bugtraq mailing list - 2015/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2015/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 5	³ 4	⁴ 6	⁵ 2	⁶	⁷	⁸
⁹ 12	¹⁰ 12	¹¹ 11	¹² 9	¹³ 12	¹⁴	¹⁵
¹⁶ 9	¹⁷ 5	¹⁸ 15	¹⁹ 16	²⁰ 6	²¹	²²
²³ 11	²⁴ 18	²⁵ 11	²⁶ 2	²⁷ 17	²⁸	²⁹
³⁰ 97	³¹ 28

Messages by day:

March 2 (5 messages)

BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0 (edricteo@...look.sg)
[CVE-2015-1583] ATutor LCMS - CSRF Vulnerability in Version 2.2 (edricteo@...look.sg)
[ MDVSA-2015:049 ] cups (security@...driva.com)
[security bulletin] HPSBST03274 rev.1 - HP XP P9000 Command View Advanced Edition Software Online Help for Windows and Linux, Remote Cross… (security-alert@...com)
[ MDVSA-2015:050 ] patch (security@...driva.com)

March 3 (4 messages)

[SECURITY] [DSA 3178-1] unace security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ MDVSA-2015:051 ] sympa (security@...driva.com)
[ MDVSA-2015:053 ] tomcat6 (security@...driva.com)
[ MDVSA-2015:052 ] tomcat (security@...driva.com)

March 4 (6 messages)

[security bulletin] HPSBST03265 rev.1 - HP VMA SAN Gateway running Bash Shell and OpenSSL, Remote Denial of Service (DoS), Unauthorized Ac… (security-alert@...com)
[SECURITY] [DSA 3179-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2015-2102] Clipbucket 2.7 RC3 0.9 - Blind SQL Injection (prathan.ptr@...il.com)
WeBid 1.1.1 Unrestricted File Upload Exploit (prathan.ptr@...il.com)
[ MDVSA-2015:054 ] bind (security@...driva.com)
[ MDVSA-2015:055 ] freetype2 (security@...driva.com)

March 5 (2 messages)

Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting Vulnerability (prathan.ptr@...il.com)
Last Call - Workhsops of CISTI'2015: 10th Iberian Conference on Information Systems and Technologies ("ML" <marialemos72@...il.com>)

March 9 (12 messages)

Stored XSS Vulnerability in Google Analytics by Yoast Wordpress Plugin (kingkaustubh@...com)
[SECURITY] [DSA 3180-1] libarchive security update (Alessandro Ghedini <ghedo@...ian.org>)
[slackware-security] samba (SSA:2015-064-01) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBHF03279 rev.1 - HP Point of Sale PCs Running Windows with OPOS Drivers, Remote Execution of Code (security-alert@...com)
[security bulletin] HPSBPI03107 rev.2 - Certain HP LaserJet Printers, MFPs and Certain HP OfficeJet Enterprise Printers using OpenSSL, Rem… (security-alert@...com)
Betster (PHP Betoffice) Authentication Bypass and SQL Injection (prathan.ptr@...il.com)
H2HC 12th Edition - Call for Papers ("Rodrigo Rubira Branco \(BSDaemon\)" <rodrigo@...nelhacking.com>)
[security bulletin] HPSBUX03235 SSRT101750 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
MongoDB BSON Handling Remote Denial of Service Vulnerability (<noreply-secresearch@...tinet.com>)
[security bulletin] HPSBGN03277 rev.1 - HP Virtualization Performance Viewer, Remote Execution of Code, Denial of Service (DoS) and Other… (security-alert@...com)
ocPortal 9.0.16 Multiply XSS Vulnerabilities (dennis.veninga@...il.com)
[ MDVSA-2015:056 ] rpm (security@...driva.com)

March 10 (12 messages)

