oss-security mailing list - 2017/11

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2017/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 16	² 8	³ 20	⁴ 2	⁵ 8
⁶ 16	⁷ 11	⁸ 10	⁹ 5	¹⁰ 2	¹¹ 2	¹²
¹³ 12	¹⁴ 8	¹⁵ 6	¹⁶ 2	¹⁷ 7	¹⁸ 5	¹⁹ 1
²⁰ 1	²¹ 4	²² 9	²³ 4	²⁴ 3	²⁵ 3	²⁶ 2
²⁷ 5	²⁸ 10	²⁹ 5	³⁰ 9

Messages by day:

November 1 (16 messages)

Re: Fw: Security risk of vim swap files (Leonid Isaev <leonid.isaev@...a.colorado.edu>)
Re: Fw: Security risk of vim swap files (Jan Pokorný <jpokorny@...hat.com>)
CVE-2017-16231: PCRE 8.41 match() stack overflow; CVE-2017-16232: LibTIFF 4.0.8 memory leaks ("旺仔" <16362505@...com>)
Re: Fw: Security risk of vim swap files (Simon McVittie <smcv@...ian.org>)
Re: Fw: Security risk of vim swap files (Tim <tim-security@...tinelchicken.org>)
Re: Fw: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: CVE-2017-16231: PCRE 8.41 match() stack overflow; CVE-2017-16232: LibTIFF 4.0.8 memory leaks (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: CVE-2017-16231: PCRE 8.41 match() stack overflow; CVE-2017-16232: LibTIFF 4.0.8 memory leaks (Agostino Sarubbo <ago@...too.org>)
Re: Fw: Security risk of vim swap files (Z5T1 <z5t1@...1.com>)
Re: Fw: Security risk of vim swap files (Jeffrey Walton <noloader@...il.com>)
Re: CVE-2017-16231: PCRE 8.41 match() stack overflow; CVE-2017-16232: LibTIFF 4.0.8 memory leaks (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Fw: Security risk of vim swap files (Michael Orlitzky <michael@...itzky.com>)
Re: Fw: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: Fw: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
[CVE-2016-4437] Apache Aurora information disclosure vulnerability (Bill Farner <wfarner@...che.org>)

November 2 (8 messages)

Re: Re: Fw: Security risk of vim swap files (Florent Rougon <f.rougon@...e.fr>)
Re: Fw: Security risk of vim swap files (Leonid Isaev <leonid.isaev@...a.colorado.edu>)
CVE-2017-15095: further deserialisation attacks against jackson-databind (follow-up to CVE-2017-7525) (Doran Moppert <dmoppert@...hat.com>)
CVE-2017-12193 Linux kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation (Wade Mealing <wmealing@...hat.com>)
Linux Security Summit 2017 Summary (James Morris <jmorris@...ei.org>)
tftpd-hpa - insecure chroot() (gremlin@...mlin.ru)
Re: Fw: Security risk of vim swap files (Christian Brabandt <cb@...bit.org>)
Many issues in "module" / "track" music decoders... (Lionel Debroux <lionel_debroux@...oo.fr>)

November 3 (20 messages)

Re: Re: Fw: Security risk of vim swap files (Kurt Seifried <kseifried@...hat.com>)
Re: tftpd-hpa - insecure chroot() ("Dmitry V. Levin" <ldv@...linux.org>)
Security risk of server side text editing in general and vim.tiny specifically (Fiedler Roman <Roman.Fiedler@....ac.at>)
[CVE-2017-15672]: ffmpeg: read out of bounds of buffer when it parsing an craft mp4 file. (连一汉 <lianyihan@....cn>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Jakub Wilk <jwilk@...lk.net>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Solar Designer <solar@...nwall.com>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Fiedler Roman <Roman.Fiedler@....ac.at>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Fiedler Roman <Roman.Fiedler@....ac.at>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Solar Designer <solar@...nwall.com>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Solar Designer <solar@...nwall.com>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Fiedler Roman <Roman.Fiedler@....ac.at>)
Re: Re: Fw: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: Re: Fw: Security risk of vim swap files (Scott Court <z5t1@...1.com>)
Re: Security risk of server side text editing in general and vim.tiny specifically (Ian Zimmerman <itz@...y.loosely.org>)
Re: Re: Fw: Security risk of vim swap files (Nick Bowler <nbowler@...conx.ca>)
Re: Fw: Security risk of vim swap files (Christian Brabandt <cb@...bit.org>)
Re: Fw: Security risk of vim swap files (Christian Brabandt <cb@...bit.org>)
nvi crash recovery (was Re: Re: Security risk of server side text editing in general and vim.tiny specifically) (Hanno Böck <hanno@...eck.de>)
Re: nvi crash recovery (Jakub Wilk <jwilk@...lk.net>)
Re: nvi crash recovery (was Re: Re: Security risk of server side text editing in general and vim.tiny specifically) (Daniel Micay <danielmicay@...il.com>)

