secure-testing-team  

Messages by Date

• 2015/01/20 [Secure-testing-team] Bug#775842: moodle: Multiple security issues Moritz Muehlenhoff
• 2015/01/19 [Secure-testing-team] Bug#775776: polarssl: CVE-2015-1182: Remote attack using crafted certificates Salvatore Bonaccorso
• 2015/01/19 [Secure-testing-team] Bug#775755: Logs usernames filled into login dialogs Josh Triplett
• 2015/01/19 [Secure-testing-team] Bug#775727: sensible-utils: [PATCH] sensible-pager doesn't check for recursion like sensible-editor does Marcel Partap
• 2015/01/18 [Secure-testing-team] Bug#775682: arbitrary file access when downloads enabled for users with commit access Thijs Kinkhorst
• 2015/01/18 [Secure-testing-team] Bug#775681: multiple /tmp file vulnerabilities Helmut Grohne
• 2015/01/17 [Secure-testing-team] Bug#775576: CVE-2014-9587 Moritz Muehlenhoff
• 2015/01/17 [Secure-testing-team] Bug#775572: CVE-2014-7817 CVE-2014-9402 Moritz Muehlenhoff
• 2015/01/16 [Secure-testing-team] Bug#775544: nftables: init system stop action shouldn't flush rules Christoph Anton Mitterer
• 2015/01/16 [Secure-testing-team] Bug#775536: CVE-2014-9447 Moritz Muehlenhoff
• 2015/01/16 [Secure-testing-team] Bug#775535: CVE-2015-1029 Moritz Muehlenhoff
• 2015/01/16 [Secure-testing-team] Bug#775479: phabricator: insecure configuration permissions Apollon Oikonomopoulos
• 2015/01/14 [Secure-testing-team] Su patrimonio puede estar en riesgo, contrate y despida legalmente Sta Cruz 2014
• 2015/01/14 [Secure-testing-team] Bug#775375: python-django: CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222 Salvatore Bonaccorso
• 2015/01/14 [Secure-testing-team] Bug#775346: chicken: buffer overrun in CHICKEN Scheme's substring-index (no CVE yet) Moritz Muehlenhoff
• 2015/01/13 [Secure-testing-team] A votre Attention... Naji ZOUEIN
• 2015/01/13 [Secure-testing-team] Bug#775276: condor: CVE-2014-8126 Moritz Muehlenhoff
• 2015/01/12 [Secure-testing-team] Practica contable de ajustes por cierre fiscal 2014 Proexcelencia
• 2015/01/11 [Secure-testing-team] Bug#775171: libapache-poi-java: CVE-2014-9527 Moritz Muehlenhoff
• 2015/01/11 [Secure-testing-team] Bug#775167: privoxy: CVE-2015-1030 CVE-2015-1031 Moritz Muehlenhoff
• 2015/01/11 [Secure-testing-team] Bug#775105: typo3-src: CVE-2014-9508 Debian BTS
• 2015/01/08 [Secure-testing-team] Bug#774897: denial of service with specific packets Moritz Muehlenhoff
• 2015/01/08 [Secure-testing-team] Bug#774838: weboob: insecure keyring handling Cyril Brulebois
• 2015/01/07 [Secure-testing-team] Bug#774801: ffmpeg: take measurements not to include or automatically download binary blobs Christoph Anton Mitterer
• 2015/01/07 [Secure-testing-team] Bug#774800: libav: take measurements not to include or automatically download binary blobs Christoph Anton Mitterer
• 2015/01/07 [Secure-testing-team] Bug#774769: [lftp] saves unknown host's fingerprint in known_hosts without any prompt Marcin Szewczyk
• 2015/01/06 [Secure-testing-team] Bug#774750: zabbix: CVE-2014-9450 Moritz Muehlenhoff
• 2015/01/06 [Secure-testing-team] Bug#774748: ruby-redcloth: CVE-2012-6684 Moritz Muehlenhoff
• 2015/01/05 [Secure-testing-team] Bug#774645: libevent: CVE-2014-6272: potential heap overflow in buffer/bufferevent APIs Salvatore Bonaccorso
• 2015/01/03 [Secure-testing-team] Bug#774530: dwarfutils: CVE-2014-9482 Moritz Muehlenhoff
• 2014/12/31 [Secure-testing-team] HAPPY 2015-AIR RATE 1231 EX CHINA TO EUR- ben