APPLE-SA-2015-03-09-1 iOS 8.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-03-09-2 AppleTV 7.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-03-09-3 Security Update 2015-002 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-03-09-4 Xcode 6.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
tcpdump 4.7.2 remote crashes (Michael Richardson <mcr@...delman.ca>)
Multiple Vulnerabilities with Kguard Digital Video Recorders (Federick Joe P Fajardo <fjpfajardo@...ibm.com>)
Cisco Security Advisory: Row Hammer Privilege Escalation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
ProjectSend r561 - SQL injection vulnerability ("ITAS Team" <itas.team@...s.vn>)
Reflected cross-site scripting(XSS) Vulnerability in Manage Engine AD Audit Manager Plus Admin Panel(Build 6270) (harish.ramadoss@...pag.com)
[ MDVSA-2015:057 ] kernel (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Product (Cisco Systems Product Security Incident Response Team <psir…)
ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)

March 11 (11 messages)

[security bulletin] HPSBUX03281 SSRT101968 rev.1 - HP-UX running Java7, Remote Unauthorized Access, Disclosure of Information, and Other … (security-alert@...com)
[SECURITY] [DSA 3181-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3177-1] mod-gnutls security update (Sebastien Delafond <seb@...ian.org>)
Community Gallery - Srored Corss-Site Scripting vulnerability ("ITAS Team" <itas.team@...s.vn>)
[SECURITY] [DSA 3182-1] libssh2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
Vulnerability in the Dropbox SDK for Android (CVE-2014-8889) (Roee Hay <roeeh@...ibm.com>)
ESA-2015-014: RSA® Digital Certificate Solution Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
OpenSSL v1.0.2 for Linux affected by CVE-2015-0235 ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway and… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Intrusion Prevention System MainApp Secure Socket Layer Denial of Service Vulnerability (Cisco Systems Product Security Incident …)
Microsoft Office Compatibility Pack tries to execute path without quotes (j.v.vallejo@...il.com)

March 12 (9 messages)

Cisco Security Advisory: Cisco Secure Access Control System SQL Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
SQL Injection in Huge IT Slider WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.ch>)
[SECURITY] [DSA 3183-1] movabletype-opensource security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBGN03249 rev.1 - HP ArcSight Enterprise Security Manager and Logger, Multiple Remote Vulnerabilities (security-alert@...com)
[security bulletin] HPSBMU02895 SSRT101253 rev.5 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of… (security-alert@...com)
[SECURITY] [DSA 3184-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 3185-1] libgcrypt11 security update (Thijs Kinkhorst <thijs@...ian.org>)
MSA-2015-03: iPass Mobile Client Service Local Privilege Escalation (Advisories <advisories@...waisecurity.de>)
WPML WordPress plug-in SQL injection etc. (Jouko Pynnonen <jouko@....fi>)

March 13 (12 messages)

[security bulletin] HPSBMU03267 rev.1 - HP Matrix Operating Environment and HP CloudSystem Matrix running OpenSSL, Remote Disclosure of In… (security-alert@...com)
[security bulletin] HPSBMU03259 rev.1 - HP Version Control Repository Manager running OpenSSL on Linux and Windows, Remote Disclosure of I… (security-alert@...com)
[security bulletin] HPSBMU03283 rev.1 - HP Virtual Connect Enterprise Manager SDK running OpenSSL on Windows, Remote Disclosure of Informa… (security-alert@...com)
[security bulletin] HPSBMU03262 rev.1 - HP Version Control Agent running OpenSSL on Linux and Windows, Remote Disclosure of Information, D… (security-alert@...com)
Alkacon OpenCms 9.5.1 Multiple XSS Vulnerabilities (Rehan Ahmed <knight_rehan@...mail.com>)
[SECURITY] [DSA 3186-1] nss security update (Salvatore Bonaccorso <carnil@...ian.org>)
Jolla Phone tel URI Spoofing (NSO Research <nso-research@...iriu.de>)
[ MDVSA-2015:058 ] kernel (security@...driva.com)
Serendipity CMS - XSS Vulnerability in Version 2.0 (edric@...rterbitbybit.com)
[ MDVSA-2015:059 ] nss (security@...driva.com)
[ MDVSA-2015:060 ] yaml (security@...driva.com)
[ MDVSA-2015:061 ] qemu (security@...driva.com)

March 16 (9 messages)

