oss-security mailing list - 2016/11

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2016/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 11	² 18	³ 9	⁴ 15	⁵ 4	⁶ 3
⁷ 5	⁸ 7	⁹ 20	¹⁰ 13	¹¹ 14	¹² 4	¹³ 2
¹⁴ 13	¹⁵ 5	¹⁶ 8	¹⁷ 9	¹⁸ 16	¹⁹ 7	²⁰ 3
²¹ 11	²² 23	²³ 6	²⁴ 9	²⁵ 5	²⁶ 5	²⁷
²⁸ 2	²⁹ 7	³⁰ 3

Messages by day:

November 1 (11 messages)

Memcached 1.4.32 and earlier buffer overflow. (dormando <dormando@...ia.net>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (Lior Kaplan <kaplanlior@...il.com>)
Re: Memcached 1.4.32 and earlier buffer overflow. (Andrej Nemec <anemec@...hat.com>)
RCE in Zabbix 2.2 to 3.0.3 (Martin Prpic <mprpic@...hat.com>)
CVE Request: OTRS: execution of JavaScript in OTRS context by opening malicious attachment (Salvatore Bonaccorso <carnil@...ian.org>)
[ANNOUNCE] Django security releases issued: 1.10.3, 1.9.11, and 1.8.16 (Tim Graham <timograham@...il.com>)
Re: CVE assignment for PHP 5.6.27 and 7.0.12 (<cve-assign@...re.org>)
Re: CVE Request: OTRS: execution of JavaScript in OTRS context by opening malicious attachment (<cve-assign@...re.org>)
Re: RCE in Zabbix 2.2 to 3.0.3 (<cve-assign@...re.org>)
Re: Handful of libass issues (<cve-assign@...re.org>)
BIND9 CVE-2016-8864: A problem handling responses containing a DNAME,answer can lead to an assertion failure (ISC Security Officer <security-officer@....org>)

November 2 (18 messages)

CVE request: XXE in perl Image::Info and XML::Twig (Doran Moppert <dmoppert@...hat.com>)
[SECURITY ADVISORY] curl cookie injection for other servers (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl case insensitive password comparison (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl OOB write via unchecked multiplication (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl double-free in curl_maprintf (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl double-free in krb5 code (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl glob parser write/read out of bounds (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl_getdate read out of bounds (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl URL unescape heap overflow via integer truncation (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl use-after-free via shared cookies (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl invalid URL parsing with '#' (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Daniel Stenberg <daniel@...x.se>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Stuart Henderson <stu@...cehopper.org>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Robert Scheck <robert@...oraproject.org>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Hanno Böck <hanno@...eck.de>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Daniel Stenberg <daniel@...x.se>)
ZJ Invoice 384418 ("ZJ, do-not-reply" <do-not-reply@...y.at>)
Re: Stack guard canary massaging (Seth Arnold <seth.arnold@...onical.com>)

November 3 (9 messages)

CVE request: multiple issues in go-jose package (Cedric Staub <css@....bio>)
kernel: fix minor infoleak in get_user_ex() (Shawn <citypw@...il.com>)
CVE request: w3m - multiple vulnerabilities (Kuang-che Wu <kcwu@...e.org>)
CVE request:Lynx invalid URL parsing with '?' (redrain root <rootredrain@...il.com>)
CVE-2016-7035 - pacemaker - improper IPC guarding (Jan Pokorný <jpokorny@...hat.com>)
CVE request -- linux kernel: crypto: GPF in lrw_crypt caused by null-deref (Vladis Dronov <vdronov@...hat.com>)
Re: CVE-2016-5195 "Dirty COW" Linux kernel privilege escalation vulnerability (Steve Grubb <sgrubb@...hat.com>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request:Lynx invalid URL parsing with '?' (Leo Famulari <leo@...ulari.name>)

November 4 (15 messages)