November 4 (2 messages)

Re: Re: Security risk of server side text editing in general and vim.tiny specifically (christos@...las.com (Christos Zoulas))
Re: nvi crash recovery (Jakub Wilk <jwilk@...lk.net>)

November 5 (8 messages)

Re: Security risk of server side text editing in general and vim.tiny specifically (Leonid Isaev <leonid.isaev@...a.colorado.edu>)
Re: Re: CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok() (up201407890@...nos.dcc.fc.up.pt)
Foreman 1.2+ stored XSS in fact charts (Tomer Brisker <tbrisker@...hat.com>)
Re: Re: CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok() (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Christian Brabandt <cb@...bit.org>)
Re: Fw: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: Fw: Security risk of vim swap files (Scott Court <z5t1@...1.com>)

November 6 (16 messages)

Re: Fw: Security risk of vim swap files (Kurt Seifried <kseifried@...hat.com>)
Re: Security risk of vim swap files (Ian Zimmerman <itz@...y.loosely.org>)
Re: Fw: Security risk of vim swap files (Christian Brabandt <cb@...bit.org>)
Re: Fw: Security risk of vim swap files (Christian Brabandt <cb@...bit.org>)
AW: Re: Security risk of server side text editing in general and vim.tiny specifically (Fiedler Roman <Roman.Fiedler@....ac.at>)
CVE-2017-15306: Linux kernel: KVM: PPC: Fix oops when checking KVM_CAP_PPC_HTM (Michael Ellerman <mpe@...erman.id.au>)
Re: Fw: Security risk of vim swap files (Michael Orlitzky <michael@...itzky.com>)
Linux kernel: multiple vulnerabilities in the USB subsystem (Andrey Konovalov <andreyknvl@...il.com>)
Race condition between UDP bind(2) and connect(2) delivers wrong datagrams (Jonas 'Sortie' Termansen <sortie@...si.org>)
Re: Race condition between UDP bind(2) and connect(2) delivers wrong datagrams (Florian Weimer <fweimer@...hat.com>)
Re: tftpd-hpa - insecure chroot() (gremlin@...mlin.ru)
Re: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
Re: [CVE-2017-15186]: ffmpeg: Double free when ffmpeg parsing an craft AVI file to MKV file using ffvhuff decoder (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: Fw: Security risk of vim swap files (Seth Arnold <seth.arnold@...onical.com>)

November 7 (11 messages)

Re: Re: CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok() (up201407890@...nos.dcc.fc.up.pt)
Re: Security risk of vim swap files (Matthias Luft <uchimata@....de>)
Re: Race condition between UDP bind(2) and connect(2) delivers wrong datagrams (John Haxby <john.haxby@...cle.com>)
Net::Ping::External command injections (Matthias Weckbecker <matthias@...kbecker.name>)
Re: Net::Ping::External command injections (Charlie Brady <charlieb-oss-security@...ge.apana.org.au>)
Re: Net::Ping::External command injections (Simon McVittie <smcv@...ian.org>)
CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Vladis Dronov <vdronov@...hat.com>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Greg KH <greg@...ah.com>)
Re: Fw: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: Net::Ping::External command injections (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver ("Maier, Kurt H" <kurt.maier@...l.gov>)

November 8 (10 messages)

Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Greg KH <greg@...ah.com>)
Re: Linux kernel: multiple vulnerabilities in the USB subsystem (Andrey Konovalov <andreyknvl@...il.com>)
[SECURITY] CVE-2017-3166: Apache Hadoop Privilege escalation vulnerability (Akira Ajisaka <aajisaka@...che.org>)
Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: Linux kernel: multiple vulnerabilities in the USB subsystem (Solar Designer <solar@...nwall.com>)
Re: Race condition between UDP bind(2) and connect(2) delivers wrong datagrams (Jonas 'Sortie' Termansen <sortie@...si.org>)
Re: Race condition between UDP bind(2) and connect(2) delivers wrong datagrams (Eric Blake <eblake@...hat.com>)
Re: Race condition between UDP bind(2) and connect(2) delivers wrong datagrams (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Back in Time: CVE-2017-16667: shell injection in notify-send (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [CVE-2017-14604] .desktop vulnerability again (Michael Orlitzky <michael@...itzky.com>)

November 9 (5 messages)

nvi denial of service (coypu@....org)
Re: [CVE-2017-14604] .desktop vulnerability again (Robert Watson <robertcwatson1@...il.com>)
Re: nvi denial of service (Jakub Wilk <jwilk@...lk.net>)
Re: [CVE-2017-14604] .desktop vulnerability again (Simon McVittie <smcv@...ian.org>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver ("David A. Wheeler" <dwheeler@...eeler.com>)

November 10 (2 messages)

WebKitGTK+ Security Advisory WSA-2017-0009 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Stiepan <stie@....swiss>)

November 11 (2 messages)

Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Amos Jeffries <squid3@...enet.co.nz>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Stuart Gathman <stuart@...hman.org>)

November 13 (12 messages)

Re: Security risk of server side text editing in general and vim.tiny specifically (Solar Designer <solar@...nwall.com>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Vladis Dronov <vdronov@...hat.com>)
AW: Security risk of server side text editing in general and vim.tiny specifically (Fiedler Roman <Roman.Fiedler@....ac.at>)
(linux-)distros list use statistics (Solar Designer <solar@...nwall.com>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Greg KH <greg@...ah.com>)
Re: (linux-)distros list use statistics (Anthony Liguori <anthony@...emonkey.ws>)
Re: (linux-)distros list use statistics (Kristian Fiskerstrand <k_f@...too.org>)
Re: (linux-)distros list use statistics (Solar Designer <solar@...nwall.com>)
Re: (linux-)distros list use statistics (Kristian Fiskerstrand <k_f@...too.org>)
Re: (linux-)distros list use statistics (Kristian Fiskerstrand <k_f@...too.org>)
Re: (linux-)distros list use statistics (Kristian Fiskerstrand <k_f@...too.org>)
Re: (linux-)distros list use statistics (Solar Designer <solar@...nwall.com>)

November 14 (8 messages)

Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver ("David A. Wheeler" <dwheeler@...eeler.com>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Greg KH <greg@...ah.com>)
New security advisory CVE-2017-12624 released for Apache CXF (Colm O hEigeartaigh <coheigea@...che.org>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Brad Spengler <spender@...ecurity.net>)
[OSSA-2017-005] Nova Filter Scheduler bypass through rebuild action (CVE-2017-16239) (Tristan Cacqueray <tdecacqu@...hat.com>)
Apache CouchDB CVE-2017-12635 and CVE-2017-12636 (Joan Touzet <wohali@...che.org>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver (Eddie Chapman <eddie@...k.net>)
Re: CVE-2017-15102: Linux kernel: usb: NULL-deref due to a race condition in [legousbtower] driver ("Maier, Kurt H" <kurt.maier@...l.gov>)

November 15 (6 messages)

CVE-2017-15115: Linux kernel: sctp: use-after-free in sctp_cmp_addr_exact() (Vladis Dronov <vdronov@...hat.com>)
[SECURITY] New security advisory CVE-2017-12634 released for Apache Camel (Andrea Cosentino <ancosen1985@...oo.com>)
[SECURITY] New security advisory CVE-2017-12633 released for Apache Camel (Andrea Cosentino <ancosen1985@...oo.com>)
Xen Security Advisory 243 (CVE-2017-15592) - x86: Incorrect handling of self-linear shadow mappings with translated gue… (Xen.org security team <security@....org…)
collectd: CVE-2017-16820: snmp-plugin: double free of request PDU (Salvatore Bonaccorso <carnil@...ian.org>)
Re: collectd: CVE-2017-16820: snmp-plugin: double free of request PDU (Salvatore Bonaccorso <carnil@...ian.org>)