[SECURITY] [DSA 3187-1] icu security update (Michael Gilbert <mgilbert@...ian.org>)
Defense in depth -- the Mozilla way: return and exit codes are dispensable ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 3188-1] freetype security update (Moritz Muehlenhoff <jmm@...ian.org>)
Defense in depth -- the Microsoft way (part 30): on exploitable Win32 functions ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 3190-1] putty security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SE-2014-02] Google App Engine Java security sandbox bypasses (details) (Security Explorations <contact@...urity-explorations.com>)
[SECURITY] [DSA 3189-1] libav security update (Moritz Muehlenhoff <jmm@...ian.org>)
Defense in depth -- the Microsoft way (part 31): UAC is for binary planting ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 3191-1] gnutls26 security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 17 (5 messages)

[security bulletin] HPSBST03298 rev.1 - HP XP Service Processor Software for Windows, Multiple Vulnerabilities (security-alert@...com)
[SECURITY] [DSA 3192-1] checkpw security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBHF03293 rev.1 - HP Virtual Connect 8Gb 24-Port FC Module running OpenSSL and Bash, Remote Denial of Service (DoS),… (security-alert@...com)
[SECURITY] [DSA 3193-1] tcpdump security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3194-1] libxfont security update (Moritz Muehlenhoff <jmm@...ian.org>)

March 18 (15 messages)

APPLE-SA-2015-03-17-1 Safari 8.0.4, Safari 7.1.4, and Safari 6.2.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Security Audit Notes: OpenSSL d1_srvr.c Overflow - Advanced Information Security ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
[SECURITY] [DSA 3195-1] php5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Websense Data Security DLP incident Forensics Preview is vulnerable to Cross-Site Scripting ("Securify B.V." <lists@...urify.nl>)
Websense Email Security vulnerable to persistent Cross-Site Scripting in audit log details view ("Securify B.V." <lists@...urify.nl>)
Command injection vulnerability in network diagnostics tool of Websense Appliance Manager ("Securify B.V." <lists@...urify.nl>)
Source code disclosure of Websense Triton JSP files via double quote character ("Securify B.V." <lists@...urify.nl>)
Cross-Site Scripting vulnerability in Websense Data Security block page ("Securify B.V." <lists@...urify.nl>)
Missing access control on Websense Explorer web folder ("Securify B.V." <lists@...urify.nl>)
Error messages of Websense Content Gateway are vulnerable to Cross-Site Scripting ("Securify B.V." <lists@...urify.nl>)
Multiple Cross-Site Scripting vulnerabilities in Websense Reporting ("Securify B.V." <lists@...urify.nl>)
Cross-Site Scripting vulnerability in Websense Explorer report scheduler ("Securify B.V." <lists@...urify.nl>)
[CORE-2015-0006] - Fortinet Single Sign On Stack Overflow (CORE Advisories Team <advisories@...esecurity.com>)
[SECURITY] [DSA 3196-1] file security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Security Audit Notes: OpenSSL d1_srvr.c Overflow - Advanced Information Security (Jann Horn <jann@...jh.net>)

March 19 (16 messages)

EMC M&R (Watch4net) data storage collector credentials are not properly protected ("Securify B.V." <lists@...urify.nl>)
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Web Portal Report Favorites ("Securify B.V." <lists@...urify.nl>)
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Alerting Frontend ("Securify B.V." <lists@...urify.nl>)
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Centralized Management Console ("Securify B.V." <lists@...urify.nl>)
Path traversal vulnerability in EMC M&R (Watch4net) Device Discovery ("Securify B.V." <lists@...urify.nl>)
Command injection vulnerability in EMC Secure Remote Services Virtual Edition ("Securify B.V." <lists@...urify.nl>)
Path traversal vulnerability in EMC M&R (Watch4net) MIB Browser ("Securify B.V." <lists@...urify.nl>)
EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection ("Securify B.V." <lists@...urify.nl>)
[SECURITY] [DSA 3197-1] openssl security update (Moritz Muehlenhoff <jmm@...ian.org>)
Advent JMX Servlet of Citrx Command Center is accessible to unauthenticated users ("Securify B.V." <lists@...urify.nl>)
Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting ("Securify B.V." <lists@...urify.nl>)
Citrix NITRO SDK xen_hotfix page is vulnerable to Cross-Site Scripting ("Securify B.V." <lists@...urify.nl>)
Command injection vulnerability in Citrix NITRO SDK xen_hotfix page ("Securify B.V." <lists@...urify.nl>)
Google Analytics by Yoast stored XSS (Jouko Pynnonen <jouko@....fi>)
FreeBSD Security Advisory FreeBSD-SA-15:06.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
cve-assign delays ("Steven M. Christey" <coley@...re.org>)

