oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 8	² 4	³	⁴ 14	⁵ 11	⁶ 1
⁷ 12	⁸ 9	⁹ 1	¹⁰ 7	¹¹ 4	¹² 5	¹³
¹⁴ 1	¹⁵ 4	¹⁶ 4	¹⁷ 13	¹⁸ 3	¹⁹ 1	²⁰ 3
²¹ 1	²² 3	²³ 18	²⁴ 2	²⁵ 2	²⁶	²⁷ 1
²⁸ 1	²⁹ 2	³⁰ 8

Messages by day:

April 1 (8 messages)

Re: CVE id request: comix (Tomas Hoger <thoger@...hat.com>)
CVE id request: mod_suphp (Tomas Hoger <thoger@...hat.com>)
CVE Request: otrs authentication bypass (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request: otrs authentication bypass (Tomas Hoger <thoger@...hat.com>)
CVE id request: squid (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request: otrs authentication bypass (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE id request: comix (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: squid ("Steven M. Christey" <coley@...us.mitre.org>)

April 2 (4 messages)

Re: CVE id request: mod_suphp ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: openssh "ForceCommand" improperly implemented (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: openssh "ForceCommand" improperly implemented ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: openssh "ForceCommand" improperly implemented (Florian Weimer <fw@...eb.enyo.de>)

April 4 (14 messages)

Re: announcing oCERT & oss-security to Bugtraq & f-d (Jonathan Smith <smithj@...ethemallocs.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Solar Designer <solar@...nwall.com>)
announcing oss-security to Bugtraq & f-d (Solar Designer <solar@...nwall.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Vincent Danen <vdanen@...sec.ca>)
Re: "who shouldn't be on-list" (security curmudgeon <jericho@...rition.org>)
Re: Re: "who shouldn't be on-list" (Jonathan Smith <smithj@...ethemallocs.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Andrea Barisani <andrea@...ersepath.com>)
Re: announcing oss-security to Bugtraq & f-d (Andrea Barisani <andrea@...ersepath.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Solar Designer <solar@...nwall.com>)
wiki: vendor info (Solar Designer <solar@...nwall.com>)
Re: wiki: vendor info (security curmudgeon <jericho@...rition.org>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Josh Bressers <bressers@...hat.com>)
Re: wiki: vendor info (Josh Bressers <bressers@...hat.com>)
Re: wiki: vendor info (lyger <lyger@...rition.org>)

April 5 (11 messages)

Re: announcing oCERT & oss-security to Bugtraq & f-d (Josh Bressers <bressers@...hat.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Vincent Danen <vdanen@...sec.ca>)
Re: Re: "who shouldn't be on-list" (Vincent Danen <vdanen@...sec.ca>)
Re: wiki: vendor info (Vincent Danen <vdanen@...sec.ca>)
Re: wiki: search for FIXME tags (Was: announcing oCERT & oss-security to Bugtraq & f-d) ("(GalaxyMaster)" <galaxy@...nwall.com>)
Re: wiki: vendor info ("(GalaxyMaster)" <galaxy@...nwall.com>)
Re: wiki: vendor info (security curmudgeon <jericho@...rition.org>)
list: members vs. read-only subscribers (Solar Designer <solar@...nwall.com>)
Re: wiki: vendor info & osvdb.org/vendors (Solar Designer <solar@...nwall.com>)
Re: wiki: vendor info & osvdb.org/vendors (Solar Designer <solar@...nwall.com>)
Re: wiki: vendor info & osvdb.org/vendors (security curmudgeon <jericho@...rition.org>)

April 6 (1 message)

[oCERT 2008-02] libfishsound insufficient boundary checks (Andrea Barisani <lcars@...rt.org>)

April 7 (12 messages)

Security fixes in m4-1.4.11 ("Patrick J. Volkerding" <security@...ckware.com>)
Re: [oCERT 2008-02] libfishsound insufficient boundary checks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Security fixes in m4-1.4.11 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Security fixes in m4-1.4.11 (Lubomir Kundrak <lkundrak@...hat.com>)
Re: [oCERT 2008-02] libfishsound insufficient boundary (Andrea Barisani <lcars@...rt.org>)
gcc 4.2 optimizations and integer overflow checks (Josh Bressers <bressers@...hat.com>)
Re: gcc 4.2 optimizations and integer overflow checks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: gcc 4.2 optimizations and integer overflow checks (Marcus Meissner <meissner@...e.de>)
Re: gcc 4.2 optimizations and integer overflow checks (Nico Golde <oss-security+ml@...lde.de>)
Re: list: members vs. read-only subscribers (Josh Bressers <bressers@...hat.com>)
Re: gcc 4.2 optimizations and integer overflow checks (Solar Designer <solar@...nwall.com>)
Re: Security fixes in m4-1.4.11 (Florian Weimer <fw@...eb.enyo.de>)

