January 2017 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Sun Jan 1 11:13:30 UTC 2017
Ending: Tue Jan 31 07:37:01 UTC 2017
Messages: 98

• [Secure-testing-team] Bug#849849: rabbitmq-server: CVE-2016-9877   Salvatore Bonaccorso
• [Secure-testing-team] Bug#849950: freeipa: CVE-2016-9575: Insufficient permission check in certprofile-mod   Salvatore Bonaccorso
• [Secure-testing-team] Bug#849970: freeipa: CVE-2016-7030: DoS attack against kerberized services by abusing password policy   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850007: libvncserver: CVE-2016-9941   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850008: libvncserver: CVE-2016-9942   Salvatore Bonaccorso
• [Secure-testing-team] secure-testing-team at lists.alioth.debian.org邮件系统备案提醒！   postmaster
• [Secure-testing-team] Bug#850160: firejail: Firejail local root exploit   Moritz Muehlenhoff
• [Secure-testing-team] Bug#850215: zendframework: CVE-2016-10034   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850216: mysql-server-5.6: Listens on * by default after installation (related to use of alternatives)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850316: tiff: CVE-2016-10095: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850320: mock: CVE-2016-6299: privilige escalation via mock-scm   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850322: npm: CVE-2016-3956   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850403: irssi: multiple vulnerabilities   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850491: slurm-llnl: CVE-2016-10030   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850497: jbig2dec: CVE-2016-9601: Heap-buffer overflow due to Integer overflow in jbig2_image_new function   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850528: firejail: root shell via --bandwidth and --shell   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850558: firejail: CVE-2017-5206   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850716: XML External Entity attack   Thomas Goirand
• [Secure-testing-team] Bug#850725: flickcurl: New upstream release, fixing overflows   Jonas Smedegaard
• [Secure-testing-team] Bug#850846: ansible: CVE-2016-9587: host to controller command execution vulnerability   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850874: ark: CVE-2017-5330: Unintended execution of scripts and executable files   Salvatore Bonaccorso
• [Secure-testing-team] Bug#850939: zabbix: sql injection, remote code execution, privileges escalation   IvanBayan
• [Secure-testing-team] Bug#850951: CVE-2016-9962   Moritz Muehlenhoff
• [Secure-testing-team] Bug#850952: CVE-2016-9962   Moritz Muehlenhoff
• [Secure-testing-team] Bug#850954: CVE-2016-10040   Moritz Muehlenhoff
• [Secure-testing-team] Bug#850968: CVE-2016-2788   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851062: bind9: CVE-2016-9444: An unusually-formed DS record response could cause an assertion failure   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851063: bind9: CVE-2016-9147: An error handling a query response containing inconsistent DNSSEC information could cause an assertion failure   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851065: bind9: CVE-2016-9131: A malformed response to an ANY query can cause an assertion failure during recursion   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851159: Invalid free   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851161: CVE-2016-2339   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851196: libplist: CVE-2017-5209   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851244: percona-xtrabackup: CVE-2016-6225   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851278: CVE-2016-9954   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851293: CVE-2016-9590   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851297: tiff: CVE-2017-5225   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851307: [vtable-dumper] New upstream version fixing securities bug   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851310: wordpress: Eight security issues in wordpress 4.7   Craig Small
• [Secure-testing-team] New Invoice #8229-16   George Betts
• [Secure-testing-team] Bug#851374: [imagemagick] memory corruption heap overflow   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851376: [imagemagick] memory corruption heap overflow   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851377: [imagemagick] out of bound in psd file handling   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851380: [imagemagick] memory leak in caption and label handling   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851381: [imagemagick] Crash - PushQuantumPixel - Heap-Buffer-Overflow (TIFF)   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851382: [imagemagick] memory leak in MPC file handling   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851383: [imagemagick] double free in profile   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851396: CVE-2015-5303 / CVE-2015-5329   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851405: CVE-2016-9186 CVE-2016-9187 CVE-2016-9188   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851406: libgit2: CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851408: CVE-2016-6814   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851422: openjpeg2: CVE-2016-9572 CVE-2016-9573   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851430: CVE-2016-9571   Moritz Muehlenhoff
