Open Source Security

CVE Request: Wordpress: 8 security issues in 4.7: Posted by Craig Small on Jan 13Hi, I couldn't find any CVE for… http://dlvr.it/N66wYM 

Re: Nginx (Debian-based + Gentoo distros) - Root Privilege Escalation [CVE-2016-1247 UPDATE]: Posted by Thomas… http://dlvr.it/N646DR 

Re: Nginx (Debian-based + Gentoo distros) - Root Privilege Escalation [CVE-2016-1247 UPDATE]: Posted by Carlos… http://dlvr.it/N61vkG 

CVE-2017-0357: iucode-tool (v1.4 to v2.1): heap buffer overflow on -tr loader: Posted by Henrique de Moraes… http://dlvr.it/N60mqv 

Re: Nginx (Debian-based + Gentoo distros) - Root Privilege Escalation [CVE-2016-1247 UPDATE]: Posted by Thomas… http://dlvr.it/N5yq8R 

Re: Nginx (Debian-based + Gentoo distros) - Root Privilege Escalation [CVE-2016-1247 UPDATE]: Posted by Daniel Kahn… http://dlvr.it/N5yq4B 

Re: Re: Fuzzing jasper: Posted by Tomas Hoger on Jan 13Can the above two CVEs be rejected as duplicates of… http://dlvr.it/N5wqFg 

Re: Nginx (Debian-based + Gentoo distros) - Root Privilege Escalation [CVE-2016-1247 UPDATE]: Posted by Carlos… http://dlvr.it/N5wq9H 

CVE-2017-2584 Kernel: kvm: use after free in complete_emulated_mmio: Posted by P J P on Jan 13 Hello, Linux kernel… http://dlvr.it/N5t93Q 

linux-distros subscription: Posted by Michal Hrusecky on Jan 13Hi, I would like to request subscription to… http://dlvr.it/N5sZQK 

Nginx (Debian-based + Gentoo distros) - Root Privilege Escalation [CVE-2016-1247 UPDATE]: Posted by Dawid Golunski… http://dlvr.it/N5qgkS 

Re: CVE Request: Zabbix: SQL injection vulnerabilities in "Latest data": Posted by cve-assign on Jan 12Use… http://dlvr.it/N5jpm9 

Re: invalid free in GNU ed before 1.14.1: Posted by cve-assign on Jan 12Use CVE-2017-5357. http://dlvr.it/N5jpjD 

Re: CVE Request: Irssi out of bounds read in format string: Posted by cve-assign on Jan 12Use CVE-2017-5356. http://dlvr.it/N5jpRv 

Re: CVE Request: MUJS null pointer dereference and Heap buffer overflow write: Posted by cve-assign on Jan 12Use… http://dlvr.it/N5jLxR 

Re: CVE-2016-7056 ECDSA P-256 timing attack key recovery (OpenSSL, LibreSSL, BoringSSL): Posted by Casper Thomsen… http://dlvr.it/N5b5Tm 

CVE Request: MUJS null pointer dereference and Heap buffer overflow write: Posted by Dileep Kumar on Jan 12Hi, The… http://dlvr.it/N5Vf0b 

CVE Request: Irssi out of bounds read in format string: Posted by Ailin Nemui on Jan 12Hi, can you please check… http://dlvr.it/N5TyT0 

Re: invalid free in GNU ed before 1.14.1: Posted by Hanno Böck on Jan 12Oh, that's interesting. I can confirm that… http://dlvr.it/N5RG8y 

Re: invalid free in GNU ed before 1.14.1: Posted by Florian Weimer on Jan 12There is red/ed -r. I wouldn't rely on… http://dlvr.it/N5QgZN