March 20 (6 messages)

Xerces-C Security Advisory [CVE-2015-0252] ("Cantor, Scott" <cantor.2@....edu>)
APPLE-SA-2015-03-19-1 Security Update 2015-003 (Apple Product Security <product-security-noreply@...ts.apple.com>)
FreeBSD Security Advisory FreeBSD-SA-15:06.openssl [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 3198-1] php5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3199-1] xerces-c security update (Salvatore Bonaccorso <carnil@...ian.org>)
Viber for Android exposes insecure Javascript interface ("Securify B.V." <lists@...urify.nl>)

March 23 (11 messages)

[SECURITY] [DSA 3200-1] drupal7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
CSRF/Stored XSS Vulnerability in AB Google Map Travel (AB-MAP) Wordpress Plugin (kingkaustubh@...com)
Reflected XSS Vulnerability in XSS In Manage Engine Device Expert (kingkaustubh@...com)
Cross-Site Request Forgery (CSRF) Vulnerability in ManageEngine Network Configuration (kingkaustubh@...com)
CSRF to add admin user Vulnerability In Manage Engine Device Expert (kingkaustubh@...com)
Stored XSS Vulnerability In Manage Engine Device Expert (kingkaustubh@...com)
[SECURITY] [DSA 3201-1] iceweasel security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3202-1] mono security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3203-1] tor security update (Sebastien Delafond <seb@...ian.org>)
DokuWiki persistent Cross Site Scripting (Filippo Cavallarin <filippo.cavallarin@...ment.technology>)
ESA-2015-044: EMC Documentum xMS Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

March 24 (18 messages)

[security bulletin] HPSBST03196 rev.1- HP StoreEver MSL6480 Tape Library running OpenSSL, Remote Code Execution (security-alert@...com)
Hacky Easter 2015 (Ivan Buetler <ivan.buetler@...c.ch>)
[security bulletin] HPSBGN03299 rev.1 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of In… (security-alert@...com)
[security bulletin] HPSBHF03279 rev.2 - HP Point of Sale PCs Running Windows with OPOS Drivers, Remote Execution of Code (security-alert@...com)
[security bulletin] HPSBHF03289 rev.1- HP ThinClient PCs running ThinPro Linux, Remote Code Execution, Denial of Service, Disclosure of in… (security-alert@...com)
[security bulletin] HPSBMU03220 rev.1 - HP Shunra Network Appliance / HP Shunra Wildcat Appliance, Remote Execution of Code (security-alert@...com)
[security bulletin] HPSBGN03249 rev.2 - HP ArcSight Enterprise Security Manager and Logger, Multiple Remote Vulnerabilities (security-alert@...com)
[security bulletin] HPSBHF03151 rev.1 - HP Integrated Lights-Out 2 and 4 (iLO 2, iLO 4), Chassis Management (iLO CM), Remote Denial of Ser… (security-alert@...com)
[security bulletin] HPSBMU03301 rev.1 - HP BladeSystem c-Class Onboard Administrator running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBHF03275 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO 2, iLO 3, iLO 4), Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBHF03276 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO 2, iLO 3, iLO 4), Remote Unauthorized Access, Denial of … (security-alert@...com)
[security bulletin] HPSBMU03262 rev.2 - HP Version Control Agent running OpenSSL on Linux and Windows, Remote Disclosure of Information, D… (security-alert@...com)
[security bulletin] HPSBMU03292 rev.1 - HP Operations Orchestration Authentication Bypass (security-alert@...com)
[security bulletin] HPSBMU03291 rev.1 - HP Operations Orchestration running Powershell Operations, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03263 rev.1 - HP Insight Control running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03285 rev.1 - HP Business Service Manager Virtual Appliance, Multiple Vulnerabilities (security-alert@...com)
[security bulletin] HPSBGN03282 rev.1 - HP Business Service Manager Virtual Appliance, Multiple Vulnerabilities (security-alert@...com)
[security bulletin] HPSBGN03288 rev.1 - HP Server Automation, Remote Arbitrary Code Execution (security-alert@...com)