• 2014/12/29 [Secure-testing-team] Bug#774194: CVE-2014-9218 CVE-2014-9219 Moritz Muehlenhoff
• 2014/12/29 [Secure-testing-team] Bug#774192: CVE-2014-9057 Moritz Muehlenhoff
• 2014/12/29 [Secure-testing-team] Bug#774155: [linux] Remote crash of kernel via batman-adv module conchur
• 2014/12/27 [Secure-testing-team] Bug#774050: CVE-2014-9390 Moritz Muehlenhoff
• 2014/12/27 [Secure-testing-team] Bug#774048: CVE-2014-9390 Moritz Muehlenhoff
• 2014/12/26 [Secure-testing-team] Bug#773987: tiff: CVE-2014-9330: Out-of-bounds memory read in bmp2tiff Salvatore Bonaccorso
• 2014/12/24 [Secure-testing-team] Bug#773858: CVE-2014-8131 deadlock or segfault in virConnectGetAllDomainStats Guido Günther
• 2014/12/24 [Secure-testing-team] Bug#773856: CVE-2014-8136 deadlock on failed migration Guido Günther
• 2014/12/24 [Secure-testing-team] Bug#773855: CVE-2014-8135 crash when using virStorageVolUpload Guido Günther
• 2014/12/23 [Secure-testing-team] Bug#773846: Buffer overflow in INFO tags of riff (patch from upstream) Klaus Ethgen
• 2014/12/23 [Secure-testing-team] Bug#773836: glance: unrestricted path traversal flaw Salvatore Bonaccorso
• 2014/12/23 [Secure-testing-team] Bug#773834: [imagemagick] Huge security queue bastien ROUCARIÈS
• 2014/12/23 [Secure-testing-team] Bug#773824: [texlive-bin] Embeded libpng 1.6.13 Heap Overflow bastien ROUCARIÈS
• 2014/12/23 [Secure-testing-team] Bug#773823: [src:libpng1.6] Heap overflow bastien ROUCARIÈS
• 2014/12/22 [Secure-testing-team] Bug#773751: race condition between fur and fex_cleanup Kilian Krause
• 2014/12/22 [Secure-testing-team] Bug#773722: unzip: CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 Salvatore Bonaccorso
• 2014/12/22 [Secure-testing-team] Bug#773720: sox: CVE-2014-8145 Salvatore Bonaccorso
• 2014/12/21 [Secure-testing-team] Bug#773640: CVE-2014-9390: Errors in handling case-sensitive directories allow for remote code execution on pull Javi Merino
• 2014/12/19 [Secure-testing-team] Bug#773577: libssh: CVE-2014-8132: Double free on dangling pointers in initial key exchange packet Salvatore Bonaccorso
• 2014/12/19 [Secure-testing-team] Bug#773576: ntp: CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 Salvatore Bonaccorso
• 2014/12/19 [Secure-testing-team] Bug#773575: ntp: CERT VU#852879 Tim Connors
• 2014/12/19 [Secure-testing-team] Full SEO Packages At Offer Price..! Mike
• 2014/12/18 [Secure-testing-team] Bug#773495: docker.io: Build new version with security patches Charles Malaheenee
• 2014/12/18 [Secure-testing-team] Bug#773463: jasper: CVE-2014-8137 CVE-2014-8138 Salvatore Bonaccorso
• 2014/12/18 [Secure-testing-team] Bug#773429: dokuwiki: CVE-2014-9253 Moritz Muehlenhoff
• 2014/12/17 [Secure-testing-team] Bug#773417: heirloom-mailx: CVE-2004-2771 CVE-2014-7844 Salvatore Bonaccorso
• 2014/12/17 [Secure-testing-team] Bug#773416: ettercap: CVE-2014-6395 CVE-2014-6396 CVE-2014-9376 CVE-2014-9377 CVE-2014-9378 CVE-2014-9379 CVE-2014-9380 CVE-2014-9381 Moritz Muehlenhoff
• 2014/12/17 [Secure-testing-team] Bug#773364: async-http-client: CVE-2013-7397 CVE-2013-7398 Moritz Muehlenhoff
• 2014/12/15 [Secure-testing-team] Bug#773263: subversion: CVE-2014-3580 Moritz Muehlenhoff
• 2014/12/15 [Secure-testing-team] Bug#773230: asterisk: CVE-2014-9374 Salvatore Bonaccorso
• 2014/12/14 [Secure-testing-team] SEA FREIGHT 1214 EX CHINA TO MIDDEL EAST BEN
• 2014/12/14 [Secure-testing-team] Bug#773101: CVE-2013-6435 CVE-2014-8118 Moritz Muehlenhoff
• 2014/12/14 [Secure-testing-team] The ISAAC BENAVIDEZ SR.
