oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 8	² 5	³ 6	⁴ 1	⁵ 1	⁶ 4
⁷ 4	⁸ 16	⁹ 12	¹⁰ 7	¹¹ 4	¹² 5	¹³ 4
¹⁴ 2	¹⁵ 6	¹⁶ 12	¹⁷ 1	¹⁸ 6	¹⁹	²⁰ 4
²¹ 5	²²	²³ 1	²⁴ 2	²⁵ 2	²⁶ 4	²⁷ 13
²⁸ 6	²⁹	³⁰ 1	³¹ 8

Messages by day:

July 1 (8 messages)

Re: CVE id request mercurial:Insufficient input validation (Nico Golde <oss-security+ml@...lde.de>)
Re: openldap DoS (Josh Bressers <bressers@...hat.com>)
Re: openldap DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Two remote DoS issues in linuxdcpp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (pidgin) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: checkinstall ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: php 5.2.6 ext/imap buffer overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request for dnsmasq DoS ("Steven M. Christey" <coley@...us.mitre.org>)

July 2 (5 messages)

Re: Two remote DoS issues in linuxdcpp (Robert Buchholz <rbu@...too.org>)
Re: openldap DoS (Ludwig Nussel <ludwig.nussel@...e.de>)
More ruby integer overflows (rb_ary_fill / Array#fill) (Tomas Hoger <thoger@...hat.com>)
Re: CVE request for dnsmasq DoS (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: phpmyadmin < 2.11.7 XSS ("Steven M. Christey" <coley@...us.mitre.org>)

July 3 (6 messages)

Re: Re: CVE Request (pidgin) (Nico Golde <oss-security+ml@...lde.de>)
2.6.25.10 security fixes, please assign CVE id (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE Request (pidgin) (Josh Bressers <bressers@...hat.com>)
Re: CVE request for dnsmasq DoS (Jamie Strandboge <jamie@...onical.com>)
Re: Re: CVE Request (pidgin) (Vincent Danen <vdanen@...sec.ca>)
Re: Re: CVE Request (pidgin) (Robert Buchholz <rbu@...too.org>)

July 4 (1 message)

Re: Re: CVE Request (pidgin) (Josh Bressers <bressers@...hat.com>)

July 5 (1 message)

Re: Re: CVE Request (pidgin) (Nico Golde <oss-security+ml@...lde.de>)

July 6 (4 messages)

CVE request: mybb (Hanno Böck <hanno@...eck.de>)
CVE request: simple machines forum (Hanno Böck <hanno@...eck.de>)
CVE request: moodle xss in < 1.8.5 (Hanno Böck <hanno@...eck.de>)
Re: CVE request: moodle xss in < 1.8.5 (Nico Golde <oss-security+ml@...lde.de>)

July 7 (4 messages)

Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Jonathan Smith <smithj@...ethemallocs.com>)
Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Jonathan Smith <smithj@...ethemallocs.com>)
[oCERT-2008-007] libpoppler uninitialized pointer (Andrea Barisani <lcars@...rt.org>)
Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Bram Moolenaar <Bram@...lenaar.net>)

July 8 (16 messages)

Re: 2.6.25.10 security fixes, please assign CVE id (Eugene Teo <eteo@...hat.com>)
Re: CVE request: moodle xss in < 1.8.5 (Hanno Böck <hanno@...eck.de>)
CVE-2008-2931 kernel: missing check before setting mount propagation (Eugene Teo <eteo@...hat.com>)
Re: CVE-2008-2931 kernel: missing check before setting mount propagation (Eugene Teo <eteo@...hat.com>)
Re: CVE id request: Clamav (Tomas Hoger <thoger@...hat.com>)
Re: Re: CVE Request (pidgin) (Vincent Danen <vdanen@...sec.ca>)
Re: CVE request: moodle xss in < 1.8.5 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request for dnsmasq DoS (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request: mybb ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: simple machines forum ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: moodle xss in < 1.8.5 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: 2.6.25.10 security fixes, please assign CVE id ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: moodle xss in < 1.8.5 (Nico Golde <oss-security+ml@...lde.de>)
Major DNS vulnerability announced [CVE Question] (security curmudgeon <jericho@...rition.org>)
Re: Major DNS vulnerability announced [CVE Question] ("Steven M. Christey" <coley@...us.mitre.org>)