March 25 (11 messages)

[SECURITY] [DSA 3197-2] openssl regression update (Salvatore Bonaccorso <carnil@...ian.org>)
Arbitrary file deletion and multiple XSS vulnerabilities in pfSense (High-Tech Bridge Security Research <advisory@...ridge.ch>)
WSO2 Identity Server multiple vulnerabilities (Bartlomiej Balcerek <Bartlomiej.Balcerek@....edu.pl>)
Cisco Security Advisory: Cisco IOS Software Virtual Routing and Forwarding ICMP Queue Wedge Vulnerability (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability (Cisco Systems Product Security Incident Response …)
Cisco Security Advisory: Cisco IOS Software and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulner… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Common Industrial Protocol (Cisco Systems Product Security Incident Response Team <psir…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrast… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Ser… (Cisco Systems Product Security Incident…)
canada goose uk db39m1 (ling201423@...look.com)
ESA-2015-049: EMC Isilon OneFS Privilege Escalation Vulnerability (Security Alert <Security_Alert@....com>)

March 26 (2 messages)

Insecure file upload in Berta CMS (Simon Waters <simon.waters@...evine.com>)
[security bulletin] HPSBMU03294 rev.1 - HP Process Automation running OpenSSL, Remote Disclosure of Information (security-alert@...com)

March 27 (17 messages)

Manage Engine Desktop Central 9 - CVE-2015-2560 - Unauthorised administrative password reset (root@...alhost.com)
[SECURITY] [DSA 3205-1] batik security update (Sebastien Delafond <seb@...ian.org>)
[ MDVSA-2015:062 ] openssl (security@...driva.com)
[ MDVSA-2015:063 ] openssl (security@...driva.com)
[ MDVSA-2015:064 ] cabextract (security@...driva.com)
[ MDVSA-2015:065 ] cpio (security@...driva.com)
[ MDVSA-2015:066 ] cpio (security@...driva.com)
[ MDVSA-2015:067 ] e2fsprogs (security@...driva.com)
[ MDVSA-2015:068 ] e2fsprogs (security@...driva.com)
[ MDVSA-2015:070 ] libvirt (security@...driva.com)
[ MDVSA-2015:071 ] libpng12 (security@...driva.com)
[ MDVSA-2015:072 ] gnutls (security@...driva.com)
[ MDVSA-2015:073 ] openldap (security@...driva.com)
[ MDVSA-2015:074 ] openldap (security@...driva.com)
[ MDVSA-2015:075 ] python (security@...driva.com)
[ MDVSA-2015:076 ] python3 (security@...driva.com)
[ MDVSA-2015:077 ] python-numpy (security@...driva.com)

March 30 (97 messages)