• 2014/12/13 [Secure-testing-team] Bug#773026: screen does not lock on suspend (jessie regression) Faidon Liambotis
• 2014/12/11 [Secure-testing-team] Bug#772909: docker.io: CVE-2014-9356 CVE-2014-9357 CVE-2014-9358 Salvatore Bonaccorso
• 2014/12/11 Re: [Secure-testing-team] WYPALL Wipes, Sontara Wipes, Heavy Duty Wipers WIPEX NONWOVENS
• 2014/12/11 [Secure-testing-team] Bug#772880: src:firebird2.5: Unauthenticated remote server crash Debian BTS
• 2014/12/11 [Secure-testing-team] Bug#772815: pyyaml: CVE-2014-9130 Moritz Muehlenhoff
• 2014/12/11 [Secure-testing-team] Bug#772811: unrtf: CVE-2014-9274 CVE-2014-9275 Moritz Muehlenhoff
• 2014/12/10 [Secure-testing-team] Bug#772794: qpid-cpp: Multiple security issues Moritz Muehlenhoff
• 2014/12/10 [Secure-testing-team] Bug#772793: cpio: CVE-2014-9112 Moritz Muehlenhoff
• 2014/12/10 [Secure-testing-team] Bug#772758: [release.debian.org] unblock webkitkde (security fix) Adrien Grellier
• 2014/12/10 [Secure-testing-team] Bug#772712: CVE-2014-8124: Horizon denial of service attack through login page Thomas Goirand
• 2014/12/10 [Secure-testing-team] Bug#772710: CVE-2014-8124: Horizon denial of service attack through login page Thomas Goirand
• 2014/12/09 [Secure-testing-team] Bug#772644: MiniUPnPd is vulnerable to DNS rebinding attacks Thomas Goirand
• 2014/12/09 [Secure-testing-team] Bug#772622: CVE-2014-8602: denial of service with endless delegations Yves-Alexis Perez
• 2014/12/08 [Secure-testing-team] Bug#772610: bind9: CVE-2014-8500: A Defect in Delegation Handling Can Be Exploited to Crash BIND Salvatore Bonaccorso
• 2014/12/07 Re: [Secure-testing-team] Request to Join Project Debian testing security team from Cong Nguyen (congnt-guest) Salvatore Bonaccorso
• 2014/12/07 [Secure-testing-team] SEA FREIGHT 1207 EX CHINA TO MIDDEL EAST PORTS BEN
• 2014/12/04 [Secure-testing-team] Tecnicas Ventas y Estrategias de Atencion al Cliente en base a PNL (Programacion Neurolinguistica) Gabriela Arana
• 2014/12/04 [Secure-testing-team] Bug#772040: syncevolution-http: syncevo-http-server script uses SSLv3, no TLS support Tino Mettler
• 2014/12/04 [Secure-testing-team] Bug#772036: jasper: CVE-2014-9029 Salvatore Bonaccorso
• 2014/12/04 [Secure-testing-team] Bug#772025: CVE-2014-8106: cirrus: insufficient blit region checks Michael Tokarev
• 2014/12/04 [Secure-testing-team] Bug#772023: nodejs: Upstream version 0.10.33 available George B.
