oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 9	³	⁴
⁵ 5	⁶ 4	⁷ 5	⁸ 6	⁹ 3	¹⁰ 3	¹¹
¹² 9	¹³ 4	¹⁴ 10	¹⁵	¹⁶ 9	¹⁷ 3	¹⁸ 8
¹⁹ 4	²⁰ 5	²¹ 12	²² 9	²³ 1	²⁴ 3	²⁵ 6
²⁶ 2	²⁷ 4	²⁸ 5	²⁹ 1	³⁰ 3	³¹ 3

Messages by day:

May 2 (9 messages)

CVE-2008-0553 / CVE-2006-4484 also affects tkimg (Tomas Hoger <thoger@...hat.com>)
CVE Request (PHP) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request (PHP) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: group announcement (was: list: members vs. read-only subscribers) (Josh Bressers <bressers@...hat.com>)
Re: group announcement (was: list: members vs. read-only subscribers) (Vincent Danen <vdanen@...sec.ca>)
Re: group announcement (Jonathan Smith <smithj@...ethemallocs.com>)
Re: group announcement (was: list: members vs. read-only subscribers) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: group announcement (was: list: members vs. read-only subscribers) (Josh Bressers <bressers@...hat.com>)
Re: group announcement (Jonathan Smith <smithj@...ethemallocs.com>)

May 5 (5 messages)

Re: group announcement (Josh Bressers <bressers@...hat.com>)
Re: group announcement (Jim Meyering <jim@...ering.net>)
CVE id request - mysql (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request - mysql ("Steven M. Christey" <coley@...us.mitre.org>)
Re: asterisk dupe? ("Steven M. Christey" <coley@...us.mitre.org>)

May 6 (4 messages)

CVE id request - libid3tag (Tomas Hoger <thoger@...hat.com>)
Re: Re: CVE Request (PHP) (Robert Buchholz <rbu@...too.org>)
openssh CVE-2008-1657 question (Vincent Danen <vdanen@...sec.ca>)
Re: openssh CVE-2008-1657 question (Nico Golde <oss-security+ml@...lde.de>)

May 7 (5 messages)

Re: openssh CVE-2008-1657 question (Vincent Danen <vdanen@...sec.ca>)
CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) (Christian Hoffmann <hoffie@...too.org>)
CVE-2008-0352 is a dup of CVE-2007-4567 (Kees Cook <kees@...ntu.com>)
Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request - libid3tag ("Steven M. Christey" <coley@...us.mitre.org>)

May 8 (6 messages)

CVE-2008-1615 reproducer? (Marcus Meissner <meissner@...e.de>)
Re: CVE-2008-0352 is a dup of CVE-2007-4567 (Mark J Cox <mjc@...hat.com>)
Re: CVE-2008-1615 reproducer? (Mark J Cox <mjc@...hat.com>)
Re: Re: CVE Request (PHP) (Robert Buchholz <rbu@...too.org>)
Re: Re: CVE Request (PHP) (Robert Buchholz <rbu@...too.org>)
Re: CVE id request: wordpress (Nico Golde <oss-security+ml@...lde.de>)

May 9 (3 messages)

versions affected by CVE-2008-1675 - update (Nico Golde <oss-security+ml@...lde.de>)
Multiples vulnerabilities in wordnet (Pierre-Yves Rofes <py@...too.org>)
Re: Multiples vulnerabilities in wordnet (Ben Haskell <ben@...rity.princeton.edu>)

May 10 (3 messages)

CVE request: Linux vfs: fix permission checking in sys_utimensat (Robert Buchholz <rbu@...too.org>)
CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Robert Buchholz <rbu@...too.org>)
CVE id request: vlc local privilege escalation (Nico Golde <oss-security+ml@...lde.de>)

May 12 (9 messages)

Re: group announcement (Solar Designer <solar@...nwall.com>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Robert Buchholz <rbu@...too.org>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: wordpress ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc local privilege escalation ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Linux vfs: fix permission checking in sys_utimensat ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Multiples vulnerabilities in wordnet ("Steven M. Christey" <coley@...us.mitre.org>)

May 13 (4 messages)

Re: Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) (Hanno Böck <hanno@...eck.de>)
Re: Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) (Tomas Hoger <thoger@...hat.com>)
Re: Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: uudeview (Nico Golde <oss-security+ml@...lde.de>)

May 14 (10 messages)

Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Robert Buchholz <rbu@...too.org>)
CVE id request: Django Cross-Site Scripting ("Pierre-Yves Rofes" <py@...too.org>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Sven Joachim <svenjoac@....de>)
Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Tavis Ormandy <taviso@....lonestar.org>)
vim $TMPDIR directory stat (was: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution) (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution ("Gustavo De Nardin (spuk)" <gustavodn@...driva.com>)
Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution (Sven Joachim <svenjoac@....de>)
Re: CVE id request: uudeview (Nico Golde <oss-security+ml@...lde.de>)

May 16 (9 messages)

OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: OpenSSH key blacklisting ("Craig Edwards (Brain)" <brain@...tspike.net>)
Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: OpenSSH key blacklisting (Vincent Danen <vdanen@...sec.ca>)
Re: OpenSSH key blacklisting (Robert Buchholz <rbu@...too.org>)
Re: OpenSSH key blacklisting ("Gustavo De Nardin (spuk)" <gustavodn@...driva.com>)
Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: OpenSSH key blacklisting ("Gustavo De Nardin (spuk)" <gustavodn@...driva.com>)

May 17 (3 messages)