Re: CVE request:Lynx invalid URL parsing with '?' (<cve-assign@...re.org>)
Re: CVE request: XXE in perl Image::Info and XML::Twig (<cve-assign@...re.org>)
Re: CVE request -- linux kernel: crypto: GPF in lrw_crypt caused by null-deref (<cve-assign@...re.org>)
Re: kernel: fix minor infoleak in get_user_ex() (<cve-assign@...re.org>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (<cve-assign@...re.org>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Daniel Stenberg <daniel@...x.se>)
Re: Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Hanno Böck <hanno@...eck.de>)
Re: CVE request:Lynx invalid URL parsing with '?' (Thomas Dickey <dickey@....com>)
Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Robert Scheck <robert@...oraproject.org>)
Re: Re: [SECURITY ADVISORY] IDNA 2003 makes curl use wrong host (Kristian Fiskerstrand <kristian.fiskerstrand@...ptuouscapital.com>)
jasper: use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (Agostino Sarubbo <ago@...too.org>)
CVE request: Escape Sequence Command Execution vulnerability in Terminology 0.7 (Nicolas Braud-Santoni <nicolas@...ud-santoni.eu>)
CVE request: linux kernel - local DoS with cgroup offline code (CAI Qian <caiqian@...hat.com>)
WebKitGTK+ Security Advisory WSA-2016-0006 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: CVE request: Escape Sequence Command Execution vulnerability in Terminology 0.7 (Nicolas Braud-Santoni <nicolas@...ud-santoni.eu>)

November 5 (4 messages)

CVE Request: PHP with Zend OPCache code permission/sensitive data protection vulnerabilities (php-dev@...dogsoftware.net)
Re: [FD] CVE request:Lynx invalid URL parsing with '?' (Michal Zalewski <lcamtuf@...edump.cx>)
CVE request: Null pointer derefence parsing xml file using libxml 2.9.4 (in recover mode) (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: linux kernel - local DoS with cgroup offline code (<cve-assign@...re.org>)

November 6 (3 messages)

Re: [engineering.redhat.com #426293] CVE Request - firewire driver RCE - linux 4.8 (Eyal Itkin <eyal.itkin@...il.com>)
Clarification about CVE-2016-1841 for libxslt (Salvatore Bonaccorso <carnil@...ian.org>)
Re: nfsd-ganesha allows anyone to call into DBUS? (Siddharth Sharma <siddharth@...hat.com>)

November 7 (5 messages)

Re: CVE request: Escape Sequence Command Execution vulnerability in Terminology 0.7 (<cve-assign@...re.org>)
CVE request: cJSON buffer out of bound read (Henri Salo <henri@...v.fi>)
CVE-2016-8637: dracut creates world readble initramfs when early cpio is used (Andreas Stieger <astieger@...e.com>)
Re: Re: kernel: fix minor infoleak in get_user_ex() (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE request - mujs Heap-Buffer-Overflow write and OOB Read (Gustavo Grieco <gustavo.grieco@...il.com>)

November 8 (7 messages)

[CVE-2016-8736] Apache Openmeetings RMI Registry Java Deserialization RCE (Maxim Solodovnik <solomax@...che.org>)
Re: Re: CVE request: mat doesn't remove metadata in embedded images in PDFs (Salvatore Bonaccorso <carnil@...ian.org>)
Multiple vulnerabilities affecting five WordPress Plugins (XSS & object injection) (Summer of Pwnage <lists@...urify.nl>)
Mailcwp remote file upload vulnerability incomplete fix v1.100 ("Larry W. Cashdollar" <larry0@...com>)
CVE-2016-8632 -- Linux kernel: tipc_msg_build() doesn't validate MTU that can trigger heap overflow ("tyrande000@...il.com" <tyrande000@...il.com>)
CVE Request: Cryptography 1.5.3: HKDF might return an empty byte-string (Andrej Nemec <anemec@...hat.com>)
CVE request: netcat-traditional nc buffer overflow (Paul Tagliamonte <paultag@...il.com>)

November 9 (20 messages)