• [Secure-testing-team] Bug#851483: [imagemagick] wpg file off by one   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851485: [imagemagick] ipl file missing malloc check   Bastien ROUCARIÈS
• [Secure-testing-team] Bug#851612: opus: CVE-2017-0381: Memory corruption during media file and data processing   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851619: new upstream release fixes a bag of CVEs   Toni Mueller
• [Secure-testing-team] Bug#851667: openjdk-8-jre-headless needs Breaks: ca-certificates-java (<< 20160321~)   Adrian Bunk
• [Secure-testing-team] Bug#851710: zoneminder: CVE-2016-10140   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851755: mariadb-10.0: CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3317 CVE-2017-3318   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851759: mariadb-10.1: CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3317 CVE-2017-3318   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851769: 389-ds-base: CVE-2017-2591   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851770: php-gettext: CVE-2015-8980   Salvatore Bonaccorso
• [Secure-testing-team] Bug#851771: php-gettext: CVE-2016-6175   Salvatore Bonaccorso
• [Secure-testing-team] Servicio de limpieza para oficinas   Ars Srl.
• [Secure-testing-team] Bug#851910: qemu: CVE-2017-5526   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852021: qemu: CVE-2017-5525   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852029: netbeans: CVE-2016-5537: Import directory traversal   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852031: cgiemail: multiple vulnerabilities (format string injection, open redirect, HTTP header injection, reflected XSS vulnerability)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852034: libical: CVE-2016-9584: heap use-after-free   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852093: hesiod: CVE-2016-10152: Use of hard-coded DNS domain if configuration file cannot be read   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852094: hesiod: CVE-2016-10151: Weak SUID check allowing privilege elevation   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852109: ntopng: CVE-2017-5473   Moritz Muehlenhoff
• [Secure-testing-team] Bug#852119: qemu: CVE-2017-5552   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852213: tigervnc: Buffer overflow in ModifiablePixelBuffer::fillRect   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852232: qemu: CVE-2016-10155   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852275: hexchat: CVE-2016-2087   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852385: libplist: CVE-2017-5545   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852454: quagga: CVE-2017-5495   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852603: virglrenderer: CVE-2016-10163   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852604: virglrenderer: CVE-2017-5580   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852627: lcms2: CVE-2016-10165: heap OOB read parsing crafted ICC profile   Salvatore Bonaccorso
• [Secure-testing-team] ATTENTION   Mr.Richard Lee Holbert.(Esq)
• [Secure-testing-team] Bug#852742: python-oslo.middleware: CVE-2017-2592: CatchErrors leaks sensitive values in oslo.middleware   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852751: [cryptkeeper] Sets the same password "p" for everything independently of user input   Kirill Tkhai
  • [Secure-testing-team] Bug#852751: [cryptkeeper] Sets the same password "p" for everything independently of user input   Simon McVittie
• [Secure-testing-team] Bug#852767: wordpress: 4.7.2 security release   Salvatore Bonaccorso
• [Secure-testing-team] Bug#852934: s-nail: local root privilege escalation   Salvatore Bonaccorso
• [Secure-testing-team] Bug#853002: qemu: CVE-2017-5579: serial: host memory leakage 16550A UART emulation   Salvatore Bonaccorso
• [Secure-testing-team] Bug#853004: security: javascript in the book can access files on the computer using XMLHttpRequest?   Antoine Beaupre
• [Secure-testing-team] Bug#853006: qemu: CVE-2016-9602: 9p: virtfs allows guest to access host filesystem   Salvatore Bonaccorso
• [Secure-testing-team] ¡Adquiere ya tus 280 Tickets!   Trillonario.com
• [Secure-testing-team] Bug#853075: ruby-minitar: CVE-2016-10173: directory traversal vulnerability   Salvatore Bonaccorso
• [Secure-testing-team] Bug#853076: wavpack: CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172   Salvatore Bonaccorso
• [Secure-testing-team] Svar   Santander Bnk UK
• [Secure-testing-team] Bug#853134: svgsalamander: CVE-2017-5617   Salvatore Bonaccorso
• [Secure-testing-team] Bug#853232: libphp-phpmailer: CVE-2017-5223   Moritz Muehlenhoff
• [Secure-testing-team] Bug#853278: libarchive: CVE-2017-5601   Salvatore Bonaccorso
• [Secure-testing-team] Bug#853282: bitlbee: Incomplete fix for "Null pointer dereference with file transfer request from unknown contacts" issue   Salvatore Bonaccorso

Last message date: Tue Jan 31 07:37:01 UTC 2017
Archived on: Tue Jan 31 07:39:11 UTC 2017

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...