July 2016 Archives by date

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...

Starting: Mon Jul 4 19:39:54 UTC 2016
Ending: Sun Jul 31 20:39:42 UTC 2016
Messages: 82

• [Secure-testing-team] Validate within the next 48 hours!!   Account Update
• [Secure-testing-team] Bug#829661: ceph: CVE-2016-5009: Ceph monitor crash: mon_command crashes ceph monitors on receiving empty prefix   Salvatore Bonaccorso
• [Secure-testing-team] Bug#829694: libgd2: CVE-2016-6132: read out-of-bands was found in the parsing of TGA files   Hugo Lefeuvre
• [Secure-testing-team] Bug#829718: libxml2: CVE-2016-4448   Salvatore Bonaccorso
• [Secure-testing-team] Bug#829730: xchat-gnome: CVE-2013-7449   Salvatore Bonaccorso
• [Secure-testing-team] Renew your mailbox   Mail Security
• [Secure-testing-team] Bug#830195: samba: CVE-2016-2119: Client side SMB2/3 required signing can be downgraded   Salvatore Bonaccorso
• [Secure-testing-team] Bug#830294: trn is insecure, and unsuitable for use with untrusted data   Matthew Vernon
• [Secure-testing-team] Courier was unable to deliver the parcel, ID000890471   FedEx International MailService
• [Secure-testing-team] Bug#830660: liblept5: hardcoded predictable paths in /tmp   Sven Hartge
• [Secure-testing-team] Bug#830802: util-linux: CVE-2016-5011: Extended partition loop in MBR partition table leads to DOS   Salvatore Bonaccorso
• [Secure-testing-team] Bug#830806: nsd: CVE-2016-6173: Improper restriction of zone size limit   Salvatore Bonaccorso
• [Secure-testing-team] Bug#830808: pdns: CVE-2016-6172: Improper restriction of zone size limit   Salvatore Bonaccorso
• [Secure-testing-team] Bug#830809: knot: CVE-2016-6171: Improper restriction of zone size limit   Salvatore Bonaccorso
• [Secure-testing-team] Bug#830810: bind9: CVE-2016-6170: Improper restriction of zone size limit   Salvatore Bonaccorso
• [Secure-testing-team] exciting   Kyle Nelson
• [Secure-testing-team] Bug#830941: icingaweb2: don't mangle around in the Apache configs   Christoph Anton Mitterer
• [Secure-testing-team] Bug#831034: imagemagick: CVE-2016-5841 CVE-2016-5842   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831418: EOL: not to be released with Stretch   David Prévot
• [Secure-testing-team] Verify Your Account To Avoid Blocking   Mail Team
• [Secure-testing-team] Bug#831698: nagios3: CVE-2016-6209   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831787: icingaweb2-common: please don't unconditionally re-add www-data to icingaweb2 on upgrades   Christoph Anton Mitterer
• [Secure-testing-team] Bug#831796: bind9: CVE-2016-2775: A query name which is too long can cause a segmentation fault in lwresd   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831799: python-django: CVE-2016-6186: XSS in admin's add/change related popup   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831814: lepton: CVE-2016-6234 CVE-2016-6235 CVE-2016-6236 CVE-2016-6237 CVE-2016-6238   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831844: mysql-5.6: Multiple security fixes from the July 2016 CPU   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831857: libupnp: write files via POST   Salvatore Bonaccorso
• [Secure-testing-team] Bug#831902: openssh: CVE-2016-6210: User enumeration via covert timing channel   Salvatore Bonaccorso
• [Secure-testing-team] centre   Valerie 0182834080
• [Secure-testing-team] Bug#832031: mupdf: CVE-2016-6265: use-after-free   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832170: shadow: CVE-2016-6252: Incorrect integer handling   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832265: suck: Stack smash if lockfile exists (pid_t cast to long *)   David Taylor
• [Secure-testing-team] Bug#832419: CVE-2016-3498   Moritz Muehlenhoff
• [Secure-testing-team] Bug#832433: CVE-2016-1000108   Moritz Muehlenhoff
• [Secure-testing-team] Bug#832457: Out-of-bounds read in coders/psd.c:797 ReadPSDChannelPixels   Bastien ROUCARIES
• [Secure-testing-team] Bug#832461: Fixed check for the number of pixels that will be allocated.   Bastien ROUCARIES
• [Secure-testing-team] Bug#832464: SUN file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832465: SUN file ABRT signal   Bastien ROUCARIES
• [Secure-testing-team] Bug#832467: Fix multiple out of bound problem   Bastien ROUCARIES
• [Secure-testing-team] Bug#832469: HDR file overflow   Bastien ROUCARIES