November 16 (2 messages)

CVE-2017-16834: pnp4nagios root privilege escalation via insecure permissions (Michael Orlitzky <michael@...itzky.com>)
Reflected Cross-Site Scripting Vulnerability in Jenkins Delivery Pipeline Plugin (Daniel Beck <ml@...kweb.net>)

November 17 (7 messages)

CVE-2017-16845 Qemu: ps2: information leakage via post_load routine (P J P <ppandit@...hat.com>)
Re: Security risk of server side text editing ... (Bram Moolenaar <Bram@...lenaar.net>)
phusion passenger CVE-2017-1000384 (Kurt Seifried <kseifried@...hat.com>)
Re: phusion passenger CVE-2017-1000384 (John Lightsey <jd@...nel.net>)
Re: phusion passenger CVE-2017-1000384 (Jakub Wilk <jwilk@...lk.net>)
Re: phusion passenger CVE-2017-1000384 (John Lightsey <jd@...nel.net>)
Re: phusion passenger CVE-2017-1000384 (Dave Horsfall <dave@...sfall.org>)

November 18 (5 messages)

Re: Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Re: Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Re: Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: Reflected Cross-Site Scripting Vulnerability in Jenkins Delivery Pipeline Plugin (Daniel Beck <ml@...kweb.net>)

November 19 (1 message)

CVE-2017-16882: Icinga core root privilege escalation via insecure permissions (Michael Orlitzky <michael@...itzky.com>)

November 20 (1 message)

Re: distros list archive (Solar Designer <solar@...nwall.com>)

November 21 (4 messages)

Re: Fw: Security risk of vim swap files (Matthias Weckbecker <matthias@...kbecker.name>)
Re: phusion passenger CVE-2017-1000384 (Tomas Hoger <thoger@...hat.com>)
Re: phusion passenger CVE-2017-1000384 (John Lightsey <jd@...nel.net>)
Go programming language invalid modular exponentiation result (Exp() in math/big pkg) (Guido Vranken <guidovranken@...il.com>)

November 22 (9 messages)

Re: CVE-2017-16845 Qemu: ps2: information leakage via post_load routine (Ian Zimmerman <itz@...y.loosely.org>)
Re: Re: CVE-2017-16845 Qemu: ps2: information leakage via post_load routine (P J P <ppandit@...hat.com>)
Re: Go programming language invalid modular exponentiation result (Exp() in math/big pkg) (Peter Bex <peter@...e-magic.net>)
Re: Go programming language invalid modular exponentiation result (Exp() in math/big pkg) (Guido Vranken <guidovranken@...il.com>)
Re: Go programming language invalid modular exponentiation result (Exp() in math/big pkg) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Go programming language invalid modular exponentiation result (Exp() in math/big pkg) (Chad Dougherty <dougherty477@...cast.net>)
Clickjacking vulnerability in CSRF error page pfSense ("Securify B.V." <lists@...urify.nl>)
Re: Security risk of server side text editing ... (Solar Designer <solar@...nwall.com>)
Re: Re: Security risk of server side text editing ... (Kurt Seifried <kseifrie@...hat.com>)

November 23 (4 messages)

xrdp: CVE-2017-16927: Buffer-overflow in scp_v0s_accept function in session manager (Salvatore Bonaccorso <carnil@...ian.org>)
Re: exiv2: multiple memory safety issues (Raphael Hertzog <hertzog@...ian.org>)
Re: exiv2: multiple memory safety issues (Antoine Beaupré <anarcat@...ngeseeds.org>)
OpenDayLight: Password change doesn't result in Karaf clearing cache, allowing old password to still be used (CVE-2017-1000406) (Luke Hinds <lhinds@...hat.com>)

November 24 (3 messages)

New Linux kernel XFRM privilege escalation (Marcus Meissner <meissner@...e.de>)
Re: New Linux kernel XFRM privilege escalation (Greg KH <greg@...ah.com>)
Re: New Linux kernel XFRM privilege escalation (Marcus Meissner <meissner@...e.de>)