CVE update (CVE-2016-6815) - Fixed in Ranger 0.6.2 (Velmurugan Periasamy <vel@...che.org>)
Re: CVE Request: Cryptography 1.5.3: HKDF might return an empty byte-string (<cve-assign@...re.org>)
CVE Request - Samsung Exynos fimg2d Multiple Issues (Idler <idler1984@...il.com>)
CVE-2016-7077: information disclosure from association lists shown without authorization (Marek Hulán <mhulan@...hat.com>)
CVE-2016-8634: Foreman stored XSS in orgs/locations wizard step (Dominic Cleal <dominic@...al.org>)
elfutils: memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c) (Agostino Sarubbo <ago@...too.org>)
elfutils: memory allocation failure in allocate_elf (common.h) (Agostino Sarubbo <ago@...too.org>)
jasper: use after free in jas_realloc (jas_malloc.c) (Agostino Sarubbo <ago@...too.org>)
libdwarf: heap-based buffer overflow in _dwarf_skim_forms (dwarf_macro5.c) (Agostino Sarubbo <ago@...too.org>)
libdwarf: heap-based buffer overflow in get_attr_value (print_die.c) (Agostino Sarubbo <ago@...too.org>)
libdwarf: heap-based buffer overflow in dwarf_get_aranges_list (dwarf_arange.c) (Agostino Sarubbo <ago@...too.org>)
libdwarf: memory allocation failure in do_decompress_zlib (dwarf_init_finish.c) (Agostino Sarubbo <ago@...too.org>)
libtiff: memory allocation failure in _TIFFCheckRealloc (tif_aux.c) (Agostino Sarubbo <ago@...too.org>)
libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c) (Agostino Sarubbo <ago@...too.org>)
libming: listmp3: divide-by-zero in printMP3Headers (listmp3.c) (Agostino Sarubbo <ago@...too.org>)
libming: listmp3: left shift in listmp3.c (Agostino Sarubbo <ago@...too.org>)
Re: libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c) (Henri Salo <henri@...v.fi>)
Re: libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c) (Agostino Sarubbo <ago@...too.org>)
Re: libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c) (Agostino Sarubbo <ago@...too.org>)
CVE Request: libtiff: heap buffer overflow/read outside of array ("Brian 'geeknik' Carpenter" <brian.carpenter@...il.com>)

November 10 (13 messages)

CVE Request: Blind SQL Injection Vulnerability in Exponent CMS 2.4.0 (nickyccwu(伍惠宇) <nickyccwu@...cent.com>)
Re: CVE Request: libtiff: heap buffer overflow/read outside of array (Ian Zimmerman <itz@...mate.net>)
Re: Re: CVE Request: libtiff: heap buffer overflow/read outside of array (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: jasper: use after free in jas_realloc (jas_malloc.c) (<cve-assign@...re.org>)
Vlany: A Linux (LD_PRELOAD) rootkit (eov eov <seclist45@...il.com>)
CVE request: Piwik <= 2.16.0 (saveLayout) PHP Object Injection vulnerability (Henri Salo <henri@...v.fi>)
Re: Vlany: A Linux (LD_PRELOAD) rootkit (Rich Felker <dalias@...c.org>)
CVE request: MyBB multiple vulnerabilities (Henri Salo <henri@...v.fi>)
Re: libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c) (<cve-assign@...re.org>)
Re: libming: listmp3: divide-by-zero in printMP3Headers (listmp3.c) (<cve-assign@...re.org>)
Re: libming: listmp3: left shift in listmp3.c (<cve-assign@...re.org>)
CVE request: Heap read out-of-bounds parsing a Javascript file with the last revision of JavaScript Core (Gustavo Grieco <gustavo.grieco@...il.com>)
Multiple vulnerabilities affecting three WordPress Plugins (XSS, info disclosure & DoS) (Summer of Pwnage <lists@...urify.nl>)

November 11 (14 messages)

CVE-2016-8632 -- Linux kernel: tipc_msg_build() doesn't validate MTU that can trigger heap overflow ("Qian Zhang" <tyrande000@...il.com>)
Re: CVE request: Heap read out-of-bounds parsing a Javascript file with the last revision of JavaScript Core (<cve-assign@...re.org>)
CVE-2016-8645: linux kernel: net: a BUG() statement can be hit in net/ipv4/tcp_input.c (Vladis Dronov <vdronov@...hat.com>)
CVE-2016-8639: Foreman stored XSS in orgs/locations in settings (Dominic Cleal <dominic@...al.org>)
Re: CVE-2016-8645: linux kernel: net: a BUG() statement can be hit in net/ipv4/tcp_input.c (Vladis Dronov <vdronov@...hat.com>)
Re: CVE Request: libtiff: heap buffer overflow/read outside of array (<cve-assign@...re.org>)
Re: libdwarf: heap-based buffer overflow in _dwarf_skim_forms (dwarf_macro5.c) (<cve-assign@...re.org>)
Re: libdwarf: heap-based buffer overflow in get_attr_value (print_die.c) (<cve-assign@...re.org>)
Re: libdwarf: heap-based buffer overflow in dwarf_get_aranges_list (dwarf_arange.c) (<cve-assign@...re.org>)
Pipelight: broken validation of dependency installer signature (Jakub Wilk <jwilk@...lk.net>)
Re: CVE Request - Samsung Exynos fimg2d Multiple Issues (<cve-assign@...re.org>)
CVE-2016-8640 pycsw SQL injection issue (Angelos Tzotsos <gcpp.kalxas@...il.com>)
CVE request: BigTree CMS SQL injection and reflected cross-site scripting vulnerabilities fixed in 4.2.12 / 4.1.16 (Henri Salo <henri@...v.fi>)
CVE request: LibTIFF tiffcrop: Heap buffer overflow via writeBufferToSeparateStrips (Henri Salo <henri@...v.fi>)

