oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 11	³ 9	⁴ 8	⁵ 4	⁶	⁷	⁸ 2
⁹ 1	¹⁰ 4	¹¹ 5	¹² 4	¹³ 1	¹⁴ 2	¹⁵ 2
¹⁶ 12	¹⁷ 8	¹⁸ 2	¹⁹ 8	²⁰ 3	²¹ 1	²²
²³ 7	²⁴ 4	²⁵	²⁶ 1	²⁷ 3	²⁸	²⁹ 1
³⁰ 9

Messages by day:

June 2 (11 messages)

ARP handler Inspection tool released (Andrea Di Pasquale <spikey.it@...il.com>)
SQL_injection detection tool released (MARE system Security <security@...e-system.de>)
Re: ARP handler Inspection tool released (Nico Golde <oss-security+ml@...lde.de>)
code reviews (was: ARP handler Inspection tool released) (Solar Designer <solar@...nwall.com>)
Re: code reviews (was: ARP handler Inspection tool released) (Andrea Barisani <lcars@...rt.org>)
Re: code reviews (was: ARP handler Inspection tool released) ("Chris Rohlf" <chris.rohlf@...il.com>)
Re: code reviews (was: ARP handler Inspection tool released) (Nico Golde <oss-security+ml@...lde.de>)
Re: code reviews (was: ARP handler Inspection tool released) (Andrea Barisani <lcars@...rt.org>)
Re: code reviews (was: ARP handler Inspection tool released) (Nico Golde <oss-security+ml@...lde.de>)
Re: ARP handler Inspection tool released (Jonathan Smith <smithj@...ethemallocs.com>)
Re: OpenSSH key blacklisting (Tim Brown <tmb@...35.com>)

June 3 (9 messages)

Re: OpenSSH key blacklisting (Sebastian Krahmer <krahmer@...e.de>)
Re: code reviews (was: ARP handler Inspection tool released) (Steve Kemp <steve@...ve.org.uk>)
tool announcements (was: ARP handler Inspection tool released) (Solar Designer <solar@...nwall.com>)
Re: tool announcements (was: ARP handler Inspection tool released) (Solar Designer <solar@...nwall.com>)
Re: code reviews (was: ARP handler Inspection tool released) (Solar Designer <solar@...nwall.com>)
Re: tool announcements (was: ARP handler Inspection tool released) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: tool announcements (Jonathan Smith <smithj@...ethemallocs.com>)
Re: tool announcements (Pierre-Yves Rofes <py@...too.org>)
Re: tool announcements ("Steven M. Christey" <coley@...us.mitre.org>)

June 4 (8 messages)

Re: tool announcements (was: ARP handler Inspection tool released) ("Michael Simpson" <mikie.simpson@...il.com>)
CVE id request: slash (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: OpenSSH key blacklisting (Nathanael Hoyle <nhoyle@...letech.com>)
Python Unsafe Module Loading (Ned Ludd <solar@...too.org>)
Re: CVE id request: slash (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: OpenSSH key blacklisting (The Fungi <fungi@...goth.org>)
Re: OpenSSH key blacklisting (Nathanael Hoyle <nhoyle@...letech.com>)
Re: OpenSSH key blacklisting (Jonathan Smith <smithj@...ethemallocs.com>)

June 5 (4 messages)

Re: Python Unsafe Module Loading (Robert Buchholz <rbu@...too.org>)
Re: Python Unsafe Module Loading (Ned Ludd <solar@...too.org>)
Re: Python Unsafe Module Loading (Florian Weimer <fw@...eb.enyo.de>)
Re: Python Unsafe Module Loading (Robert Buchholz <rbu@...too.org>)

June 8 (2 messages)

CVE-Request: courier-authlib sql injection (Hanno Böck <hanno@...eck.de>)
Re: CVE-Request: courier-authlib sql injection (Robert Buchholz <rbu@...too.org>)

June 9 (1 message)

[oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing (Andrea Barisani <lcars@...rt.org>)

June 10 (4 messages)

exploitability of off-by-one in motion webserver (Nico Golde <oss-security+ml@...lde.de>)
FreeType 2.3.6 (Josh Bressers <bressers@...hat.com>)
Re: exploitability of off-by-one in motion webserver (Solar Designer <solar@...nwall.com>)
Re: FreeType 2.3.6 (Josh Bressers <bressers@...hat.com>)

June 11 (5 messages)

Re: exploitability of off-by-one in motion webserver (Nico Golde <oss-security+ml@...lde.de>)
Re: exploitability of off-by-one in motion webserver ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE-Request: courier-authlib sql injection ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: nasm off-by-one (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: nasm off-by-one (Eren Türkay <turkay.eren@...il.com>)

June 12 (4 messages)

CVE id request: TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core ("Thijs Kinkhorst" <thijs@...ian.org>)
CVE id request: menalto gallery (Hanno Böck <hanno@...eck.de>)
Re: CVE id request: nasm off-by-one (Marcus Meissner <meissner@...e.de>)
malloc and heap corruption (pandora@...mail.com)

June 13 (1 message)

CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode (Matthias Andree <matthias.andree@....de>)

June 14 (2 messages)