November 25 (3 messages)

Re: RCE in Exim reported (Phil Pennock <phil.pennock@...dhuis.org>)
RCE in Exim reported (Phil Pennock <oss-security-phil@...dhuis.org>)
Re: RCE in Exim reported (Phil Pennock <oss-security-phil@...dhuis.org>)

November 26 (2 messages)

Re: RCE in Exim reported (Leo Famulari <leo@...ulari.name>)
Re: RCE in Exim reported (Heiko Schlittermann <hs@...littermann.de>)

November 27 (5 messages)

PowerDNS Security Advisories 2017-03, 2017-04, 2017-05, 2017-06 and 2017-07 (Remi Gacogne <remi.gacogne@...erdns.com>)
Re: Re: Security risk of server side text editing ... (Scott Court <z5t1@...1.com>)
Information Leak in mincore() in the Linux Kernel CVE-2017-16994 (Marcus Meissner <meissner@...e.de>)
Re: Security risk of server side text editing ... (Solar Designer <solar@...nwall.com>)
Re: Re: Security risk of server side text editing ... (Simon McVittie <smcv@...ian.org>)

November 28 (10 messages)

Xen Security Advisory 246 - x86: infinite loop due to missing PoD error checking (Xen.org security team <security@....org>)
Xen Security Advisory 247 - Missing p2m error checking in PoD code (Xen.org security team <security@....org>)
Re: Security risk of server side text editing ... (Bram Moolenaar <Bram@...lenaar.net>)
Re: Re: Security risk of server side text editing ... (Bram Moolenaar <Bram@...lenaar.net>)
Re: Re: Security risk of server side text editing ... (Leonid Isaev <leonid.isaev@...a.colorado.edu>)
CVE-2017-16612 libXcursor: heap overflows when parsing malicious files (Matthieu Herrb <matthieu.herrb@...s.fr>)
CVE-2017-16611 libXfont Open files with O_NOFOLLOW (Matthieu Herrb <matthieu.herrb@...s.fr>)
CVE-2017-15118 Qemu: stack buffer overflow in NBD server triggered via long export name (P J P <ppandit@...hat.com>)
CVE-2017-15119 Qemu: DoS via large option request (P J P <ppandit@...hat.com>)
CVE-2017-16943 CVE-2017-16944 (Was:RCE in Exim reported) (Heiko Schlittermann <hs@...littermann.de>)

November 29 (5 messages)

Re: Re: Security risk of server side text editing ... (Michael Orlitzky <michael@...itzky.com>)
[SECURITY ADVISORY] curl: NTLM buffer overflow via integer overflow (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: FTP wildcard out of bounds read (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: SSL out of buffer access (Daniel Stenberg <daniel@...x.se>)
Re: Security risk of server side text editing ... (Ian Zimmerman <itz@...y.loosely.org>)

November 30 (9 messages)

CVE-2017-1000405: Linux kernel - "Dirty COW" variant on transparent huge pages (Bindecy <contact@...decy.com>)
Re: CVE-2017-1000405: Linux kernel - "Dirty COW" variant on transparent huge pages (Ariel Zelivansky <ariel.zelivans@...il.com>)
libtiff: Heap-based buffer overflow bug in pal2rgb(pal2rgb.c) (백정운 <jeongun.baek@...il.com>)
Apache CXF Fediz 1.4.3 and 1.3.3 released with a new security advisory CVE-2017-12631 (Colm O hEigeartaigh <coheigea@...che.org>)
Xen Security Advisory 245 (CVE-2017-17046) - ARM: Some memory not scrubbed at boot (Xen.org security team <security@....org>)
Xen Security Advisory 246 (CVE-2017-17044) - x86: infinite loop due to missing PoD error checking (Xen.org security team <security@....org>)
Xen Security Advisory 247 (CVE-2017-17045) - Missing p2m error checking in PoD code (Xen.org security team <security@....org>)
[SECURITY] [CVE-2017-15701] Apache Qpid Broker-J Denial of Service Vulnerability (Keith Wall <kwall@...che.org>)
[SECURITY] [CVE-2017-15702] Apache Qpid Broker-J Authentication Vulnerability on HTTP Ports (Keith W <keith.wall@...il.com>)

196 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.