November 12 (4 messages)

Re: Re: libdwarf: heap-based buffer overflow in get_attr_value (print_die.c) (Agostino Sarubbo <ago@...too.org>)
CVE Request: libtiff: read outside buffer in _TIFFPrintField() ("Brian 'geeknik' Carpenter" <brian.carpenter@...il.com>)
Remote crash in MaraDNS 2.0.13 and git master (Ondřej Surý <ondrej@...y.org>)
CVE request: Jenkins remote code execution vulnerability (Daniel Beck <ml@...kweb.net>)

November 13 (2 messages)

Imagemagick heap overflow (Bastien ROUCARIES <roucaries.bastien@...il.com>)
CVE needed? / gnuchess 6.2.4 fixed user input buffer overflow (Sebastian Pipping <sebastian@...ping.org>)

November 14 (13 messages)

Re: CVE needed? / gnuchess 6.2.4 fixed user input buffer overflow (<cve-assign@...re.org>)
Re: Remote crash in MaraDNS 2.0.13 and git master (Ondřej Surý <ondrej@...y.org>)
Re: Remote crash in MaraDNS 2.0.13 and git master (Ondřej Surý <ondrej@...y.org>)
OWASP Core Rule Set v3.0.0 (final) Released. (Chaim Sanders <chaim@...imsanders.com>)
MySQL / MariaDB / Percona - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / CVE-2016-5616] (Dawid Golunski <dawid@...alhackers.com>)
MySQL / MariaDB / Percona - Root Privilege Escalation Exploit [ CVE-2016-6664 / CVE-2016-5617 ] (Dawid Golunski <dawid@...alhackers.com>)
Re: CVE Request: libtiff: read outside buffer in _TIFFPrintField() (<cve-assign@...re.org>)
Re: Remote crash in MaraDNS 2.0.13 and git master (<cve-assign@...re.org>)
Re: CVE request: Jenkins remote code execution vulnerability (<cve-assign@...re.org>)
Re: Imagemagick heap overflow (<cve-assign@...re.org>)
Re: Re: CVE needed? / gnuchess 6.2.4 fixed user input buffer overflow (Sebastian Pipping <sebastian@...ping.org>)
Re: CVE needed? / gnuchess 6.2.4 fixed user input buffer overflow (<cve-assign@...re.org>)
CVE-2016-4484: - Cryptsetup Initrd root Shell (Hector Marco <hmarco@...rco.org>)

November 15 (5 messages)

Re: CVE-2016-4484: - Cryptsetup Initrd root Shell - Update: Dracut is also vulnerable (Hector Marco-Gisbert <hmarco@...rco.org>)
CVE-2016-8646: linux kernel - oops in shash_async_export() (Wade Mealing <wmealing@...hat.com>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (Leo Famulari <leo@...ulari.name>)
Re: [FD] CVE-2016-4484: - Cryptsetup Initrd root Shell (Hector Marco <hecmargi@....es>)
Re: Re: [FD] CVE-2016-4484: - Cryptsetup Initrd root Shell (Jeremy Stanley <jeremy@...nstack.org>)

November 16 (8 messages)

