oss-security - CVE requests: POE::Component::IRC, Alien Arena, Babiloo, Typo3, abcm2ps, ModSecurity, Linux kernel

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20100927212104.GA2569@galadriel.inutil.org>
Date: Mon, 27 Sep 2010 23:21:04 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Subject: CVE requests: POE::Component::IRC, Alien Arena, Babiloo, Typo3,
 abcm2ps, ModSecurity, Linux kernel

Hi,
here's a few CVE requests for issues in the Debian Security Tracker
without a CVE ID assigned:

1. POE::Component::IRC
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581194
http://github.com/bingos/poe-component-irc/compare/d2ead04...675f55cd

2. Alien Arena
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575621
http://corent.proboards.com/index.cgi?board=bugreport&action=display&thread=4761

3. Babiloo
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=591995

4. Typo3
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-012/
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
http://lists.debian.org/debian-security-announce/2010/msg00144.html

5. abcm2ps
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014
http://moinejf.free.fr/abcm2ps-5.txt
http://secunia.com/advisories/39345/

6. ModSecurity
There was already a CVE request by Jan Lieskovsky, but it doesn't seem
to have led to an ID assignment:
http://www.openwall.com/lists/oss-security/2010/02/10/2

7. Linux kernel (local DoS, impact limited to specific hardware)
http://git.kernel.org/linus/b525c06cdbd8a3963f0173ccd23f9147d4c384b5
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=565790

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.