July 9 (12 messages)

Re: Major DNS vulnerability announced [CVE Question] (Jonathan Smith <smithj@...ethemallocs.com>)
Re: Major DNS vulnerability announced [CVE Question] (The Fungi <fungi@...goth.org>)
Re: Major DNS vulnerability announced [CVE Question] (Matthias Andree <matthias.andree@....de>)
DNS vulnerability: other relevant software (Matthias Geerdsen <vorlon@...too.org>)
Re: Major DNS vulnerability announced [CVE Question] (Florian Weimer <fw@...eb.enyo.de>)
Re: DNS vulnerability: other relevant software (The Fungi <fungi@...goth.org>)
Re: DNS vulnerability: other relevant software (Mark J Cox <mjc@...hat.com>)
CVE id request: projectl (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: libavformat (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request: PowerDNS recursor source port randomization (Florian Weimer <fw@...eb.enyo.de>)
Re: DNS vulnerability: other relevant software (Robert Buchholz <rbu@...too.org>)
Re: DNS vulnerability: other relevant software (Florian Weimer <fw@...eb.enyo.de>)

July 10 (7 messages)

Re: DNS vulnerability: other relevant software (Eugene Teo <eteo@...hat.com>)
Re: DNS vulnerability: other relevant software (Eugene Teo <eteo@...hat.com>)
CVE request: multiple drupal issues in < 6.3,5.8 (Hanno Böck <hanno@...eck.de>)
Re: DNS vulnerability: other relevant software (Eugene Teo <eteo@...hat.com>)
Re: DNS vulnerability: other relevant software (Eugene Teo <eteo@...hat.com>)
Re: DNS vulnerability: other relevant software (Thomas Biege <thomas@...e.de>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Tomas Hoger <thoger@...hat.com>)

July 11 (4 messages)

Re: DNS vulnerability: other relevant software (Nathanael Hoyle <nhoyle@...letech.com>)
Re: DNS vulnerability: other relevant software ("Bernhard R. Link" <brlink@...ian.org>)
Re: DNS vulnerability: other relevant software (Nathanael Hoyle <nhoyle@...letech.com>)
Re: CVE request: moodle xss in < 1.8.5 (Nico Golde <oss-security+ml@...lde.de>)

July 12 (5 messages)

CVE request: phpbb < 3.0.2 (Hanno Böck <hanno@...eck.de>)
CVE requests: joomla <1.5.4 (Hanno Böck <hanno@...eck.de>)
Re: CVE request for dnsmasq DoS (Jamie Strandboge <jamie@...onical.com>)
CVE id request: op (Nico Golde <oss-security+ml@...lde.de>)
Re: DNS vulnerability: other relevant software (Florian Weimer <fw@...eb.enyo.de>)

July 13 (4 messages)

Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Jan Minář" <rdancer@...ncer.org>)
Re: openldap DoS (Nico Golde <oss-security+ml@...lde.de>)
CVE requests: crashers by zzuf (Hanno Böck <hanno@...eck.de>)
Re: DNS vulnerability: other relevant software (Florian Weimer <fw@...eb.enyo.de>)

July 14 (2 messages)

Re: CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25 (Marcus Meissner <meissner@...e.de>)
CVE request: dotclear < 1.2.8 (Hanno Böck <hanno@...eck.de>)

July 15 (6 messages)

Re: CVE id request: Clamav (Tomas Hoger <thoger@...hat.com>)
Re: CVE Id request: vim (Tomas Hoger <thoger@...hat.com>)
CVE id request: byacc (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Tomas Hoger <thoger@...hat.com>)
CVE request: Wordpress XSS (Hanno Böck <hanno@...eck.de>)
CVE request: phpmyadmin < 2.11.7.1 (Hanno Böck <hanno@...eck.de>)

July 16 (12 messages)

Re: CVE request: phpmyadmin < 2.11.7.1 (Thijs Kinkhorst <thijs@...ian.org>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Jan Minář" <rdancer@...ncer.org>)
Re: CVE request: phpmyadmin < 2.11.7.1 (Hanno Böck <hanno@...eck.de>)
Re: CVE id request: libavformat (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: Wordpress XSS (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Wordpress XSS (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request: Critical vuln in Firefox 3.0 (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Tomas Hoger <thoger@...hat.com>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Jan Minář" <rdancer@...ncer.org>)
Re: CVE id request: byacc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpmyadmin < 2.11.7.1 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: PowerDNS recursor source port randomization (Florian Weimer <fw@...eb.enyo.de>)

