Skip to Content.
Sympa Menu

sm-security - [SM-Security] [Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: bugzilla-daemon AT metalab.unc.edu
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] [Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles
  • Date: Wed, 23 Apr 2003 18:22:45 -0400

http://bugs.sourcemage.org/show_bug.cgi?id=3161

dufflebunk AT dufflebunk.homeip.net changed:

What |Removed |Added
----------------------------------------------------------------------------
AssignedTo|sm-sorcery- |dufflebunk AT dufflebunk.homeip
|bugs AT lists.ibiblio.org |.net





------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu Wed Apr 23 18:23:19 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 14EDE20061
for <sm-security AT lists.ibiblio.org>;
Wed, 23 Apr 2003 18:23:19 -0400 (EDT)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3NMNHE13646;
Wed, 23 Apr 2003 18:23:17 -0400
Date: Wed, 23 Apr 2003 18:23:17 -0400
Message-Id: <200304232223.h3NMNHE13646 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: CC
Subject: [SM-Security]
[Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Apr 2003 22:23:19 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3161

dufflebunk AT dufflebunk.homeip.net changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED



------- Additional Comments From dufflebunk AT dufflebunk.homeip.net 2003-04-23
18:23 -------
merged



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu Thu Apr 24 05:18:58 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 30C4020086
for <sm-security AT lists.ibiblio.org>;
Thu, 24 Apr 2003 05:18:45 -0400 (EDT)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3O9IjC04022;
Thu, 24 Apr 2003 05:18:45 -0400
Date: Thu, 24 Apr 2003 05:18:45 -0400
Message-Id: <200304240918.h3O9IjC04022 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: CC
Subject: [SM-Security] [Bug 3045] There is a samba version update . . .
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2003 09:18:59 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3045

rycee AT home.se changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |CLOSED





------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu Thu Apr 24 14:07:52 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 20C0220017
for <sm-security AT lists.ibiblio.org>;
Thu, 24 Apr 2003 14:07:52 -0400 (EDT)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3OI7pU05498;
Thu, 24 Apr 2003 14:07:51 -0400
Date: Thu, 24 Apr 2003 14:07:51 -0400
Message-Id: <200304241807.h3OI7pU05498 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: CC
Subject: [SM-Security]
[Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2003 18:07:52 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3161





------- Additional Comments From seth AT tautology.org 2003-04-24 14:07 -------
M_L: How would that work since if the md5 were wrong, the md5 error message
would get saved to $NAME with the uncompressed file?



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
>From nobody AT divahouse.metalab.unc.edu Thu Apr 24 20:17:12 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 5372920015
for <sm-security AT lists.ibiblio.org>;
Thu, 24 Apr 2003 20:17:12 -0400 (EDT)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3P0HCc21385;
Thu, 24 Apr 2003 20:17:12 -0400
Date: Thu, 24 Apr 2003 20:17:12 -0400
Message-Id: <200304250017.h3P0HCc21385 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 3217] New: PHP-Nuke 6.5 XSS Vuln, for the record
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 00:17:12 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3217

Summary: PHP-Nuke 6.5 XSS Vuln, for the record
Product: Security
Version: unspecified
Platform: Other
URL: http://news.sourcemage.org/article.php?story=20030424200
209745
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: Security Issue
AssignedTo: sm-security AT lists.ibiblio.org
ReportedBy: seth AT tautology.org


http://news.sourcemage.org/article.php?story=20030424200209745



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Thu Apr 24 20:21:52 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 7C37120036
for <sm-security AT lists.ibiblio.org>;
Thu, 24 Apr 2003 20:21:52 -0400 (EDT)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3P0Lqd22192;
Thu, 24 Apr 2003 20:21:52 -0400
Date: Thu, 24 Apr 2003 20:21:52 -0400
Message-Id: <200304250021.h3P0Lqd22192 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 3217] PHP-Nuke 6.5 XSS Vuln, for the record
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 00:21:52 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3217

seth AT tautology.org changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |sergey AT sourcemage.org
Status|NEW |RESOLVED
Resolution| |FIXED



------- Additional Comments From seth AT tautology.org 2003-04-24 20:21 -------
Sergey, I fixed this bug, FYI.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From nobody AT divahouse.metalab.unc.edu Thu Apr 24 20:23:45 2003
Return-Path: <nobody AT divahouse.metalab.unc.edu>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from divahouse.metalab.unc.edu (divahouse.metalab.unc.edu
[152.2.210.35])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 5C75020036
for <sm-security AT lists.ibiblio.org>;
Thu, 24 Apr 2003 20:23:45 -0400 (EDT)
Received: (from nobody@localhost)
by divahouse.metalab.unc.edu (8.11.6/8.11.6) id h3P0NjQ22618;
Thu, 24 Apr 2003 20:23:45 -0400
Date: Thu, 24 Apr 2003 20:23:45 -0400
Message-Id: <200304250023.h3P0NjQ22618 AT divahouse.metalab.unc.edu>
From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
X-Bugzilla-Reason: AssignedTo
Subject: [SM-Security] [Bug 3217] PHP-Nuke 6.5 XSS Vuln, for the record
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2003 00:23:45 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=3217





------- Additional Comments From seth AT tautology.org 2003-04-24 20:23 -------
Created an attachment (id=940)
--> (http://bugs.sourcemage.org/attachment.cgi?id=940&action=view)
mainfile.php patch

This is a generated patch from the fixed mainfile.php given on bugtraq.

