November 2016 Archives by author

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...

Starting: Tue Nov 1 13:00:07 UTC 2016
Ending: Fri Nov 25 18:55:03 UTC 2016
Messages: 83

• [Secure-testing-team] Bug#842811: memcached: CVE-2016-8704   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842812: memcached: CVE-2016-8705   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842814: memcached: CVE-2016-8706   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842856: python-django: CVE-2016-9013 CVE-2016-9014   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842858: bind9: CVE-2016-8864: A problem handling responses containing a DNAME answer can lead to an assertion failure   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842891: libimage-info-perl: XXE in SVG files   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842893: libxml-twig-perl: expand_external_ents fails to work as documented   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842895: mariadb-10.0: CVE-2016-6664 CVE-2016-5617   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842984: ansible: CVE-2016-8614: Improper verification of key fingerprints in apt_key module   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842985: ansible: CVE-2016-8628: Command injection by compromised server via fact variables   Salvatore Bonaccorso
• [Secure-testing-team] Bug#842987: redis: CVE-2016-2121: weak permissions on sensitive files   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843012: libcsp: CVE-2016-8596 CVE-2016-8597 CVE-2016-8598   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843041: pacemaker: CVE-2016-7035   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843091: otrs2: CVE-2016-9139   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843232: heat: CVE-2016-9185: template source URL allows network port scan   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843258: ynx: CVE-2016-9179   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843434: terminology: Escape Sequence Command Execution vulnerability   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843519: gitlab: CVE-2016-9086   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843697: dracut: CVE-2016-8637: dracut creates world readble initramfs when early cpio is used   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843928: ming: CVE-2016-9264 CVE-2016-9265 CVE-2016-9266   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844011: dwarfutils: CVE-2016-9276   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844012: dwarfutils: CVE-2016-9275   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844013: tiff: CVE-2016-9273   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844057: tiff: Heap buffer overflow via writeBufferToSeparateStrips tiffcrop.c:1170   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844200: ceph: CVE-2016-8626: RGW Denial of Service by sending POST object with null conditions   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844211: imagemagick: heap overflow   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844226: tiff: potential read outside buffer in _TIFFPrintField()   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844338: moin: CVE-2016-9119: XSS in GUI editor's link dialogue   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844340: moin: CVE-2016-7146: XSS in GUI editor's attachment dialogue   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844341: moin: CVE-2016-7148: XSS in AttachFile view (multifile related)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844344: p7zip: CVE-2016-9296: Null pointer dereference (in 7zIn.cpp)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844551: openjpeg2: CVE-2016-9112   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844552: openjpeg2: CVE-2016-9113   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844553: openjpeg2: CVE-2016-9114   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844554: openjpeg2: CVE-2016-9115   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844555: openjpeg2: CVE-2016-9116   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844556: openjpeg2: CVE-2016-9117   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844557: openjpeg2: CVE-2016-9118   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844581: libxml2: CVE-2016-9318   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844691: ansible: CVE-2016-8647: in some circumstances the mysql_user module may fail to correctly change a password   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844726: w3m: CVE-2016-9439: stack overflow   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844727: bash: CVE-2016-9401: popd controlled free   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844731: dokuwiki: CVE-2016-7964   Salvatore Bonaccorso