April 8 (9 messages)

Re: announcing oCERT & oss-security to Bugtraq & f-d (Solar Designer <solar@...nwall.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Andrea Barisani <lcars@...rt.org>)
Re: list: members vs. read-only subscribers (Solar Designer <solar@...nwall.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Josh Bressers <bressers@...hat.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Andrea Barisani <lcars@...rt.org>)
Re: list: members vs. read-only subscribers (Josh Bressers <bressers@...hat.com>)
Re: announcing oCERT & oss-security to Bugtraq & f-d (Solar Designer <solar@...nwall.com>)
wiki: pagemove, reconfiguration of default word separator for page names ("(GalaxyMaster)" <galaxy@...nwall.com>)
CVE Request (rsync) (Josh Bressers <bressers@...hat.com>)

April 9 (1 message)

Re: gcc 4.2 optimizations and integer overflow checks (Nico Golde <oss-security+ml@...lde.de>)

April 10 (7 messages)

Re: list: members vs. read-only subscribers (Vincent Danen <vdanen@...sec.ca>)
buffer overflow in Python zlib extension module (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE Request (rsync) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: gcc 4.2 optimizations and integer overflow checks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: buffer overflow in Python zlib extension module ("Steven M. Christey" <coley@...us.mitre.org>)
CVE requests: drupal and phpbb (Hanno Böck <hanno@...eck.de>)
CVE request: openfire <3.5.0 Denial of Service (Robert Buchholz <rbu@...too.org>)

April 11 (4 messages)

CVE request: Swfdec <0.6.4 remote file disclosure (Robert Buchholz <rbu@...too.org>)
CVE request: Opera <9.27 Multiple issues (Robert Buchholz <rbu@...too.org>)
Re: Security fixes in m4-1.4.11 (Josh Bressers <bressers@...hat.com>)
Re: gcc 4.2 optimizations and integer overflow checks (Florian Weimer <fw@...eb.enyo.de>)

April 12 (5 messages)

Re: CVE request: Opera <9.27 Multiple issues ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: openfire <3.5.0 Denial of Service ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: tss <= 0.8.1-3: arbitary file reading (Steve Kemp <steve@...ve.org.uk>)
Re: CVE requests: drupal and phpbb ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Opera <9.27 Multiple issues (Robert Buchholz <rbu@...too.org>)

April 14 (1 message)

[oCERT-2008-003] libpng zero-length chunks incorrect handling (Andrea Barisani <lcars@...rt.org>)

April 15 (4 messages)

CVE id request - clamav (Tomas Hoger <thoger@...hat.com>)
clamav: Endless loop / hang with crafter arj, CVE-2008-1387 (Hanno Böck <hanno@...eck.de>)
CVE id request: cecilia insecure temporary file usage (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: xine-lib insufficient boundary check in speex decoder (Nico Golde <oss-security+ml@...lde.de>)

April 16 (4 messages)

Re: CVE id request: xine-lib insufficient boundary check in speex decoder ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: cecilia insecure temporary file usage ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Swfdec <0.6.4 remote file disclosure ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request - clamav ("Steven M. Christey" <coley@...us.mitre.org>)

April 17 (13 messages)

[oCERT-2008-004] multiple speex implementations insufficient boundary checks (Andrea Barisani <lcars@...rt.org>)
CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) (Hanno Böck <hanno@...eck.de>)
Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) (Josh Bressers <bressers@...hat.com>)
CVE id request: xine-lib <= 1.1.12 nsf handling (Hanno Böck <hanno@...eck.de>)
Re: CVE request: tss <= 0.8.1-3: arbitary file reading (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) (Hanno Böck <hanno@...eck.de>)
Re: CVE request: tss <= 0.8.1-3: arbitary file reading ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: DBMail <2.2.9 (Matthias Geerdsen <vorlon@...too.org>)
Re: CVE request: DBMail <2.2.9 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: xine-lib <= 1.1.12 nsf handling ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) ("Steven M. Christey" <coley@...us.mitre.org>)