I guess people don't post their own patches now and you have to go through the
tedium of making your own.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
>From seth AT tautology.org Fri May 2 20:22:54 2003
Return-Path: <seth AT tautology.org>
Delivered-To: sm-security AT lists.ibiblio.org
Received: from smgl.positivism.org (irc.positivism.org [65.102.47.196])
by happyhouse.metalab.unc.edu (Postfix) with ESMTP id BDA1D20085
for <sm-security AT lists.ibiblio.org>;
Fri, 2 May 2003 20:22:51 -0400 (EDT)
Received: from tautology.org
(evrtwa1-ar13-4-33-070-190.evrtwa1.dsl-verizon.net
[4.33.70.190])
by smgl.positivism.org (8.12.9/8.12.9) with ESMTP id h430Mi4b008774
for <sm-security AT lists.ibiblio.org>; Sat, 3 May 2003 00:22:46 GMT
Received: from tautology.org (tautology.org [127.0.0.1])
by tautology.org (8.12.9/8.12.9) with ESMTP id h430Mg6l044376
for <sm-security AT lists.ibiblio.org>;
Fri, 2 May 2003 17:22:42 -0700 (PDT)
(envelope-from seth AT tautology.org)
Received: from localhost (seth@localhost)
by tautology.org (8.12.9/8.12.9/Submit) with ESMTP id h430Mg5C044373
for <sm-security AT lists.ibiblio.org>;
Fri, 2 May 2003 17:22:42 -0700 (PDT)
Date: Fri, 2 May 2003 17:22:39 -0700 (PDT)
From: Seth Woolley <seth AT tautology.org>
To: sm-security AT lists.ibiblio.org
Message-ID: <20030502172044.W43693-100000 AT tautology.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: [SM-Security] Re: setiathome 3.08 to test and stable integration
(fwd)
X-BeenThere: sm-security AT lists.ibiblio.org
X-Mailman-Version: 2.1.2
Precedence: list
List-Id: Security bugs are reported here via bugzilla
<sm-security.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-security>
List-Post: <mailto:sm-security AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-security>,
<mailto:sm-security-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Sat, 03 May 2003 00:22:54 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

for the record.

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org

- ---------- Forwarded message ----------
Date: Fri, 2 May 2003 17:18:14 -0700 (PDT)
From: Seth Woolley <seth AT tautology.org>
To: M.L. <mlubrano AT sourcemage.org>
Cc: tsmith AT sourcemage.org, <swoolley AT sourcemage.org>,
<sandalle AT sourcemage.org>
Subject: Re: setiathome 3.08 to test and stable integration

It's integrated now. PPC and Sparc are still at 3.03 in the spell, hope
that's not a problem. When I upgraded it in devel the first time that was
all that was available.

http://setiathome.berkeley.edu/unix.html

I still don't see anything available but 3.03 in the other archs.

On Fri, 2 May 2003, M.L. wrote:

> On Fri, 2 May 2003 12:47:25 -0700 (PDT), Seth Woolley wrote
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > I'll integrate it when I snatch a bit of time (in a couple hours or
> > so)
> >
> > M.L., weren't we going to give you access to test and stable for security
> > integrations as well?
> >
>
> Actually I'm in holidays :)
> (no access to my own smgl box for this kind of things)
>
> Bye,
> Mat.
>
> > On Fri, 2 May 2003, M.L. wrote:
> >
> > > Hi Tony,
> > >
> > > (Seth: FYI & approval)
> > >
> > > the setiathome 3.08 update is a security fix. It should enter test and
> stable
> > > asap...
> > >
> > > Tony, if Seth agree, would you integrate it...?
> > >
> > > Bye,
> > > Mat.
> > >
> > > //
> > > // M.L.
> > > // ICQ #23832402 ; Linux User #36502
> > > //
> > >
> >
> > - --
> > Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
> > Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
> > Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.0 (FreeBSD)
> >
> > iD8DBQE+sstR7fQ833vqzH0RAswNAKCQ/vcrUCF6kjERwh5zleS+w6Ub0gCgozjf
> > yyt+UOdApdT+xaYGWLUOWVU=
> > =wWz7
> > -----END PGP SIGNATURE-----
>
>
> //
> // M.L.
> // ICQ #23832402 ; Linux User #36502
> //
>
>

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (FreeBSD)

iD8DBQE+swvS7fQ833vqzH0RAldUAJ4kJyqrSrSe7wafcKV8GFZMJvaWZwCfd6ZQ
9rKhAPhJ8pP7fprjS7ssYWM=
=xbFR
-----END PGP SIGNATURE-----




  • [SM-Security] [Bug 3161] unpack md5 fixes for non-tar-rpm-zip-files/patchfiles, bugzilla-daemon, 04/23/2003

Archive powered by MHonArc 2.6.24.

Top of Page