April 2017 Archives by thread

Messages sorted by: [ subject ] [ author ] [ date ]
More info on this list...

Starting: Sat Apr 1 10:17:53 UTC 2017
Ending: Sun Apr 30 05:56:34 UTC 2017
Messages: 102

[Secure-testing-team] Bug#859259: tigervnc: CVE-2017-7392 CVE-2017-7393 CVE-2017-7394 CVE-2017-7395 CVE-2017-7396 Salvatore Bonaccorso
[Secure-testing-team] Bug#859277: bzrtp: CVE-2016-6271: missing HVI check on DHPart2 packet reception Salvatore Bonaccorso
[Secure-testing-team] Bug#859329: libpodofo: CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 (various NULL pointer dereference issues) Salvatore Bonaccorso
[Secure-testing-team] Bug#859330: libpodofo: CVE-2017-7378: heap-based buffer overflow in PoDoFo::PdfPainter::ExpandTabs (PdfPainter.cpp) Salvatore Bonaccorso
[Secure-testing-team] Bug#859331: libpodofo: CVE-2017-7379: heap-based buffer overflow in PoDoFo::PdfSimpleEncoding::ConvertToEncoding (PdfEncoding.cpp) Salvatore Bonaccorso
[Secure-testing-team] Bug#859447: radare2: CVE-2017-6448 Salvatore Bonaccorso
[Secure-testing-team] Bug#859448: radare2: CVE-2017-6194 Salvatore Bonaccorso
[Secure-testing-team] Bug#859456: libarchive: CVE-2016-10209 Salvatore Bonaccorso
[Secure-testing-team] Bug#859494: collectd: CVE-2017-7401 Salvatore Bonaccorso
[Secure-testing-team] Bug#859500: curl: CVE-2017-7407 Salvatore Bonaccorso
[Secure-testing-team] Bug#859515: python-django: CVE-2017-7233: Open redirect and possible XSS attack via user-supplied numeric redirect URLs Salvatore Bonaccorso
[Secure-testing-team] Bug#859516: python-django: CVE-2017-7234: Open redirect vulnerability in django.views.static.serve() Salvatore Bonaccorso
[Secure-testing-team] Bug#859559: horizon: CVE-2017-7400: XSS in federation mappings UI Salvatore Bonaccorso
[Secure-testing-team] Bug#859560: xen: CVE-2017-7228: x86: broken check in memory_exchange() permits PV guest breakout (XSA-212) Salvatore Bonaccorso
[Secure-testing-team] Bug#859592: proftpd-dfsg: CVE-2017-7418 Salvatore Bonaccorso
[Secure-testing-team] Bug#859635: php-horde-crypt: CVE-2017-7413 CVE-2017-7414 Salvatore Bonaccorso
[Secure-testing-team] Bug#859655: golang-go.crypto: CVE-2017-3204 Salvatore Bonaccorso
[Secure-testing-team] Bug#859662: ghostscript: CVE-2016-10217 Salvatore Bonaccorso
[Secure-testing-team] Bug#859666: ghostscript: CVE-2016-10219 Salvatore Bonaccorso
[Secure-testing-team] Bug#859694: ghostscript: CVE-2016-10220 Salvatore Bonaccorso
[Secure-testing-team] Bug#859696: ghostscript: CVE-2017-5951 Salvatore Bonaccorso
[Secure-testing-team] Bug#859714: lepton: CVE-2017-7448 Salvatore Bonaccorso
[Secure-testing-team] Bug#859796: libxslt: CVE-2015-9019 Salvatore Bonaccorso
[Secure-testing-team] Bug#859815: CVE-2017-7572 Moritz Muehlenhoff
[Secure-testing-team] Bug#859821: CVE-2017-5923 CVE-2017-5924 CVE-2016-10210 CVE-2016-10211 Moritz Muehlenhoff
[Secure-testing-team] Bug#859854: qemu: CVE-2017-7377 Salvatore Bonaccorso
[Secure-testing-team] Bug#859891: yaml-cpp: CVE-2017-5950 Salvatore Bonaccorso
[Secure-testing-team] Bug#859910: AST-2017-001: Buffer overflow in CDR's set user Bernhard Schmidt
[Secure-testing-team] Bug#859948: libnl3: CVE-2017-0553 Salvatore Bonaccorso
[Secure-testing-team] Bug#859989: binutils: CVE-2017-7614 Salvatore Bonaccorso
[Secure-testing-team] Bug#859990: elfutils: CVE-2017-7613 Salvatore Bonaccorso
[Secure-testing-team] Bug#859991: elfutils: CVE-2017-7612 Salvatore Bonaccorso
[Secure-testing-team] Bug#859992: elfutils: CVE-2017-7611 Salvatore Bonaccorso
[Secure-testing-team] Bug#859993: elfutils: CVE-2017-7610 Salvatore Bonaccorso