CVE-2015-2755 WordPress AB Google Map Travel CSRF / XSS (kingkaustubh@...com)
Advisory: CVE-2014-9707: GoAhead Web Server 3.0.0 - 3.4.1 (Matthew Daley <mattd@...fuzz.com>)
Advisory: CVE-2014-9708: Appweb Web Server (Matthew Daley <mattd@...fuzz.com>)
[ MDVSA-2015:078 ] mutt (security@...driva.com)
[ MDVSA-2015:079 ] php (security@...driva.com)
[ MDVSA-2015:080 ] php (security@...driva.com)
[ MDVSA-2015:081 ] samba (security@...driva.com)
[ MDVSA-2015:083 ] samba4 (security@...driva.com)
[ MDVSA-2015:082 ] samba (security@...driva.com)
[ MDVSA-2015:084 ] tomcat (security@...driva.com)
[ MDVSA-2015:086 ] libssh (security@...driva.com)
[ MDVSA-2015:088 ] udisks2 (security@...driva.com)
[ MDVSA-2015:085 ] subversion (security@...driva.com)
[ MDVSA-2015:087 ] egroupware (security@...driva.com)
[ MDVSA-2015:089 ] freetype2 (security@...driva.com)
[ MDVSA-2015:092 ] net-snmp (security@...driva.com)
[ MDVSA-2015:093 ] apache (security@...driva.com)
[ MDVSA-2015:094 ] nginx (security@...driva.com)
[ MDVSA-2015:090 ] libpng (security@...driva.com)
[ MDVSA-2015:097 ] php-ZendFramework (security@...driva.com)
[ MDVSA-2015:099 ] python-pillow (security@...driva.com)
[ MDVSA-2015:095 ] openssh (security@...driva.com)
[ MDVSA-2015:096 ] stunnel (security@...driva.com)
[ MDVSA-2015:098 ] curl (security@...driva.com)
[SECURITY] [DSA 3206-1] dulwich security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3207-1] shibboleth-sp2 security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 3198-2] php5 regression update (Salvatore Bonaccorso <carnil@...ian.org>)
[ MDVSA-2015:100 ] cups-filters (security@...driva.com)
[ MDVSA-2015:101 ] jbigkit (security@...driva.com)
[ MDVSA-2015:102 ] json-c (security@...driva.com)
[ MDVSA-2015:104 ] elfutils (security@...driva.com)
[ MDVSA-2015:103 ] squid (security@...driva.com)
[ MDVSA-2015:106 ] apache-mod_security (security@...driva.com)
[ MDVSA-2015:107 ] lcms2 (security@...driva.com)
[ MDVSA-2015:108 ] cups (security@...driva.com)
[ MDVSA-2015:109 ] python-django (security@...driva.com)
[ MDVSA-2015:105 ] imagemagick (security@...driva.com)
[ MDVSA-2015:111 ] libxml2 (security@...driva.com)
[ MDVSA-2015:110 ] postgresql (security@...driva.com)
[ MDVSA-2015:113 ] dovecot (security@...driva.com)
[ MDVSA-2015:112 ] python-lxml (security@...driva.com)
[ MDVSA-2015:114 ] cifs-utils (security@...driva.com)
[ MDVSA-2015:115 ] libvirt (security@...driva.com)
[ MDVSA-2015:116 ] libtasn1 (security@...driva.com)
[ MDVSA-2015:117 ] emacs (security@...driva.com)
[ MDVSA-2015:119 ] x11-server (security@...driva.com)
[ MDVSA-2015:118 ] xlockmore (security@...driva.com)
[ MDVSA-2015:121 ] wget (security@...driva.com)
[ MDVSA-2015:123 ] unzip (security@...driva.com)
[ MDVSA-2015:120 ] wpa_supplicant (security@...driva.com)
[ MDVSA-2015:122 ] util-linux (security@...driva.com)
[ MDVSA-2015:124 ] torque (security@...driva.com)
[ MDVSA-2015:125 ] tcpdump (security@...driva.com)
[ MDVSA-2015:126 ] sudo (security@...driva.com)
[ MDVSA-2015:127 ] serf (security@...driva.com)
[ MDVSA-2015:128 ] sendmail (security@...driva.com)
[ MDVSA-2015:129 ] ruby (security@...driva.com)
[ MDVSA-2015:130 ] rsyslog (security@...driva.com)
[ MDVSA-2015:132 ] readline (security@...driva.com)
[ MDVSA-2015:131 ] rsync (security@...driva.com)
[ MDVSA-2015:133 ] python-requests (security@...driva.com)
[ MDVSA-2015:134 ] pulseaudio (security@...driva.com)
[ MDVSA-2015:135 ] ppp (security@...driva.com)
[ MDVSA-2015:136 ] perl (security@...driva.com)
[ MDVSA-2015:137 ] pcre (security@...driva.com)
[ MDVSA-2015:139 ] openvpn (security@...driva.com)
[ MDVSA-2015:140 ] ntp (security@...driva.com)
[ MDVSA-2015:138 ] patch (security@...driva.com)
[ MDVSA-2015:141 ] not-yet-commons-ssl (security@...driva.com)
[ MDVSA-2015:142 ] nodejs (security@...driva.com)
[ MDVSA-2015:143 ] mpfr (security@...driva.com)
[ MDVSA-2015:144 ] lua (security@...driva.com)
[ MDVSA-2015:145 ] libxfont (security@...driva.com)
[ MDVSA-2015:146 ] libvncserver (security@...driva.com)
[ MDVSA-2015:150 ] liblzo (security@...driva.com)
[ MDVSA-2015:151 ] libksba (security@...driva.com)
[ MDVSA-2015:149 ] libsndfile (security@...driva.com)
[ MDVSA-2015:147 ] libtiff (security@...driva.com)
[ MDVSA-2015:152 ] libjpeg (security@...driva.com)
[ MDVSA-2015:148 ] libssh2 (security@...driva.com)
[ MDVSA-2015:154 ] gnupg (security@...driva.com)
[ MDVSA-2015:153 ] libgd (security@...driva.com)
[ MDVSA-2015:148-1 ] libssh2 (security@...driva.com)
[ MDVSA-2015:155 ] gnupg (security@...driva.com)
[ MDVSA-2015:017-1 ] libevent (security@...driva.com)
[ MDVSA-2015:156 ] libcap-ng (security@...driva.com)
CVE-2015-2223: Palo Alto Traps Server Stored XSS (michael.hendrickx@...pag.com)
[ MDVSA-2015:157 ] libarchive (security@...driva.com)
[ MDVSA-2015:158 ] jython (security@...driva.com)
[SECURITY] [DSA 3208-1] freexl security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2015:159 ] jasper (security@...driva.com)
[ MDVSA-2015:160 ] ipython (security@...driva.com)
[ MDVSA-2015:162 ] gtk+3.0 (security@...driva.com)
[ MDVSA-2015:163 ] grub2 (security@...driva.com)
[ MDVSA-2015:161 ] icu (security@...driva.com)
[ MDVSA-2015:165 ] bind (security@...driva.com)
[ MDVSA-2015:166 ] clamav (security@...driva.com)