• 2014/12/04 [Secure-testing-team] Bug#772008: libmpfr4: buffer overflow in mpfr_strtofr Vincent Lefevre
• 2014/12/01 [Secure-testing-team] Bug#771768: antiword: CVE-2014-8123: buffer overflow of of atPPSlist[].szName[] Salvatore Bonaccorso
• 2014/11/29 [Secure-testing-team] SEA FREIGHT 1129 EX CHINA TO AFRICA BEN
• 2014/11/29 [Secure-testing-team] Bug#771466: CVE-2013-7108 CVE-2013-7205 Moritz Muehlenhoff
• 2014/11/29 [Secure-testing-team] Bug#771463: CVE-2014-8418 CVE-2014-8412 CVE-2014-8414 CVE-2014-8417 Moritz Muehlenhoff
• 2014/11/28 [Secure-testing-team] Bug#771366: libyaml: CVE-2014-9130: Wrapped strings cause assert failure Salvatore Bonaccorso
• 2014/11/28 [Secure-testing-team] Bug#771365: libyaml-libyaml-perl: CVE-2014-9130: Wrapped strings cause assert failure Salvatore Bonaccorso
• 2014/11/28 [Secure-testing-team] Bug#771359: Disabling SSLv3 Moritz Muehlenhoff
• 2014/11/28 [Secure-testing-team] Bug#771360: CVE-2010-5109 Moritz Muehlenhoff
• 2014/11/28 [Secure-testing-team] Bug#771348: needrestart: starts not running services Christoph Anton Mitterer
• 2014/11/27 [Secure-testing-team] Bug#771274: util-linux: CVE-2014-9114: command injection flaw in blkid Salvatore Bonaccorso
• 2014/11/27 [Secure-testing-team] Bug#771163: libreoffice: CVE-2014-9093 Moritz Muehlenhoff
• 2014/11/25 [Secure-testing-team] best price for best solar solution Billy
• 2014/11/25 [Secure-testing-team] Bug#770972: libksba: buffer overflow in ksba_oid_to_str Salvatore Bonaccorso
• 2014/11/25 [Secure-testing-team] Bug#770934: rails: CVE-2014-7818 CVE-2014-7829 Moritz Muehlenhoff
• 2014/11/25 [Secure-testing-team] Bug#770932: ruby2.1: CVE-2014-8090 Moritz Muehlenhoff
• 2014/11/25 [Secure-testing-team] Bug#770929: bugs.debian.org: TLS handshaking fails (cf. #707049 archived) Gaetan RYCKEBOER
• 2014/11/25 [Secure-testing-team] Bug#770918: Two CVEs against FLAC Erik de Castro Lopo
• 2014/11/24 [Secure-testing-team] Bug#770809: open-vm-tools: CVE-2014-4199 CVE-2014-4200 Moritz Muehlenhoff
• 2014/11/23 [Secure-testing-team] Bug#770692: python-pyopencl: Insecure temporary file creation for kernel cache Bruce Merry
• 2014/11/23 [Secure-testing-team] Bug#770689: python-pycuda: Insecure temporary file creation for kernel cache Bruce Merry
• 2014/11/21 [Secure-testing-team] Bug#770499: conkeror: WebM loading crashes conkeror Nils Dagsson Moskopp
• 2014/11/21 [Secure-testing-team] Bug#770478: pcre3: CVE-2014-8964: heap buffer overflow Salvatore Bonaccorso
• 2014/11/21 [Secure-testing-team] Bug#770431: CVE-2014-7821: DoS through invalid DNS configuration Thomas Goirand
• 2014/11/20 [Secure-testing-team] Bug#770425: wordpress: 4.0.1 security release Salvatore Bonaccorso
• 2014/11/20 [Secure-testing-team] Bug#770327: non-root induced DoS via /proc/brcm_monitor0 Robert Bihlmeyer
• 2014/11/20 [Secure-testing-team] Bug#770313: dolibarr: CVE-2014-7137 Moritz Muehlenhoff
• 2014/11/19 [Secure-testing-team] Bug#770230: CVE-2014-5146 CVE-2014-5149 CVE-2014-8594 CVE-2014-8595 Moritz Muehlenhoff
• 2014/11/19 [Secure-testing-team] Bug#770229: CVE-2014-2901 CVE-2014-2902 CVE-2014-2903 CVE-2014-2904 Moritz Muehlenhoff
• 2014/11/19 [Secure-testing-team] Bug#770222: icecast2: on-connect scripts: icecast can leak output to attentive sources Sven Herzberg
• 2014/11/19 [Secure-testing-team] Bug#770164: php5: /usr/lib/php5/sessionclean broken: passes incompatible argument to sed Sven Herzberg