Re: OpenSSH key blacklisting (Robert Buchholz <rbu@...too.org>)
Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: OpenSSH key blacklisting (Robert Buchholz <rbu@...too.org>)

May 18 (8 messages)

Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: CVE id request: Django Cross-Site Scripting ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: uudeview ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: apache2 (Nico Golde <oss-security+ml@...lde.de>)
Re: OpenSSH key blacklisting (Kees Cook <kees@...ntu.com>)
Re: CVE id request: apache2 (Mark J Cox <mjc@...hat.com>)
Re: OpenSSH key blacklisting (Kees Cook <kees@...flux.net>)
Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)

May 19 (4 messages)

CVE ID request: GNUTLS (Florian Weimer <fw@...eb.enyo.de>)
Re: OpenSSH key blacklisting (Kees Cook <kees@...ntu.com>)
Re: OpenSSH key blacklisting (Kees Cook <kees@...flux.net>)
Re: CVE ID request: GNUTLS (Jonathan Smith <smithj@...ethemallocs.com>)

May 20 (5 messages)

Re: CVE ID request: GNUTLS (Simon Josefsson <simon@...efsson.org>)
Re: CVE ID request: GNUTLS (Tomas Hoger <thoger@...hat.com>)
Re: CVE ID request: GNUTLS (Mark J Cox <mjc@...hat.com>)
Re: OpenSSH key blacklisting (Matthias Andree <matthias.andree@....de>)
CVE request: mtr (Jonathan Smith <smithj@...ethemallocs.com>)

May 21 (12 messages)

Re: CVE request: mtr (Robert Buchholz <rbu@...too.org>)
Re: CVE request: mtr (security curmudgeon <jericho@...rition.org>)
Re: CVE request: mtr (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: mtr (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE request: mtr ("Steven M. Christey" <coley@...us.mitre.org>)
CVE assignments during May ("Steven M. Christey" <coley@...us.mitre.org>)
Root name server changes -> bind (Marcus Meissner <meissner@...e.de>)
vsftpd CVE-2007-5962 (Red Hat / Fedora specific) (Tomas Hoger <thoger@...hat.com>)
[vendor-sec] New Xen ioemu: PVFB backend issue (Jan Lieskovsky <jlieskov@...hat.com>)
Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) (Jonathan Smith <smithj@...ethemallocs.com>)
Re: Root name server changes -> bind (Jonathan Smith <smithj@...ethemallocs.com>)
Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) (Josh Bressers <bressers@...hat.com>)

May 22 (9 messages)

Re: Root name server changes -> bind ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Root name server changes -> bind (security curmudgeon <jericho@...rition.org>)
Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) (Jonathan Smith <smithj@...ethemallocs.com>)
Re: Root name server changes -> bind (Mark J Cox <mjc@...hat.com>)
Re: Root name server changes -> bind (Florian Weimer <fw@...eb.enyo.de>)
Re: Root name server changes -> bind (Thijs Kinkhorst <thijs@...ian.org>)
Re: Root name server changes -> bind (Jonathan Smith <smithj@...ethemallocs.com>)
Re: Root name server changes -> bind (Florian Weimer <fw@...eb.enyo.de>)

May 23 (1 message)

Re: Root name server changes -> bind (Marcus Meissner <meissner@...e.de>)

May 24 (3 messages)

CVE-2008-2292 net-snmp __snprint_value (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE-2008-2292 net-snmp __snprint_value (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: libpam-pgsql (Nico Golde <oss-security+ml@...lde.de>)

May 25 (6 messages)

CVE id request: xscreensaver (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE id request: cbrpager (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: xscreensaver (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: xscreensaver (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: xscreensaver (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: xscreensaver ("Bernhard R. Link" <brlink@...ian.org>)

May 26 (2 messages)

Re: CVE id request: cbrpager (Robert Buchholz <rbu@...too.org>)
update on CVE-2008-2424 (Nico Golde <oss-security+ml@...lde.de>)

May 27 (4 messages)

Security, Open Source Style (Josh Bressers <bressers@...hat.com>)
Re: Security, Open Source Style (Josh Bressers <bressers@...hat.com>)
Re: OpenSSH key blacklisting (Solar Designer <solar@...nwall.com>)
Re: OpenSSH key blacklisting ("Dmitry V. Levin" <ldv@...linux.org>)

May 28 (5 messages)

Re: Security, Open Source Style ("Steven M. Christey" <coley@...us.mitre.org>)
Re: OpenSSH key blacklisting (Tim Brown <timb@...-dimension.org.uk>)
Re: OpenSSH key blacklisting (Sebastian Krahmer <krahmer@...e.de>)
Re: OpenSSH key blacklisting (Nathanael Hoyle <nhoyle@...letech.com>)
Re: OpenSSH key blacklisting (Florian Weimer <fw@...eb.enyo.de>)

May 29 (1 message)

CVE-2008-2363: pan - heap overflow (Pavel Polischouk <pavel.polischouk@...il.com>)

May 30 (3 messages)

Re: CVE id request: uudeview (Robert Buchholz <rbu@...too.org>)
Latest flash player is not vulnerable (Eren Türkay <turkay.eren@...il.com>)
Re: Latest flash player is not vulnerable (security curmudgeon <jericho@...rition.org>)

May 31 (3 messages)

CVE id request: ikiwiki (Nico Golde <oss-security+ml@...lde.de>)
Re: OpenSSH key blacklisting (Mike Frysinger <vapier@...too.org>)
Re: CVE id request: ikiwiki (Martin Schulze <joey@...odrom.org>)

136 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.