Security bugs are reported here via bugzilla

[bugzilla-daemon AT metalab.unc.edu]

http://bugs.sourcemage.org/show_bug.cgi?id=3161

dufflebunk AT dufflebunk.homeip.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|sm-sorcery-                 |dufflebunk AT dufflebunk.homeip
                   |bugs AT lists.ibiblio.org      |.net





------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu  Wed Apr 23 18:23:19 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
        [152.2.210.35])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 14EDE20061
        for <sm-security AT lists.ibiblio.org>;
        Wed, 23 Apr 2003 18:23:19 -0400 (EDT)
Received: (from nobody@localhost)
        by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3NMNHE13646;
        Wed, 23 Apr 2003 18:23:17 -0400
Date: Wed, 23 Apr 2003 18:23:17 -0400
Message-Id: <200304232223.h3NMNHE13646 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: CC
Subject: [SM-Security] 
        [Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Apr 2003 22:23:19 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3161

dufflebunk AT dufflebunk.homeip.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From dufflebunk AT dufflebunk.homeip.net  2003-04-23 
18:23 -------
merged



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu  Thu Apr 24 05:18:58 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
        [152.2.210.35])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 30C4020086
        for <sm-security AT lists.ibiblio.org>;
        Thu, 24 Apr 2003 05:18:45 -0400 (EDT)
Received: (from nobody@localhost)
        by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3O9IjC04022;
        Thu, 24 Apr 2003 05:18:45 -0400
Date: Thu, 24 Apr 2003 05:18:45 -0400
Message-Id: <200304240918.h3O9IjC04022 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: CC
Subject: [SM-Security] [Bug 3045] There is a samba version update . . .
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2003 09:18:59 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3045

rycee AT home.se changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED





------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu  Thu Apr 24 14:07:52 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
        [152.2.210.35])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 20C0220017
        for <sm-security AT lists.ibiblio.org>;
        Thu, 24 Apr 2003 14:07:52 -0400 (EDT)
Received: (from nobody@localhost)
        by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3OI7pU05498;
        Thu, 24 Apr 2003 14:07:51 -0400
Date: Thu, 24 Apr 2003 14:07:51 -0400
Message-Id: <200304241807.h3OI7pU05498 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: CC
Subject: [SM-Security] 
        [Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2003 18:07:52 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3161





------- Additional Comments From seth AT tautology.org  2003-04-24 14:07 -------
M_L: How would that work since if the md5 were wrong, the md5 error message
would get saved to $NAME with the uncompressed file?



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu  Thu Apr 24 20:17:12 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
        [152.2.210.35])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 5372920015
        for <sm-security AT lists.ibiblio.org>;
        Thu, 24 Apr 2003 20:17:12 -0400 (EDT)
Received: (from nobody@localhost)
        by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3P0HCc21385;
        Thu, 24 Apr 2003 20:17:12 -0400
Date: Thu, 24 Apr 2003 20:17:12 -0400
Message-Id: <200304250017.h3P0HCc21385 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 3217] New: PHP-Nuke 6.5 XSS Vuln, for the record
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 00:17:12 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3217

           Summary: PHP-Nuke 6.5 XSS Vuln, for the record
           Product: Security
           Version: unspecified
          Platform: Other
               URL: http://news.sourcemage.org/article.php?story=20030424200
                    209745
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Security Issue
        AssignedTo: sm-security AT lists.ibiblio.org
        ReportedBy: seth AT tautology.org


http://news.sourcemage.org/article.php?story=20030424200209745



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu  Thu Apr 24 20:21:52 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
        [152.2.210.35])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 7C37120036
        for <sm-security AT lists.ibiblio.org>;
        Thu, 24 Apr 2003 20:21:52 -0400 (EDT)
Received: (from nobody@localhost)
        by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3P0Lqd22192;
        Thu, 24 Apr 2003 20:21:52 -0400
Date: Thu, 24 Apr 2003 20:21:52 -0400
Message-Id: <200304250021.h3P0Lqd22192 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 3217] PHP-Nuke 6.5 XSS Vuln, for the record
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 00:21:52 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3217

seth AT tautology.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sergey AT sourcemage.org
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From seth AT tautology.org  2003-04-24 20:21 -------
Sergey, I fixed this bug, FYI.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu  Thu Apr 24 20:23:45 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
        [152.2.210.35])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 5C75020036
        for <sm-security AT lists.ibiblio.org>;
        Thu, 24 Apr 2003 20:23:45 -0400 (EDT)
Received: (from nobody@localhost)
        by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3P0NjQ22618;
        Thu, 24 Apr 2003 20:23:45 -0400
Date: Thu, 24 Apr 2003 20:23:45 -0400
Message-Id: <200304250023.h3P0NjQ22618 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 3217] PHP-Nuke 6.5 XSS Vuln, for the record
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 00:23:45 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3217





------- Additional Comments From seth AT tautology.org  2003-04-24 20:23 -------
Created an attachment (id=940)
 --> (http://bugs.sourcemage.org/attachment.cgi?id=940&action=view)
mainfile.php patch

This is a generated patch from the fixed mainfile.php given on bugtraq.