April 18 (3 messages)

Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) (Hanno Böck <hanno@...eck.de>)
Re: gcc 4.2 optimizations and integer overflow checks (Marcus Meissner <meissner@...e.de>)
CSRF vulnerability in ikiwiki (Florian Weimer <fw@...eb.enyo.de>)

April 19 (1 message)

Re: gcc 4.2 optimizations and integer overflow checks (Solar Designer <solar@...nwall.com>)

April 20 (3 messages)

Re: CSRF vulnerability in ikiwiki (Florian Weimer <fw@...eb.enyo.de>)
Re: CSRF vulnerability in ikiwiki ("Steven M. Christey" <coley@...us.mitre.org>)
Re: gcc 4.2 optimizations and integer overflow checks (Richard Guenther <rguenther@...e.de>)

April 21 (1 message)

CVE request:Perl bug #48156 (Jonathan Smith <smithj@...ethemallocs.com>)

April 22 (3 messages)

audit log injection attack via login (Josh Bressers <bressers@...hat.com>)
Re: list: members vs. read-only subscribers (Josh Bressers <bressers@...hat.com>)
CVE Request: inspircd (Micah Anderson <micah@...eup.net>)

April 23 (18 messages)

Re: list: members vs. read-only subscribers (Solar Designer <solar@...nwall.com>)
Re: list: members vs. read-only subscribers (Jonathan Smith <smithj@...ethemallocs.com>)
Re: list: members vs. read-only subscribers (Solar Designer <solar@...nwall.com>)
CVE request: phpmyadmin PMASA-2008-3 (Hanno Böck <hanno@...eck.de>)
Re: list: members vs. read-only subscribers (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phpmyadmin PMASA-2008-3 ("Steven M. Christey" <coley@...us.mitre.org>)
web archives ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: inspircd ("Steven M. Christey" <coley@...us.mitre.org>)
Re: audit log injection attack via login ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request:Perl bug #48156 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: web archives (Jonathan Smith <smithj@...ethemallocs.com>)
seclists.org archive request: oss-security (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE Request: inspircd (security curmudgeon <jericho@...rition.org>)
Re: seclists.org archive request: oss-security (security curmudgeon <jericho@...rition.org>)
Re: web archives (security curmudgeon <jericho@...rition.org>)
Re: web archives (Solar Designer <solar@...nwall.com>)
Re: list archive at Gmane (Solar Designer <solar@...nwall.com>)
Re: web archives (security curmudgeon <jericho@...rition.org>)

April 24 (2 messages)

Re: CVE Request: inspircd (Micah Anderson <micah@...eup.net>)
Re: CVE request:Perl bug #48156 (Florian Weimer <fw@...eb.enyo.de>)

April 25 (2 messages)

CVE request: licq denial of service (Marcus Meissner <meissner@...e.de>)
Re: list: members vs. read-only subscribers (Josh Bressers <bressers@...hat.com>)

April 27 (1 message)

CVE request: horde-kronolith-2.1.7 XSS in addevent.php (Matt Fleming <mattjfleming@...glemail.com>)

April 28 (1 message)

Re: CVE request: insecure X11 handling in ltsp (Nico Golde <oss-security+ml@...lde.de>)

April 29 (2 messages)

CVE id request: wordpress (Nico Golde <oss-security+ml@...lde.de>)
CVE request: egroupware (Hanno Böck <hanno@...eck.de>)

April 30 (8 messages)

security problem in ESP fragment handling? (Marcus Meissner <meissner@...e.de>)
Re: security problem in ESP fragment handling? ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: insecure X11 handling in ltsp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: egroupware ("Steven M. Christey" <coley@...us.mitre.org>)
Re: security problem in ESP fragment handling? (Marcus Meissner <meissner@...e.de>)
Re: security problem in ESP fragment handling? (Mark J Cox <mjc@...hat.com>)
Re: security problem in ESP fragment handling? (Marcus Meissner <meissner@...e.de>)
asterisk dupe? (Moritz Muehlenhoff <jmm@...ian.org>)

143 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.