• 2014/11/18 [Secure-testing-team] Bug#770043: Denial of Service in dhcpd5: CVE-2014-6060 Pierre Schweitzer
• 2014/11/17 [Secure-testing-team] Bug#769905: cyassl: please disable SSLv3 Thijs Kinkhorst
• 2014/11/17 [Secure-testing-team] Bug#769904: gnutls28: please disable SSLv3 Thijs Kinkhorst
• 2014/11/16 [Secure-testing-team] SEA FREIGHT 1116 EX SHENZHEN, CHINA TO DUBAI:1350 BEN
• 2014/11/15 [Secure-testing-team] Bug#769698: libspring-java: CVE-2014-3625 Directory Traversal in Spring Framework bastien ROUCARIÈS
• 2014/11/14 [Secure-testing-team] Bug#769632: kde-runtime: CVE-2014-8600: Insufficient Input Validation By IO Slaves and Webkit Part Salvatore Bonaccorso
• 2014/11/14 [Secure-testing-team] Bug#769521: sosreport: Starting with v3.2, archives are created with read permissions for everyone Louis Bouchard
• 2014/11/13 [Secure-testing-team] SEA FREIGHT 1113 EX SHENZHEN, CHINA TO ABBAS/DAMMAN/SHARJAH/DOHA/KUWAIT/DUBAI BEN
• 2014/11/13 [Secure-testing-team] Bug#769482: /usr/bin/pip-3.2: pip 1.1 is insecure, unsupported and does not work with most of python3 Sam McLeod
• 2014/11/13 [Secure-testing-team] Bug#769451: qemu: CVE-2014-7840: insufficient parameter validation during ram load Salvatore Bonaccorso
• 2014/11/13 [Secure-testing-team] Bug#769410: wireshark: CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714 Salvatore Bonaccorso
• 2014/11/12 Re: [Secure-testing-team] passing on my cron job Florian Weimer
• 2014/11/11 [Secure-testing-team] Translation of proven publication quality-翻译和润稿，新桥翻译获国际出版商认可！ New Bridge Translation
• 2014/11/11 [Secure-testing-team] Translation of proven publication quality-翻译和润稿，新桥翻译获国际出版商认可！ New Bridge Translation
• 2014/11/11 [Secure-testing-team] Bug#769154: gnutls28: CVE-2014-8564: Heap corruption when generating key ID for ECC (GNUTLS-SA-2014-5) Salvatore Bonaccorso
• 2014/11/11 [Secure-testing-team] Bug#769149: libvirt: CVE-2014-7823: dumpxml: information leak with migratable flag Salvatore Bonaccorso
• 2014/11/11 [Secure-testing-team] SEA FREIGHT 1111 EX SHENZHEN, CHINA TO MIDDEL EAST PORTS BEN
• 2014/11/10 [Secure-testing-team] Bug#768945: busybox lzo implementation suffers from CVE-2014-4607 flaw Michael Tokarev
• 2014/11/09 Re: [Secure-testing-team] passing on my cron job Salvatore Bonaccorso
• 2014/11/09 Re: [Secure-testing-team] passing on my cron job Florian Weimer
• 2014/11/09 Re: [Secure-testing-team] passing on my cron job Florian Weimer
• 2014/11/09 Re: [Secure-testing-team] passing on my cron job Thijs Kinkhorst
• 2014/11/09 Re: [Secure-testing-team] passing on my cron job Salvatore Bonaccorso
• 2014/11/09 Re: [Secure-testing-team] passing on my cron job Florian Weimer
• 2014/11/09 [Secure-testing-team] Bug#768807: php5: CVE-2014-3710: denial of service (out-of-bounds read and application crash) via a crafted ELF file Salvatore Bonaccorso
• 2014/11/09 [Secure-testing-team] Bug#768806: file: CVE-2014-3710: denial of service (out-of-bounds read and application crash) via a crafted ELF file Salvatore Bonaccorso
• 2014/11/08 [Secure-testing-team] Bug#768656: Buffer overflow while trying to send a file as base64 with /query [email protected]
• 2014/11/08 Re: [Secure-testing-team] passing on my cron job Salvatore Bonaccorso
• 2014/11/08 Re: [Secure-testing-team] passing on my cron job Florian Weimer
• 2014/11/08 [Secure-testing-team] passing on my cron job Joey Hess