I guess people don't post their own patches now and you have to go through the
tedium of making your own.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From seth AT tautology.org  Fri May  2 20:22:54 2003
Return-Path: <seth AT tautology.org>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from smgl.positivism.org (irc.positivism.org [65.102.47.196])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id BDA1D20085
        for <sm-security AT lists.ibiblio.org>;
        Fri,  2 May 2003 20:22:51 -0400 (EDT)
Received: from tautology.org 
(evrtwa1-ar13-4-33-070-190.evrtwa1.dsl-verizon.net
        [4.33.70.190])
        by smgl.positivism.org (8.12.9/8.12.9) with ESMTP id h430Mi4b008774
        for <sm-security AT lists.ibiblio.org>; Sat, 3 May 2003 00:22:46 GMT
Received: from tautology.org (tautology.org [127.0.0.1])
        by tautology.org (8.12.9/8.12.9) with ESMTP id h430Mg6l044376
        for <sm-security AT lists.ibiblio.org>;
        Fri, 2 May 2003 17:22:42 -0700 (PDT)
        (envelope-from seth AT tautology.org)
Received: from localhost (seth@localhost)
        by tautology.org (8.12.9/8.12.9/Submit) with ESMTP id h430Mg5C044373
        for <sm-security AT lists.ibiblio.org>;
        Fri, 2 May 2003 17:22:42 -0700 (PDT)
Date: Fri, 2 May 2003 17:22:39 -0700 (PDT)
From: Seth Woolley <seth AT tautology.org>
To: sm-security AT lists.ibiblio.org
Message-ID: <20030502172044.W43693-100000 AT tautology.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: [SM-Security] Re: setiathome 3.08 to test and stable integration
        (fwd)
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.2
Precedence: list
List-Id: Security bugs are reported here via bugzilla
        <sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
        <mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Sat, 03 May 2003 00:22:54 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

for the record.

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org

- ---------- Forwarded message ----------
Date: Fri, 2 May 2003 17:18:14 -0700 (PDT)
From: Seth Woolley <seth AT tautology.org>
To: M.L. <mlubrano AT sourcemage.org>
Cc: tsmith AT sourcemage.org,  <swoolley AT sourcemage.org>,
      <sandalle AT sourcemage.org>
Subject: Re: setiathome 3.08 to test and stable integration

It's integrated now.  PPC and Sparc are still at 3.03 in the spell, hope
that's not a problem.  When I upgraded it in devel the first time that was
all that was available.

http://setiathome.berkeley.edu/unix.html

I still don't see anything available but 3.03 in the other archs.

On Fri, 2 May 2003, M.L. wrote:

> On Fri, 2 May 2003 12:47:25 -0700 (PDT), Seth Woolley wrote
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > I'll integrate it when I snatch a bit of time (in a couple hours or
> > so)
> >
> > M.L., weren't we going to give you access to test and stable for security
> > integrations as well?
> >
>
> Actually I'm in holidays :)
> (no access to my own smgl box for this kind of things)
>
> Bye,
> Mat.
>
> > On Fri, 2 May 2003, M.L. wrote:
> >
> > > Hi Tony,
> > >
> > > (Seth: FYI & approval)
> > >
> > > the setiathome 3.08 update is a security fix. It should enter test and
> stable
> > > asap...
> > >
> > > Tony, if Seth agree, would you integrate it...?
> > >
> > > Bye,
> > > Mat.
> > >
> > > //
> > > //   M.L.
> > > //   ICQ #23832402 ; Linux User #36502
> > > //
> > >
> >
> > - --
> > Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
> > Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
> > Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.0 (FreeBSD)
> >
> > iD8DBQE+sstR7fQ833vqzH0RAswNAKCQ/vcrUCF6kjERwh5zleS+w6Ub0gCgozjf
> > yyt+UOdApdT+xaYGWLUOWVU=
> > =wWz7
> > -----END PGP SIGNATURE-----
>
>
> //
> //   M.L.
> //   ICQ #23832402 ; Linux User #36502
> //
>
>

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (FreeBSD)

iD8DBQE+swvS7fQ833vqzH0RAldUAJ4kJyqrSrSe7wafcKV8GFZMJvaWZwCfd6ZQ
9rKhAPhJ8pP7fprjS7ssYWM=
=xbFR
-----END PGP SIGNATURE-----