• [Secure-testing-team] Bug#832474: Fix a heap buffer overflow in psd file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832475: Fix a outofbound access for psd file   Bastien ROUCARIES
• [Secure-testing-team] Bug#832478: Fix meta file outofbound access   Bastien ROUCARIES
• [Secure-testing-team] Bug#832480: Fix head buffer overflow in psd file   Bastien ROUCARIES
• [Secure-testing-team] Bug#832482: WPG file security bug   Bastien ROUCARIES
• [Secure-testing-team] Bug#832483: Fix out of bound for viff file   Bastien ROUCARIES
• [Secure-testing-team] Bug#832493: flashplugin-nonfree: update-flashplugin-nonfree detect upstream version as 22.0.0.209   sharuzzaman
• [Secure-testing-team] Bug#832496: gdk-pixbuf: ico loader crashes when loading crafted file ico loader crashes when loading crafted file   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832504: Fix an out of bound in xcf file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832505: xcf out of bound acess   Bastien ROUCARIES
• [Secure-testing-team] Bug#832506: Fix out of bound in quantum handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832571: lighttpd: CVE-2016-100021: HTTP Server sets environmental variable HTTP_PROXY based on user supplied Proxy request header (httpoxy)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832572: krb5: CVE-2016-3120: Fix S4U2Self KDC crash when anon is restricted   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832619: qemu: CVE-2016-5403: virtio: unbounded memory allocation on host via guest leading to DoS   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832620: kde4libs: CVE-2016-6232: Extraction of tar files possible to arbitrary system locations   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832621: qemu: CVE-2016-6351: scsi: esp: oob write access while reading ESP command   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832633: Fix a pbd file out of bound access   Bastien ROUCARIES
• [Secure-testing-team] Bug#832767: qemu: CVE-2016-6490: virtio: infinite loop in virtqueue_pop   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832768: flex: CVE-2016-6354: buffer overflow in generated code (yy_get_next_buffer)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832776: Fix handling of psd file   Bastien ROUCARIES
• [Secure-testing-team] Bug#832780: Fix a wpg file out of bound   Bastien ROUCARIES
• [Secure-testing-team] Bug#832783: Fix an out of bound in generic decoder   Bastien ROUCARIES
• [Secure-testing-team] Bug#832785: Fix an out of bound in generic decoder   Bastien ROUCARIES
• [Secure-testing-team] Bug#832787: Fix an out of bound in psd file   Bastien ROUCARIES
• [Secure-testing-team] Bug#832789: Fix SEGV reported in profile handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832791: Fix an out of bound access in pdb file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832793: Fix a SIGABRT in pdb file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#832885: CVE-2016-4562   Bastien ROUCARIES
• [Secure-testing-team] Bug#832887: CVE-2016-4563 The TraceStrokePolygon function in MagickCore/draw.c   Bastien ROUCARIES
• [Secure-testing-team] Bug#832888: CVE-2016-4564   Bastien ROUCARIES
• [Secure-testing-team] Bug#832890: CVE-2016-5687   Bastien ROUCARIES
• [Secure-testing-team] Bug#832942: DDS file security fix   Bastien ROUCARIES
• [Secure-testing-team] Bug#832944: Avoid a DOS for DDS file   Bastien ROUCARIES
• [Secure-testing-team] Bug#832959: xmlrpc-epi: CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c   Salvatore Bonaccorso
• [Secure-testing-team] Bug#832968: CVE-2016-5010: tiff file Out-of-bounds read   Bastien ROUCARIES
• [Secure-testing-team] Bug#832983: nettle: CVE-2016-4689   Salvatore Bonaccorso
• [Secure-testing-team] Bug#833003: CVE-2016-5688 WPG file issue   Bastien ROUCARIES
• [Secure-testing-team] Bug#833042: CVE-2016-5689 lack of required NULL pointer checks in the DCM parser   Bastien ROUCARIES
• [Secure-testing-team] Bug#833043: CVE-2016-5690   Bastien ROUCARIES
• [Secure-testing-team] Bug#833044: CVE-2016-5691 DCM file bug lack of validation of pixel.red, pixel.green, and pixel.blue   Bastien ROUCARIES
• [Secure-testing-team] Bug#833099: CVE-2016-6491 buffer overflow   Bastien ROUCARIES
• [Secure-testing-team] Bug#833101: DOS by not releasing memory   Bastien ROUCARIES

Last message date: Sun Jul 31 20:39:42 UTC 2016
Archived on: Sun Jul 31 20:42:09 UTC 2016

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...