• 2014/11/07 [Secure-testing-team] Bug#768494: [imagemagick] Some special crafted jpeg file could lead to DOS bastien ROUCARIES
• 2014/11/07 [Secure-testing-team] Bug#768408: python-requests-kerberos: CVE-2014-8650: failure to handle mutual authentication Salvatore Bonaccorso
• 2014/11/06 [Secure-testing-team] Bug#768369: [libjpeg62-turbo] [DOS] Stack smashing bastien ROUCARIES
• 2014/11/06 [Secure-testing-team] Bug#768327: linux-image-amd64: Inclusion of 3.17 kernel in place of 3.16 kernel Abhisek Mukherjee
• 2014/11/06 [Secure-testing-team] Bug#768294: freeipa: CVE-2014-7828: password not required when OTP in use Salvatore Bonaccorso
• 2014/11/04 [Secure-testing-team] SEA FREIGHT 1105 EX SHENZHEN, CHINA TO DUBAI/DAMMAN/ABBAS/RIYADH ben
• 2014/11/04 [Secure-testing-team] Bug#768104: kfreebsd-9: CVE-2014-8476: getlogin kernel memory disclosure Steven Chamberlain
• 2014/11/04 [Secure-testing-team] Bug#768047: aptitude: doesn't notice a package is obsolete, when it's not yet for an older suite Christoph Anton Mitterer
• 2014/11/03 [Secure-testing-team] Bug#767979: aircrack-ng: CVE-2014-8321 CVE-2014-8322 CVE-2014-8323 CVE-2014-8324 Salvatore Bonaccorso
• 2014/10/31 [Secure-testing-team] Bug#767541: jenkins: CVE-2014-3665 Salvatore Bonaccorso
• 2014/10/31 [Secure-testing-team] Bug#767535: CVE-2014-8760 Moritz Muehlenhoff
• 2014/10/30 [Secure-testing-team] AIR FREIGHT 1030 EX PVG，CHINA TO EUR AIRPORTS ben
• 2014/10/29 [Secure-testing-team] Bug#767227: lsyncd: Crash and/or code execution on `, $, " in file names creshal
• 2014/10/28 [Secure-testing-team] Bug#767171: Command execution Moritz Muehlenhoff
• 2014/10/28 [Secure-testing-team] Bug#767087: beep: Linux Capabilities should be used instead of SUID root bit Alessandro Selli
• 2014/10/27 [Secure-testing-team] SEA FREIGHT 1027 EX SHENZHEN,CHINA TO DUBAI swing
• 2014/10/26 [Secure-testing-team] Bug#766938: systemd: network-pre.target doesn't seem to be guaranteed to run before the network is up Christoph Anton Mitterer
• 2014/10/26 [Secure-testing-team] Update Your Account Paypal Within 24 Hours Paypal
• 2014/10/26 [Secure-testing-team] Embedded copies of gnulib Joachim Reichel
• 2014/10/25 [Secure-testing-team] Bug#766796: konqueror: Konqueror is vulnerable to the Poodle attack Patrick Häcker
• 2014/10/23 [Secure-testing-team] Bug#766545: CVE-2014-8763 CVE-2014-8764 Moritz Muehlenhoff
• 2014/10/23 [Secure-testing-team] Bug#766520: Allow unlimited access to the device to any user Vincent Bernat
• 2014/10/21 [Secure-testing-team] Bug#766296: python-urllib3: shouldn't it depend on python-ndg-httpsclient, python-openssl and python-pyasn1 Christoph Anton Mitterer
• 2014/10/21 [Secure-testing-team] SEA FREIGHT 1022 EX SHENZHEN TO DUBAI/JEDDAH/SOHAR/ASHDOD ben
• 2014/10/21 [Secure-testing-team] Bug#766275: kfreebsd-9: CVE-2014-3711: memory leak in sandboxed namei lookup Steven Chamberlain
• 2014/10/19 [Secure-testing-team] Bug#765928: chromium-browser: Please disable SSLv3 Dominic Hargreaves
• 2014/10/18 [Secure-testing-team] Bug#765895: rkhunter: maybe the Debian version should deactivate any update functionality Christoph Anton Mitterer
• 2014/10/18 [Secure-testing-team] Bug#765854: ecryptfs-utils: Private directory not automatically unmounted anymore on logout Julian Andres Klode
• 2014/10/17 [Secure-testing-team] Bug#765722: CVE-2014-3660 libxml2 billion laugh variant Thijs Kinkhorst