CVE request: Opera 9.50 (Marcus Meissner <meissner@...e.de>)
Re: CVE request: Opera 9.50 (Nico Golde <oss-security+ml@...lde.de>)

June 15 (2 messages)

Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode (Robert Buchholz <rbu@...too.org>)
CVE id request: Clamav (Steffen Joeris <steffen.joeris@...lelinux.de>)

June 16 (12 messages)

Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode (Matthias Andree <matthias.andree@....de>)
CVE Id request: vim (Jamie Strandboge <jamie@...onical.com>)
Re: CVE id request: Clamav (Tomas Hoger <thoger@...hat.com>)
Re: CVE Id request: vim (Jamie Strandboge <jamie@...onical.com>)
Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode (Jonathan Smith <smithj@...ethemallocs.com>)
Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Id request: vim ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: Clamav ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Opera 9.50 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: nasm off-by-one ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: menalto gallery ("Steven M. Christey" <coley@...us.mitre.org>)

June 17 (8 messages)

Re: FreeType 2.3.6 (Thomas Biege <thomas@...e.de>)
Re: FreeType 2.3.6 (Tomas Hoger <thoger@...hat.com>)
Re: FreeType 2.3.6 (Thomas Biege <thomas@...e.de>)
Re: CVE id request: Clamav (Eren Türkay <turkay.eren@...il.com>)
Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode (Matthias Andree <matthias.andree@....de>)
Re: CVE id request: Clamav (Eren Türkay <turkay.eren@...il.com>)
Re: FreeType 2.3.6 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: Clamav (Török Edwin <edwin@...mav.net>)

June 18 (2 messages)

query on a pppol2tp_recvmsg() fix - security relevant? (Marcus Meissner <meissner@...e.de>)
Re: query on a pppol2tp_recvmsg() fix - security relevant? (Eren Türkay <turkay.eren@...il.com>)

June 19 (8 messages)

CVE Request: Critical vuln in Firefox 3.0 (Hanno Böck <hanno@...eck.de>)
Re: CVE Request: Critical vuln in Firefox 3.0 (Nico Golde <oss-security+ml@...lde.de>)
Re: query on a pppol2tp_recvmsg() fix - security relevant? (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: php 5.2.6 safe_mode bypass (Hanno Böck <hanno@...eck.de>)
Re: CVE request: php 5.2.6 safe_mode bypass (Nico Golde <oss-security+ml@...lde.de>)
CVE request: php 5.2.6 ext/imap buffer overflows (Christian Hoffmann <hoffie@...too.org>)
Re: New Xen ioemu: PVFB backend issue (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request: Critical vuln in Firefox 3.0 ("Steven M. Christey" <coley@...us.mitre.org>)

June 20 (3 messages)

CVE id request: tmsnc (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: tmsnc (Eren Türkay <turkay.eren@...il.com>)
Re: CVE id request: tmsnc (Nico Golde <oss-security+ml@...lde.de>)

June 21 (1 message)

CVE id request: perl (Steffen Joeris <steffen.joeris@...lelinux.de>)

June 23 (7 messages)

Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode (Tomas Hoger <thoger@...hat.com>)
CVE request: phpmyadmin < 2.11.7 XSS (Hanno Böck <hanno@...eck.de>)
Re: CVE id request: perl ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: tmsnc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: New Xen ioemu: PVFB backend issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: php 5.2.6 ext/imap buffer overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: query on a pppol2tp_recvmsg() fix - security relevant? ("Steven M. Christey" <coley@...us.mitre.org>)

June 24 (4 messages)

Re: [vendor-sec] Re: New Xen ioemu: PVFB backend issue (Robert Buchholz <rbu@...too.org>)
Re: CVE request: php 5.2.6 ext/imap buffer overflows (Christian Hoffmann <hoffie@...too.org>)
ruby regression (was: Re: [vendor-sec] Ruby memory corruption bugs in array and string handling) (Jonathan Smith <smithj@...ethemallocs.com>)
Re: ruby regression (was: Re: [vendor-sec] Ruby memory corruption bugs in array and string handling) (Drew Yao <ayao@...le.com>)

June 26 (1 message)

CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25 (Jan Lieskovsky <jlieskov@...hat.com>)

June 27 (3 messages)

CVE id request: checkinstall (Steffen Joeris <steffen.joeris@...lelinux.de>)
Squid advisory (Josh Bressers <bressers@...hat.com>)
CVE Request (pidgin) (Josh Bressers <bressers@...hat.com>)

June 29 (1 message)

Two remote DoS issues in linuxdcpp (Robert Buchholz <rbu@...too.org>)

June 30 (9 messages)

CVE id request mercurial:Insufficient input validation (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE-2008-2375 older vsftpd authentication memory leak (Mark J Cox <mjc@...hat.com>)
openldap DoS (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: openldap DoS (Josh Bressers <bressers@...hat.com>)
Re: CVE id request mercurial:Insufficient input validation ("Steven M. Christey" <coley@...us.mitre.org>)
Re: [vendor-sec] Re: patch sets for recent ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
CVE request for dnsmasq DoS (Jamie Strandboge <jamie@...onical.com>)
Re: patch sets for recent ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: patch sets for recent ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

112 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.