[Secure-testing-team] Bug#859994: elfutils: CVE-2017-7609 Salvatore Bonaccorso
[Secure-testing-team] Bug#859995: elfutils: CVE-2017-7608 Salvatore Bonaccorso
[Secure-testing-team] Bug#859996: elfutils: CVE-2017-7607 Salvatore Bonaccorso
[Secure-testing-team] Bug#859998: tiff: CVE-2017-7592 Salvatore Bonaccorso
[Secure-testing-team] Bug#860000: tiff: CVE-2017-7593 Salvatore Bonaccorso
[Secure-testing-team] Bug#860001: tiff: CVE-2017-7594 Salvatore Bonaccorso
[Secure-testing-team] Bug#860003: tiff: CVE-2017-7595 Salvatore Bonaccorso
[Secure-testing-team] Bug#860038: web2py: CVE-2016-10321 Salvatore Bonaccorso
[Secure-testing-team] Bug#860049: dovecot: CVE-2017-2669 Salvatore Bonaccorso
[Secure-testing-team] Bug#860052: can generate illegal and thus lost e-mail messages due to long lines Paul Traina
[Secure-testing-team] Bug#860068: tomcat8: CVE-2017-5647 Salvatore Bonaccorso
[Secure-testing-team] Bug#860069: tomcat8: CVE-2017-5648 Salvatore Bonaccorso
[Secure-testing-team] Bug#860070: tomcat8: CVE-2017-5650 Salvatore Bonaccorso
[Secure-testing-team] Bug#860071: tomcat8: CVE-2017-5651 Salvatore Bonaccorso
[Secure-testing-team] Bug#860072: botan1.10: CVE-2017-2801: Incorrect comparison in X.509 DN strings Salvatore Bonaccorso
[Secure-testing-team] Bug#860125: 389-ds-base: CVE-2017-2668: Remote crash via crafted LDAP messages Salvatore Bonaccorso
[Secure-testing-team] Bug#860159: libsamplerate: CVE-2017-7697 Salvatore Bonaccorso
[Secure-testing-team] Bug#860224: bind9: CVE-2017-3136: An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes; " Salvatore Bonaccorso
[Secure-testing-team] Bug#860225: bind9: CVE-2017-3137: A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME Salvatore Bonaccorso
[Secure-testing-team] Bug#860226: bind9: CVE-2017-3138: named exits with a REQUIRE assertion failure if it receives a null command string on its control channel Salvatore Bonaccorso
[Secure-testing-team] Bug#860255: libsndfile: CVE-2017-7742: Invalid memory read in flac_buffer_copy function Salvatore Bonaccorso
[Secure-testing-team] Bug#860287: libosip2: CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853 Salvatore Bonaccorso
[Secure-testing-team] Undeliverable message Postmaster
[Secure-testing-team] Bug#860303: freetype: CVE-2016-10328: heap-buffer-overflow in cff_parser_run() Salvatore Bonaccorso
[Secure-testing-team] Bug#860307: freetype: CVE-2017-7857 CVE-2017-7858 Salvatore Bonaccorso
[Secure-testing-team] Bug#860313: freetype: CVE-2017-7864 Salvatore Bonaccorso
[Secure-testing-team] Bug#860314: icu: CVE-2017-7867: Heap-buffer-overflow in utf8TextAccess Salvatore Bonaccorso
[Secure-testing-team] Bug#860316: CVE-2017-7861 Moritz Muehlenhoff
[Secure-testing-team] Bug#860367: feh: CVE-2017-7875 Salvatore Bonaccorso
[Secure-testing-team] secure-testing-team?人心如镜!From 劉馥羽. 劉馥羽
[Secure-testing-team] Bug#860451: libical: CVE-2016-5824 Salvatore Bonaccorso
[Secure-testing-team] Bug#860460: jbig2dec: CVE-2017-7885: eap-buffer-overflow by integer overflow to bypass the check in the function jbig2_decode_symbol_dict Salvatore Bonaccorso
[Secure-testing-team] Bug#860489: apache-log4j2: CVE-2017-5645: socket receiver deserialization vulnerability Salvatore Bonaccorso
[Secure-testing-team] Can we work on this? mklaus.owen at hotmail.com
[Secure-testing-team] Bug#860565: xen: XSA-206: xenstore denial of service via repeated update Salvatore Bonaccorso
[Secure-testing-team] Bug#860566: batik: CVE-2017-5662: information disclosure vulnerability Salvatore Bonaccorso
[Secure-testing-team] Bug#860567: fop: CVE-2017-5661: information disclosure vulnerability Salvatore Bonaccorso