• 2014/10/17 [Secure-testing-team] Bug#765714: CVE-2014-7230 & CVE-2014-7231: Potential leak of passwords into log files. Thomas Goirand
• 2014/10/17 [Secure-testing-team] Bug#765704: CVE-2014-7230 & CVE-2014-7231: Potential leak of passwords into log files. Thomas Goirand
• 2014/10/17 [Secure-testing-team] Bug#765663: mysql-5.5: Multiple security fixes from October 2014 CPU Salvatore Bonaccorso
• 2014/10/17 [Secure-testing-team] Bug#765664: mariadb-5.5: Multiple security fixes from October 2014 CPU could affect MariaDB Salvatore Bonaccorso
• 2014/10/16 [Secure-testing-team] Bug#765644: calendarserver: SSLMethod defaults to SSLv3_METHOD Philipp Busch
• 2014/10/16 [Secure-testing-team] Bug#765632: openssh-client: Debian shouldn't deviate in hardcoded default values, especially not security relevant one Christoph Anton Mitterer
• 2014/10/15 [Secure-testing-team] Bug#765512: general: distrust old crypto algos and protocols perdefault Christoph Anton Mitterer
• 2014/10/15 [Secure-testing-team] Bug#765507: [drupal7] CVE-2014-3704 - Drupal - pre Auth SQL Injection Vulnerability Ingo Juergensmann
• 2014/10/15 [Secure-testing-team] Bug#765496: CVE-2014-3689: insufficient parameter validation in vmware_vga rectangle functions Michael Tokarev
• 2014/10/15 [Secure-testing-team] Bug#765473: dovecot-common: Dovecot (previous to V2.1) doesn't allow to disable SSLv3 which is bad: CVE-2014-3566 Henrik Langos
• 2014/10/14 [Secure-testing-team] AIR RATE 1015 EX CHINA AIRPORTS TO DXB/DWC swing
• 2014/10/14 [Secure-testing-team] Bug#765435: libvpx: Out-of-bounds write with WebM video [CVE-2014-1578] Yves-Alexis Perez
• 2014/10/11 [Secure-testing-team] Bug#764894: virt-manager: USB devices are generally redirected to VMs Christoph Anton Mitterer
• 2014/10/11 [Secure-testing-team] Bug#764885: Security flaws in the current Debian version David Prévot
• 2014/10/11 [Secure-testing-team] Bug#764801: CVE-2014-0104 Moritz Muehlenhoff
• 2014/10/05 Re: [Secure-testing-team] Security Repository is empty ? (http://security.debian.org/debian-security/dists/testing/updates/main/binary-amd64/Packages.gz ) Thijs Kinkhorst
• 2014/10/05 [Secure-testing-team] Security Repository is empty ? (http://security.debian.org/debian-security/dists/testing/updates/main/binary-amd64/Packages.gz ) hsinfu
• 2014/10/03 [Secure-testing-team] Bug#763938: needrestart shouldn't checky only for daemons that need to be restarted Christoph Anton Mitterer
• 2014/10/03 [Secure-testing-team] Bug#763922: torque: CVE-2014-3684: non-root users able to kill any process on any node in a job Salvatore Bonaccorso
• 2014/10/03 [Secure-testing-team] Raventós i Blanc 酒莊代表來台　北中南Cava party 【iCheers電子報】
• 2014/10/02 [Secure-testing-team] Bug#763829: rsyslogd is not correctly restarted, vulnerable version still running Vincent Lefevre
• 2014/10/02 [Secure-testing-team] Bug#763759: bash: please drop debian-specific privmode disablement patch Henrique de Moraes Holschuh
• 2014/10/01 [Secure-testing-team] Bug#763608: CVE-2014-3607 Moritz Muehlenhoff
• 2014/09/27 [Secure-testing-team] Bug#763134: acpi-support-base: /usr/share/acpi-support/power-funcs broken from line 24 if consolekit installed and no dbus running waijb
• 2014/09/27 [Secure-testing-team] Bug#763104: Please, don’t rely on class.phpmailer.php to act as an autoloader David Prévot

• Earlier messages
• Later messages