CVE-2016-1249: Out-of-bounds read by DBD::mysql >= version 2.9003 (Patrick Galbraith <patg@...g.net>)
Nginx (Debian-based distros) - Root Privilege Escalation Vulnerability (CVE-2016-1247) (Dawid Golunski <dawid@...alhackers.com>)
Re: CVE-2016-8645: linux kernel: net: a BUG() statement can be hit in net/ipv4/tcp_input.c (Vladis Dronov <vdronov@...hat.com>)
jasper: multiple assertion failures (Agostino Sarubbo <ago@...too.org>)
CVE Request - Webproxy Portlet - cross-user cache over-hits (Andrew W Petro <andrew.petro@...c.edu>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (Jason Cooper <osssecurity@...edaemon.net>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (John Haxby <john.haxby@...cle.com>)
CVE Request: teeworlds: possible remote code execution on teeworlds client (Salvatore Bonaccorso <carnil@...ian.org>)

November 17 (9 messages)

Re: jasper: multiple assertion failures (<cve-assign@...re.org>)
Re: CVE request - textract 1.4.0 - OS Command Injection (Pierre Ernst <pernst@...esforce.com>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (Jason Cooper <osssecurity@...edaemon.net>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (John Haxby <john.haxby@...cle.com>)
bash - popd controlled free (Fernando Muñoz <fernando@...l-life.com>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (Jason Cooper <osssecurity@...edaemon.net>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (John Haxby <john.haxby@...cle.com>)
Re: CVE Request: teeworlds: possible remote code execution on teeworlds client (<cve-assign@...re.org>)
Re: bash - popd controlled free (<cve-assign@...re.org>)

November 18 (16 messages)

Re: CVE request: MyBB multiple vulnerabilities (<cve-assign@...re.org>)
Re: CVE-2016-4484: - Cryptsetup Initrd root Shell (Jacobo Avariento <spinfoo.vuln@...il.com>)
Re: CVE request: w3m - multiple vulnerabilities (<cve-assign@...re.org>)
CVE Request: libtiff: Out-of-bounds Write memcpy and less bound check in tiff2pdf (ChenQin <chenqin@...sec.com.cn>)
[Bug Report] Vulnerability in libbpg ("wykcomputer@...il.com" <wykcomputer@...il.com>)
[Bug report] Vulnerability In libbpg-1 ("wykcomputer@...il.com" <wykcomputer@...il.com>)
[Bug report] Vulnerability In libbpg-2 ("wykcomputer@...il.com" <wykcomputer@...il.com>)
CVE requests for Drupal core (SA-CORE-2016-005) (Pere Orga <pere@...a.cat>)
[OSSA 2016-013] Network information disclosure through Heat template source URL (CVE-2016-9185) (Tristan Cacqueray <tdecacqu@...hat.com>)
Linux encrypted boot security, was: CVE-2016-4484: - Cryptsetup Initrd root Shell (Jason Cooper <osssecurity@...edaemon.net>)
CVE-2016-9297 LibTIFF regression (Henri Salo <henri@...v.fi>)
CVE Request: gstreamer plugins (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: gstreamer plugins (<cve-assign@...re.org>)
Re: CVE Request: Blind SQL Injection Vulnerability in Exponent CMS 2.4.0 (<cve-assign@...re.org>)
Re: CVE-2016-9297 LibTIFF regression (<cve-assign@...re.org>)
Re: CVE requests for Drupal core (SA-CORE-2016-005) (<cve-assign@...re.org>)

November 19 (7 messages)

Re: CVE Request: libtiff: Out-of-bounds Write memcpy and less bound check in tiff2pdf (<cve-assign@...re.org>)
Multiple XSS vulnerabilities affecting five WordPress Plugins (Summer of Pwnage <lists@...urify.nl>)
Re: CVE Request: gstreamer plugins (Hanno Böck <hanno@...eck.de>)
imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (Agostino Sarubbo <ago@...too.org>)
jasper: signed integer overflow in jas_image.c (Agostino Sarubbo <ago@...too.org>)
libdwarf: negation overflow in dwarf_leb.c (Agostino Sarubbo <ago@...too.org>)
imagemagick: null pointer must never be null (tiff.c) (Agostino Sarubbo <ago@...too.org>)

November 20 (3 messages)

jasper: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (Agostino Sarubbo <ago@...too.org>)
CVE-2016-6804 Apache OpenOfice Advisory ("Apache OpenOffice Security" <orcmid@...che.org>)
CVE-2016-6803: Apache OpenOffice unquoted search path vulnerability ("Apache OpenOffice Security" <orcmid@...che.org>)

November 21 (11 messages)