[Secure-testing-team] Bug#860785: qemu: CVE-2017-7471: 9p: virtfs allows guest to change filesystem attributes on host Salvatore Bonaccorso
[Secure-testing-team] Bug#860787: jbig2dec: CVE-2017-7976: Integer overflow in function jbig2_image_compose Salvatore Bonaccorso
[Secure-testing-team] Bug#860788: jbig2dec: CVE-2017-7975: Out-of-bound memory write vulnerability due to integer overflow in function jbig2_build_huffman_table Salvatore Bonaccorso
[Secure-testing-team] Trillonario Trillonario.com
- [Secure-testing-team] Trillonario Trillonario.com
[Secure-testing-team] Bug#860806: firefox-esr: network.enableIDN no longer has any effect, allowing easier phishing attacks Vincent Lefevre
[Secure-testing-team] Bug#860817: kedpm: Information leak via the command history file Gabriel Filion
[Secure-testing-team] Bug#860866: activemq: CVE-2015-7559: DoS in client via shutdown command Salvatore Bonaccorso
[Secure-testing-team] Bug#860869: ghostscript: CVE-2016-10317: Heap-buffer overflow in the fill_threshold_buffer function Salvatore Bonaccorso
[Secure-testing-team] Bug#860930: libpodofo: CVE-2017-7994: denial of service (NULL pointer dereference and application crash) via a crafted PDF document(TextExtractor::ExtractText in TextExtractor.cpp:77) Salvatore Bonaccorso
[Secure-testing-team] Bug#860940: minicom: CVE-2017-7467: Out of bounds write in vt100.c Salvatore Bonaccorso
[Secure-testing-team] Bug#860945: libplist: CVE-2017-7982: denial of service (heap-based buffer over-read and application crash) via a crafted plist file Salvatore Bonaccorso
[Secure-testing-team] Bug#860960: capnproto: CVE-2017-7892 Salvatore Bonaccorso
[Secure-testing-team] Bug#860961: libcroco: CVE-2017-7960 CVE-2017-7961 Salvatore Bonaccorso
[Secure-testing-team] Bug#860962: radare2: CVE-2017-7946 Salvatore Bonaccorso
[Secure-testing-team] Bug#860994: libpodofo: CVE-2017-8053 Salvatore Bonaccorso
[Secure-testing-team] Bug#860995: libpodofo: CVE-2017-8054 Salvatore Bonaccorso
[Secure-testing-team] Bug#861121: weechat: CVE-2017-8073 Salvatore Bonaccorso
[Secure-testing-team] secure-testing-team at lists.alioth.debian.org邮局系统升级管理 postmaster
[Secure-testing-team] Bug#861189: keystone: CVE-2017-2673: federated user gets wrong role Salvatore Bonaccorso
[Secure-testing-team] Bug#861219: salt: CVE-2017-8109 Salvatore Bonaccorso
[Secure-testing-team] Bug#861220: freetype: CVE-2017-8105 Salvatore Bonaccorso
[Secure-testing-team] Bug#861295: ghostscript: CVE-2017-8291: shell injection Salvatore Bonaccorso
[Secure-testing-team] Bug#861308: freetype: CVE-2017-8287: out-of-bounds write via t1_builder_close_contour function Salvatore Bonaccorso
[Secure-testing-team] Bug#861348: qemu: CVE-2017-8086: 9pfs: host memory leakage via v9pfs_list_xattr Salvatore Bonaccorso
[Secure-testing-team] Bug#861351: qemu: CVE-2017-8112: scsi: vmw_pvscsi: infinite loop in pvscsi_log2 Salvatore Bonaccorso
[Secure-testing-team] Bug#861388: roundcube: CVE-2017-8114: security issue in virtualmin and sasl drivers Salvatore Bonaccorso
[Secure-testing-team] Bug#861487: mysql-workbench: CVE-2017-3469 Salvatore Bonaccorso
[Secure-testing-team] Bug#861511: mysql-connector-python: CVE-2017-3590 Salvatore Bonaccorso
[Secure-testing-team] Bug#861514: radicale: htpasswd authentication vulnerable to timing-based bruteforce attacks Jonas Smedegaard
[Secure-testing-team] Bug#861521: libxstream-java: CVE-2017-7957 Salvatore Bonaccorso

Last message date: Sun Apr 30 05:56:34 UTC 2017
Archived on: Sun Apr 30 06:00:16 UTC 2017

Messages sorted by: [ subject ] [ author ] [ date ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).