
Linux kernel: stack buffer overflow with controlled payload in get_options() function (Ilya Matveychikov <matvejchikov@...il.com>)
Blind SQL Injection in Wordpress plugin eventr v1.02.2 ("Larry W. Cashdollar" <larry0@...com>)
SQL Injection in Wordpress plugin surveys v1.01.8 ("Larry W. Cashdollar" <larry0@...com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Simon McVittie <smcv@...ian.org>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Florian Weimer <fweimer@...hat.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Florian Weimer <fweimer@...hat.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Florian Weimer <fweimer@...hat.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function ("kseifried@...hat.com" <kseifried@...hat.com>)
Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux (Qualys Security Advisory <qsa@...lys.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux (Hanno Böck <hanno@...eck.de>)
Re: Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux ("kseifried@...hat.com" <kseifried@...hat.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Kurt Seifried <kseifried@...hat.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: stack buffer overflow with controlled payload in get_options() function (Daniel Micay <danielmicay@...il.com>)
Linux kernel: memory corruptions in IPv4/IPv6 TCP/SCTP/DCCP sockets (Andrey Konovalov <andreyknvl@...gle.com>)
Linux kernel: CVE-2017-9242: out-of-bounds write in __ip6_append_data (Andrey Konovalov <andreyknvl@...gle.com>)
Linux kernel: CVE-2017-9074: out-of-bounds read in ip6_fragment (Andrey Konovalov <andreyknvl@...gle.com>)
Re: CVE-2016-3083: Apache Hive SSL vulnerability bug disclosure (Sergio Pena <sergio.pena@...udera.com>)
Blind SQL Injection in Wordpress Plugin Easy Team Manager v1.3.2 ("Larry W. Cashdollar" <larry0@...com>)

May 31 (9 messages)

CVE-2017-9310 Qemu: net: infinite loop in e1000e NIC emulation (P J P <ppandit@...hat.com>)
CVE request form not working (Peter Bex <peter@...e-magic.net>)
Re: CVE request form not working (Agostino Sarubbo <ago@...too.org>)
Re: CVE request form not working (Peter Bex <peter@...e-magic.net>)
I found Crash in tcpdump and radare2. (Qhdwns123 <qhdwns123@...tonmail.com>)
Re: I found Crash in tcpdump and radare2. (Hanno Böck <hanno@...eck.de>)
Re: I found Crash in tcpdump and radare2. (Solar Designer <solar@...nwall.com>)
Information on recent sqlite3 issues? (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Information on recent sqlite3 issues? (Andreas Stieger <astieger@...e.com>)

209 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.