Re: CVE request: LibTIFF tiffcrop: Heap buffer overflow via writeBufferToSeparateStrips (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2016-8638 ipsilon: DoS via logging out all open SAML2 sessions (Cedric Buissart <cbuissar@...hat.com>)
WordPress (all versions): SPOF, RCE, and Negligence (Scott Arciszewski <scott@...agonie.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Ben Tasker <ben@...tasker.co.uk>)
RE: Multiple XSS vulnerabilities affecting five WordPress Plugins (Scott Gravelle <scottg@...rezzio.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Michael Babker <michael.babker@...il.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Scott Arciszewski <scott@...agonie.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Ben Tasker <ben@...tasker.co.uk>)
Re: Multiple XSS vulnerabilities affecting five WordPress Plugins (Henri Salo <henri@...v.fi>)
Re: Multiple XSS vulnerabilities affecting five WordPress Plugins (Kurt Seifried <kseifried@...hat.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Solar Designer <solar@...nwall.com>)

November 22 (23 messages)

Re: CVE request: LibTIFF tiffcrop: Heap buffer overflow via writeBufferToSeparateStrips (<cve-assign@...re.org>)
CVE request: w3m - multiple vulnerabilities (Kuang-che Wu <kcwu@...e.org>)
CVE-2016-8630 kernel: kvm: x86: NULL pointer dereference duringinstruction decode (P J P <ppandit@...hat.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Hanno Böck <hanno@...eck.de>)
Re: CVE Request: gstreamer plugins (Alex Gaynor <alex.gaynor@...il.com>)
Libtiff 4.0.7 release fixes many security issues (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Xen Security Advisory 191 (CVE-2016-9386) - x86 null segments not always treated as unusable (Xen.org security team <security@....org>)
Xen Security Advisory 192 (CVE-2016-9382) - x86 task switch to VM86 mode mis-handled (Xen.org security team <security@....org>)
Xen Security Advisory 193 (CVE-2016-9385) - x86 segment base write emulation lacking canonical address checks (Xen.org security team <security@....org>)
Xen Security Advisory 194 (CVE-2016-9384) - guest 32-bit ELF symbol table load leaking host data (Xen.org security team <security@....org>)
Xen Security Advisory 195 (CVE-2016-9383) - x86 64-bit bit test instruction emulation broken (Xen.org security team <security@....org>)
Xen Security Advisory 196 (CVE-2016-9377,CVE-2016-9378) - x86 software interrupt injection mis-handled (Xen.org security team <security@....org>)
Xen Security Advisory 197 (CVE-2016-9381) - qemu incautious about shared ring processing (Xen.org security team <security@....org>)
Xen Security Advisory 198 (CVE-2016-9379,CVE-2016-9380) - delimiter injection vulnerabilities in pygrub (Xen.org security team <security@....org>)
[SECURITY] CVE-2016-6817 Apache Tomcat Denial of Service (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2016-8735 Apache Tomcat Remote Code Execution (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2016-6816 Apache Tomcat Information Disclosure (Mark Thomas <markt@...che.org>)
CVE Request: Linux: net/sctp: slab-out-of-bounds in sctp_sf_ootb (Andrey Konovalov <andreyknvl@...gle.com>)
Re: WordPress (all versions): SPOF, RCE, and Negligence (Scott Arciszewski <scott@...agonie.com>)
vim/neovim: Arbitrary command execution (CVE-2016-1248) (James McCoy <jamessan@...ian.org>)
metapixel: heap-based buffer overflow in open_gif_file (rwgif.c) (Agostino Sarubbo <ago@...too.org>)
metapixel: multiple assertion failures (Agostino Sarubbo <ago@...too.org>)
Re: CVE Request: Linux: net/sctp: slab-out-of-bounds in sctp_sf_ootb (<cve-assign@...re.org>)

November 23 (6 messages)

Re: imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (<cve-assign@...re.org>)
Re: jasper: signed integer overflow in jas_image.c (<cve-assign@...re.org>)
Re: libdwarf: negation overflow in dwarf_leb.c (<cve-assign@...re.org>)
Re: imagemagick: null pointer must never be null (tiff.c) (<cve-assign@...re.org>)
Re: jasper: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (<cve-assign@...re.org>)
Security issue in LXC (CVE-2016-8649) with additional Linux kernel implications (Tyler Hicks <tyhicks@...onical.com>)