• [Secure-testing-team] Bug#844732: dokuwiki: CVE-2016-7965   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845258: mcabber: remote attacker can modify the roster and intercept messages via a crafted roster-push IQ stanza   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845301: hdf5: CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845375: gst-plugins-good1.0: heap corruption vulnerability in the gstreamer decoder for the FLIC file format   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845408: dwarfutils: CVE-2016-9558   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845465: lxc: CVE-2016-8649: attach: do not send procfd to attached process   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845663: xen: CVE-2016-9386: x86 null segments not always treated as unusable   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845664: xen: CVE-2016-9382: x86 task switch to VM86 mode mis-handled   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845665: xen: CVE-2016-9385: x86 segment base write emulation lacking canonical address checks   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845667: xen: CVE-2016-9384: guest 32-bit ELF symbol table load leaking host data   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845668: xen: CVE-2016-9383: x86 64-bit bit test instruction emulation broken   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845669: xen: CVE-2016-9377 CVE-2016-9378: x86 software interrupt injection mis-handled   Salvatore Bonaccorso
• [Secure-testing-team] Bug#845670: xen: CVE-2016-9379 CVE-2016-9380: delimiter injection vulnerabilities in pygrub   Salvatore Bonaccorso
• [Secure-testing-team] Bug#843462: emacs25: Please disable xwidgets/webkit   David Bremner
• [Secure-testing-team] Bug#844285: pidgin: steals (warps) mouse cursor (not just focus) when new message comes in [SEC=UNCLASSIFIED]   Tim Connors
• [Secure-testing-team] controle des paiements   Suivi Société Generale
• [Secure-testing-team] Bug#844546: teeworlds: possible remote code execution on the client   Felix Geyer
• [Secure-testing-team] Bug#844584: dhclient should perform additional validity checks   Anton Ivanov
• [Secure-testing-team] Kindly Respond.   Edgar Konan
• [Secure-testing-team] Bug#844520: ntpdate: should not set the date from /etc/network/if-up.d/ntpdate   Vincent Lefevre
• [Secure-testing-team] Bug#845195: Imagemagick (jessie and older) buffer overlfow   Bastien ROUCARIES
• [Secure-testing-team] Bug#845196: Check return of write function   Bastien ROUCARIES
• [Secure-testing-team] Bug#845198: Check validity of extend during TIFF file reading   Bastien ROUCARIES
• [Secure-testing-team] Bug#845202: Better check for bufferoverflow for TIFF handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#845204: CVE-2016-8678: heap-based buffer overflow in IsPixelMonochrome   Bastien ROUCARIES
• [Secure-testing-team] Bug#845206: CVE-2016-8677: memory allocate failure in AcquireQuantumPixels   Bastien ROUCARIES
• [Secure-testing-team] Bug#845212: Fix out of bound read in viff file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#845213: Suspend exception processing if there are too many exceptions   Bastien ROUCARIES
• [Secure-testing-team] Bug#845239: Fixed memory leak in psd file handling   Bastien ROUCARIES
• [Secure-testing-team] Bug#845241: Prevent fault in MSL interpreter   Bastien ROUCARIES
• [Secure-testing-team] Bug#845242: Heap buffer overflow in heap-buffer-overflow in IsPixelGray   Bastien ROUCARIES
• [Secure-testing-team] Bug#845243: null pointer passed as argument 2, which is declared to never be null   Bastien ROUCARIES
• [Secure-testing-team] Bug#845244: Add check for invalid mat file   Bastien ROUCARIES
• [Secure-testing-team] Bug#845246: mat file out of bound   Bastien ROUCARIES
• [Secure-testing-team] Bug#845634: CVE-2016-8862: imagemagick: memory allocation failure in AcquireMagickMemory (memory.c)   Bastien ROUCARIES
• [Secure-testing-team] Aumente las ventas de su empresa en Navidades y Fin de Año   CASAS EN BOLIVIA S.R.L.
• [Secure-testing-team] OFERTA DE UNIFORMES, ROPA DE TRABAJO Y MUCHO MAS   CASAS EN BOLIVIA S.R.L.
• [Secure-testing-team] Bug#845385: Privilege escalation via removal   Paul Szabo
• [Secure-testing-team] Bug#845393: Privilege escalation via upgrade   Paul Szabo
• [Secure-testing-team] Bug#843431: [pidgin-sipe] Possibly a use-after-free on a buffer in telepathy transport   Marcin Szewczyk

Last message date: Fri Nov 25 18:55:03 UTC 2016
Archived on: Fri Nov 25 18:57:11 UTC 2016

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...