March 31 (28 messages)

[ MDVSA-2015:167 ] glpi (security@...driva.com)
[ MDVSA-2015:169 ] git (security@...driva.com)
[ MDVSA-2015:170 ] gcc (security@...driva.com)
[ MDVSA-2015:168 ] glibc (security@...driva.com)
[ MDVSA-2015:171 ] freerdp (security@...driva.com)
[ MDVSA-2015:172 ] firebird (security@...driva.com)
[ MDVSA-2015:173 ] ffmpeg (security@...driva.com)
[ MDVSA-2015:174 ] erlang (security@...driva.com)
[ MDVSA-2015:175 ] ejabberd (security@...driva.com)
[ MDVSA-2015:176 ] dbus (security@...driva.com)
[ MDVSA-2015:177 ] ctdb (security@...driva.com)
[ MDVSA-2015:029-1 ] binutils (security@...driva.com)
[ MDVSA-2015:180 ] apache-mod_wsgi (security@...driva.com)
[ MDVSA-2015:179 ] coreutils (security@...driva.com)
[ MDVSA-2015:178 ] ctags (security@...driva.com)
[ MDVSA-2015:181 ] drupal (security@...driva.com)
[ MDVSA-2015:147-1 ] libtiff (security@...driva.com)
[ MDVSA-2015:145-1 ] libxfont (security@...driva.com)
[ MDVSA-2015:182 ] tcpdump (security@...driva.com)
[CORE-2015-0007] - Schneider Vampset Stack and Heap Buffer Overflow (CORE Advisories Team <advisories@...esecurity.com>)
[ MDVSA-2015:183 ] wireshark (security@...driva.com)
[ MDVSA-2015:184 ] setup (security@...driva.com)
[security bulletin] HPSBGN03270 rev.1 - HP Operations Analytics, Remote Execution of Code (security-alert@...com)
[SECURITY] [DSA 3209-1] openldap security update (Yves-Alexis Perez <corsac@...ian.org>)
[security bulletin] HPSBHF03271 rev.1 - HP PCs and Workstations Running Windows 7 with NVidia Graphics Driver, Elevation of Privileges (security-alert@...com)
[ MDVSA-2015:185 ] dokuwiki (security@...driva.com)
[ MDVSA-2015:186 ] phpmyadmin (security@...driva.com)
[SECURITY] [DSA 3210-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)

308 messages

Powered by blists - more mailing lists