July 17 (1 message)

Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) (Michail Litvak <mci@....openwall.com>)

July 18 (6 messages)

Re: CVE id request: Clamav ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: projectl ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: multiple drupal issues in < 6.3,5.8 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpbb < 3.0.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requests: joomla <1.5.4 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: op ("Steven M. Christey" <coley@...us.mitre.org>)

July 20 (4 messages)

Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) (Jonathan Smith <smithj@...ethemallocs.com>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Jonathan Smith <smithj@...ethemallocs.com>)
CVE request: punbb < 1.2.19 (Hanno Böck <hanno@...eck.de>)
CVE request: mybb < 1.2.14 (Hanno Böck <hanno@...eck.de>)

July 21 (5 messages)

Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Tomas Hoger <thoger@...hat.com>)
CVE request: mantis < 1.1.2 (Tomas Hoger <thoger@...hat.com>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Jan Minář" <rdancer@...ncer.org>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Tomas Hoger <thoger@...hat.com>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Jan Minář" <rdancer@...ncer.org>)

July 23 (1 message)

Re: CVE request for dnsmasq DoS (Josh Bressers <bressers@...hat.com>)

July 24 (2 messages)

Re: CVE request for dnsmasq DoS (Robert Buchholz <rbu@...too.org>)
Re: CVE request for dnsmasq DoS (Robert Buchholz <rbu@...too.org>)

July 25 (2 messages)

CVE id request: moodle XSS and CSRF (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE id request: moodle XSS and CSRF ("Steven M. Christey" <coley@...us.mitre.org>)

July 26 (4 messages)

CVE request: drupal issue in < 5.9 (Miklos Vajna <vmiklos@...galware.org>)
Re: CVE request: drupal issue in < 5.9 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: drupal issue in < 5.9 (Miklos Vajna <vmiklos@...galware.org>)
Re: CVE request: drupal issue in < 5.9 ("Steven M. Christey" <coley@...us.mitre.org>)

July 27 (13 messages)

Re: CVE request: drupal issue in < 5.9 (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: horde3/turba2 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: drupal issue in < 5.9 (Miklos Vajna <vmiklos@...galware.org>)
cups patches for CVE-2008-0597 and CVE-2008-0596 (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE request: drupal issue in < 5.9 (Nico Golde <oss-security+ml@...lde.de>)
Re: cups patches for CVE-2008-0597 and CVE-2008-0596 (Robert Buchholz <rbu@...too.org>)
Re: CVE request: drupal issue in < 5.9 (Miklos Vajna <vmiklos@...galware.org>)
Links < 2.1 security issue (Pierre-Yves Rofes <py@...too.org>)
Re: Links < 2.1 security issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: horde3/turba2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mantis < 1.1.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mybb < 1.2.14 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: punbb < 1.2.19 ("Steven M. Christey" <coley@...us.mitre.org>)

July 28 (6 messages)

Re: cups patches for CVE-2008-0597 and CVE-2008-0596 (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: horde3/turba2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: horde3/turba2 (Nico Golde <oss-security+ml@...lde.de>)
CVE request: phpmyadmin < 2.11.8 (Hanno Böck <hanno@...eck.de>)
Re: Links < 2.1 security issue (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: horde3/turba2 ("Steven M. Christey" <coley@...us.mitre.org>)

July 30 (1 message)

CVE request: condor < 7.0.4 (Mark J Cox <mjc@...hat.com>)

July 31 (8 messages)

Mono ASP.net cross site scripting issue (Marcus Meissner <meissner@...e.de>)
[oCERT-2008-009] libxslt heap overflow (Andrea Barisani <lcars@...rt.org>)
OpenSC Security Advisory (Andreas Jellinghaus <aj@...geon.inka.de>)
Re: Mono ASP.net cross site scripting issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: condor < 7.0.4 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: vtigercrm < 5.0.4 (Hanno Böck <hanno@...eck.de>)
SVG vulnerability affecting Firefox, evince, eog, Gimp? ("Alexander Konovalenko" <alexkon@...il.com>)
CVE request: phpwebgallery < 1.7.2 (Hanno Böck <hanno@...eck.de>)

150 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.