oss-security mailing list - 2013/05

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev month] [year] [list]

oss-security mailing list - 2013/05

Messages by day:

May 1 (5 messages)

Mediawiki CVE request ( was Fw: [MediaWiki-announce] MediaWiki Security Release: 1.20.5 and 1.19.6) (Hanno Böck <hanno@...eck.de>)
Re: Mediawiki CVE request ( was Fw: [MediaWiki-announce] MediaWiki Security Release: 1.20.5 and 1.19.6) (Kurt Seifried <kseifried@...hat.com>)
Re: Flightgear remote format string (Andrés Gómez Ramírez <andresgomezram7@...il.com>)
Re: upstream source code authenticity checking (Robbie MacKay <robbie@...ahidi.com>)
CVE Request: httplib2 ssl cert incorrect error handling (Marc Deslauriers <marc.deslauriers@...onical.com>)

May 2 (20 messages)

CVE Request for Drupal contributed module (Forest Monsen <forest.monsen@...il.com>)
Re: Flightgear remote format string (Kurt Seifried <kseifried@...hat.com>)
Fwd: Two libtiff (tiff2pdf flaws) (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Two libtiff (tiff2pdf flaws) (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request for Drupal contributed module (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: httplib2 ssl cert incorrect error handling (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- gpsd 3.9 fixing a denial of service flaw (Jan Lieskovsky <jlieskov@...hat.com>)
Xen Security Advisory 45 (CVE-2013-1918) - Several long latency operations are not preemptible (Xen.org security team <security@....org>)
Xen Security Advisory 49 (CVE-2013-1952) - VT-d interrupt remapping source validation flaw for bridges (Xen.org security team <security@....org>)
11 more messages

May 3 (4 messages)

Re: Flightgear remote format string (Andrés Gómez Ramírez <andresgomezram7@...il.com>)
CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (P J P <ppandit@...hat.com>)
Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE-2013-1942 jPlayer 2.2.19 XSS (Salvatore Bonaccorso <carnil@...ian.org>)

May 4 (3 messages)

Re: Re-emergence of CVE-2008-4796 in Nagios current (Michael Gilbert <mgilbert@...ian.org>)
Re: upstream source code authenticity checking (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
CVE Request: YaBB 2.5.2 and earlier arbitrary code execution (John Lightsey <john@...nuts.net>)

May 5 (3 messages)

Re: CVE Request: YaBB 2.5.2 and earlier arbitrary code execution (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE-2013-1942 jPlayer 2.2.19 XSS (Kurt Seifried <kseifried@...hat.com>)

May 6 (6 messages)

CVE request: WordPress advanced-xml-reader XXE (Henri Salo <henri@...v.fi>)
Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (Marcus Meissner <meissner@...e.de>)
Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode (Greg KH <greg@...ah.com>)
CVE request: OpenVPN use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt (Vincent Danen <vdanen@...hat.com>)
Xen Security Advisory 51 (CVE-2013-2007) - qemu guest agent (qga) insecure file permissions (Xen.org security team <security@....org>)
Re: CVE request: OpenVPN use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt (Kurt Seifried <kseifried@...hat.com>)

May 7 (4 messages)

CVE-2013-2060 OpenShift Origin: Potential remote command execution vulnerability in download cart url (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw (Jan Lieskovsky <jlieskov@...hat.com>)
nginx security advisory (CVE-2013-2028) (Andrew Alexeev <andrew@...nx.com>)
Re: nginx security advisory (CVE-2013-2028) (Florian Weimer <fweimer@...hat.com>)

May 8 (3 messages)

Re: CVE Request -- gpsd 3.9 fixing a denial of service flaw ("Eric S. Raymond" <esr@...rsus.com>)
When does resource consumption become a security vulnerability? (Kurt Seifried <kseifried@...hat.com>)
CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun) (Peter Bex <Peter.Bex@...all.nl>)

May 9 (4 messages)

Re: CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun) (Peter Bex <Peter.Bex@...all.nl>)
[OSSA 2013-010] Nova uses insecure keystone middleware tmpdir by default (CVE-2013-2030) (Thierry Carrez <thierry@...nstack.org>)
[OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) (Thierry Carrez <thierry@...nstack.org>)
RE: [Openstack] [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) ("Miller, Mark M (EB SW Cloud - R&D - Corvalli…)

May 10 (5 messages)

Re: Multiple vulnerabilities in PHP Address Book v8.2.5 (Doraemon Sk8ers <doraemon.sk8ers@...il.com>)
CVE request: Linux kernel: tuntap refuse to re-attach to different tun_struct (P J P <ppandit@...hat.com>)
Re: CVE request: Linux kernel: tuntap refuse to re-attach to different tun_struct (Petr Matousek <pmatouse@...hat.com>)
CVE request: password exposure in kdelibs when showing "internal server error" messages (Vincent Danen <vdanen@...hat.com>)
CVE Request: kdelibs (Seth Arnold <seth.arnold@...onical.com>)

May 11 (6 messages)

Re: Multiple vulnerabilities in PHP Address Book v8.2.5 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: password exposure in kdelibs when showing "internal server error" messages (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: kdelibs (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Dolibarr - Multiple Vulnerabilities (chevalier 3as <chevalier3as@...il.com>)
Re: CVE Request: Dolibarr - Multiple Vulnerabilities (chevalier 3as <chevalier3as@...il.com>)

May 12 (3 messages)

CVE request: MoinMoin Wiki (remote code execution vulnerability) (Luciano Bello <luciano@...ian.org>)
CVE request: MoinMoin Wiki (remote code execution vulnerability) (Luciano Bello <luciano@...ian.org>)
Re: CVE request: MoinMoin Wiki (remote code execution vulnerability) (Thomas Waldmann <tw@...dmann-edv.de>)

May 13 (4 messages)

CVE Request: Storable::thaw called on cookie data in multiple CPAN modules (John Lightsey <john@...nuts.net>)
CVE request: Gallery multiple XSS vulnerabilities (Henri Salo <henri@...v.fi>)
nginx security advisory (CVE-2013-2070) (Andrew Alexeev <andrew@...nx.com>)
CVE-2002-2443: Kerberos kpasswd UDP ping-pong vulnerability (Vincent Danen <vdanen@...hat.com>)

70 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