November 24 (9 messages)

Re: CVE request: w3m - multiple vulnerabilities (<cve-assign@...re.org>)
Re: CVE Request: gstreamer plugins (<cve-assign@...re.org>)
Linux kernel net/ipv4/ip_tunnel.c issue mentioned on netdev (<cve-assign@...re.org>)
CVE request - BigTree CMS 4.2.13 - Cross-Site Scripting (XSS) (haojun hou <haojunhou@...il.com>)
CVE request - BigTree CMS 4.2.13 Extension Form Builder Multiple Cross-Site Scripting (XSS) (haojun hou <haojunhou@...il.com>)
CVE request - itdb 1.23 Cross-Site Scripting (XSS) (haojun hou <haojunhou@...il.com>)
CVE request - TomatoCart 1.1.8.6.1 Multiple Cross-Site Scripting (XSS) (haojun hou <haojunhou@...il.com>)
Linux kernel: CVE-2016-8650 : Local denial of service with in key subsystem (Wade Mealing <wmealing@...hat.com>)
CVE request: icu: stack-based buffer overflow in uloc_getDisplayName (Doran Moppert <dmoppert@...hat.com>)

November 25 (5 messages)

Re: CVE request: icu: stack-based buffer overflow in uloc_getDisplayName (<cve-assign@...re.org>)
CVE Request: salt confidentiality issue (Johannes Segitz <jsegitz@...e.com>)
Re: CVE Request: salt confidentiality issue (<cve-assign@...re.org>)
Re: Re: CVE request: icu: stack-based buffer overflow in uloc_getDisplayName ("Steven R. Loomis" <srl@...-project.org>)
Re: Re: CVE request: w3m - multiple vulnerabilities (Kuang-che Wu <kcwu@...e.org>)

November 26 (5 messages)

Re: CVE request: Heap read out-of-bounds parsing a Javascript file with the last revision of JavaScript Core (Gustavo Grieco <gustavo.grieco@...il.com>)
CVE Request: resource exhaustion in regex expression handling in WebKit (Gustavo Grieco <gustavo.grieco@...il.com>)
Re: CVE request: DoS loading a SVG in Firefox (<cve-assign@...re.org>)
Re: CVE request: Heap read out-of-bounds parsing a Javascript file with the last revision of JavaScript Core (<cve-assign@...re.org>)
Re: CVE Request: resource exhaustion in regex expression handling in WebKit (<cve-assign@...re.org>)

November 28 (2 messages)

Re: kernel: fix minor infoleak in get_user_ex() (<cve-assign@...re.org>)
CVE-2016-1251 - use after free in DBD::mysql when using prepared statements - medium (Michiel Beijen <michiel.beijen@...il.com>)

November 29 (7 messages)

CVE-2016-5393: Apache Hadoop Privilege escalation vulnerability (Yongjun Zhang <yjzhangal@...che.org>)
Re: CVE-2016-5393: Apache Hadoop Privilege escalation vulnerability (Zhe Zhang <zhz@...che.org>)
Xen Security Advisory 201 - ARM guests may induce host asynchronous abort (Xen.org security team <security@....org>)
Re: CVE-2016-5393: Apache Hadoop Privilege escalation vulnerability (Yongjun Zhang <yzhang@...udera.com>)
Re: Re: CVE request: openjpeg: incorrect fix for CVE-2013-6045 (was Re: openjpeg CVE-2016-3181, CVE-2016-3182 .. and CVE… (Raphael Geissert <geissert@...ian.org>)
CVE-2016-8654 jasper: Heap-based buffer overflow in QMFB code in JPC codec (Adam Maris <amaris@...hat.com>)
Re: openjpeg CVE-2016-3181, CVE-2016-3182 .. and CVE-2013-6045 (<cve-assign@...re.org>)

November 30 (3 messages)

cve-request: linux kernel - memory leak in xfs attribute mechanism. (Wade Mealing <wmealing@...hat.com>)
Re: cve-request: linux kernel - memory leak in xfs attribute mechanism. (<cve-assign@...re.org>)
Re: CVE-2016-8645: linux kernel: net: a BUG() statement can be hit in net/ipv4/tcp_input.c (Vladis Dronov <vdronov@...hat.com>)

257 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.