oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 3	² 1	³ 1
⁴ 14	⁵ 4	⁶ 1	⁷ 5	⁸ 5	⁹	¹⁰
¹¹ 3	¹² 3	¹³ 15	¹⁴ 8	¹⁵ 5	¹⁶ 1	¹⁷
¹⁸ 7	¹⁹ 3	²⁰ 5	²¹	²²	²³ 4	²⁴ 6
²⁵ 10	²⁶ 10	²⁷ 6	²⁸	²⁹ 3	³⁰ 1	³¹ 1

Messages by day:

August 1 (3 messages)

Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: SVG vulnerability affecting Firefox, evince, eog, Gimp? (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phpwebgallery < 1.7.2 ("Pierre-Yves Rofes" <py@...too.org>)

August 2 (1 message)

CVE request: Contenido < 4.8.7, < 4.6.24 (Hanno Böck <hanno@...eck.de>)

August 3 (1 message)

CVE request: OpenVPN (client) 2.1-beta14 through 2.1-rc8 (Tomas Hoger <thoger@...hat.com>)

August 4 (14 messages)

CVE request: httrack buffer overflow (Thijs Kinkhorst <thijs@...ian.org>)
Re: CVE request: httrack buffer overflow (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: httrack buffer overflow (Thijs Kinkhorst <thijs@...ian.org>)
Re: CVE request: httrack buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)
source for CVE feed (was: Re: CVE request: httrack buffer overflow) (Thijs Kinkhorst <thijs@...ian.org>)
Re: SVG vulnerability affecting Firefox, evince, eog, Gimp? (Jan Lieskovsky <jlieskov@...hat.com>)
Re: source for CVE feed (was: Re: CVE request: httrack buffer overflow) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: source for CVE feed (was: Re: CVE request: httrack buffer overflow) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Contenido < 4.8.7, < 4.6.24 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpmyadmin < 2.11.8 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: OpenVPN (client) 2.1-beta14 through 2.1-rc8 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: vtigercrm < 5.0.4 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: openttd (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: source for CVE feed (was: Re: CVE request: httrack buffer overflow) (Nico Golde <oss-security+ml@...lde.de>)

August 5 (4 messages)

Re: CVE id request: openttd (Robert Buchholz <rbu@...too.org>)
Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10 (Tomas Hoger <thoger@...hat.com>)
CVE Request (pidgin) (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: openttd (Nico Golde <oss-security+ml@...lde.de>)

August 6 (1 message)

CVE-2008-2939 low severity Apache httpd XSS (Mark J Cox <mjc@...hat.com>)

August 7 (5 messages)

CVE id request: git (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: git (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request (pidgin) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: git ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: openttd ("Steven M. Christey" <coley@...us.mitre.org>)

August 8 (5 messages)

Re: CVE request: phpmyadmin < 2.11.8 (Nico Golde <oss-security+ml@...lde.de>)
CVE request: php-5.2.6 overflow issues (Christian Hoffmann <hoffie@...too.org>)
Re: CVE request: php-5.2.6 overflow issues (Joe Orton <jorton@...hat.com>)
Re: CVE request: php-5.2.6 overflow issues (Christian Hoffmann <hoffie@...too.org>)
Re: CVE request: php-5.2.6 overflow issues (Joe Orton <jorton@...hat.com>)

August 11 (3 messages)

CVE id requests: ruby (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE Request (ipsec-tools) (Josh Bressers <bressers@...hat.com>)
Multiple CVE Request (ruby) (Jan Lieskovsky <jlieskov@...hat.com>)

August 12 (3 messages)

CVE request: tikiwiki < 2.0 (Hanno Böck <hanno@...eck.de>)
CVE Request (ipsec-tools again) (Josh Bressers <bressers@...hat.com>)
horde webmail edition < 1.1.1 (Hanno Böck <hanno@...eck.de>)

August 13 (15 messages)

Joomla 1.5.x core. (Emanuele Gentili <emgent@...ntu.com>)
Re: CVE request: phpmyadmin < 2.11.8 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: horde webmail edition < 1.1.1 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ipsec-tools again) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ipsec-tools) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id requests: ruby ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: tikiwiki < 2.0 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: php-5.2.6 overflow issues ("Steven M. Christey" <coley@...us.mitre.org>)
Re: horde webmail edition < 1.1.1 (Nico Golde <oss-security+ml@...lde.de>)
Re: Joomla 1.5.x core. (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: php-5.2.6 overflow issues (Christian Hoffmann <hoffie@...too.org>)
Re: horde webmail edition < 1.1.1 (Tomas Hoger <thoger@...hat.com>)
Re: horde webmail edition < 1.1.1 (Nico Golde <oss-security+ml@...lde.de>)
Re: horde webmail edition < 1.1.1 (Tomas Hoger <thoger@...hat.com>)
amarok temp file vuln (Vincent Danen <vdanen@...sec.ca>)

August 14 (8 messages)

CVE request: openfire login page XSS (JM-629) (Robert Buchholz <rbu@...too.org>)
HAVP 0.89 fixes a crash (Raphael Marichez <falco@...too.org>)
Re: HAVP 0.89 fixes a crash ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: openfire login page XSS (JM-629) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id requests: ruby ("Steven M. Christey" <coley@...us.mitre.org>)
Re: amarok temp file vuln ("Steven M. Christey" <coley@...us.mitre.org>)
Re: horde webmail edition < 1.1.1 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Joomla 1.5.x core. ("Steven M. Christey" <coley@...us.mitre.org>)

August 15 (5 messages)

CVE request: drupal 5.10/6.4 (Hanno Böck <hanno@...eck.de>)
CVE id request: mktemp (Nico Golde <oss-security+ml@...lde.de>)
CVE-2008-3276 Linux kernel dccp_setsockopt_change() integer overflow (Eugene Teo <eteo@...hat.com>)
CVE request for neon (Joe Orton <joe@...yfish.co.uk>)
Re: CVE id request: mktemp ("Todd C. Miller" <Todd.Miller@...rtesan.com>)

August 16 (1 message)

Re: horde webmail edition < 1.1.1 (Nico Golde <oss-security+ml@...lde.de>)

August 18 (7 messages)

Re: CVE id request: mktemp (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE id request: mktemp (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: mktemp ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
Re: CVE id request: mktemp (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: mktemp ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
Re: CVE id request: mktemp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: mktemp (Nico Golde <oss-security+ml@...lde.de>)

August 19 (3 messages)

wordpress 2.6.1 (Hanno Böck <hanno@...eck.de>)
swfdec 0.6.8 stable update (Marcus Meissner <meissner@...e.de>)
Re: swfdec 0.6.8 stable update (Nico Golde <oss-security+ml@...lde.de>)

August 20 (5 messages)

Re: CVE request: drupal 5.10/6.4 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request for neon ("Steven M. Christey" <coley@...us.mitre.org>)
Re: wordpress 2.6.1 ("Steven M. Christey" <coley@...us.mitre.org>)
FW: CVE-2008-1668 - ftpd 2.4 - unauthorized root access - patch details ("Morris, John R. (SSRT)" <john.morris@...com>)
Re: CVE request for neon (Joe Orton <jorton@...hat.com>)

August 23 (4 messages)

[oCERT-2008-008] multiple heap overflows in xine-lib (Will Drewry <redpig@...rt.org>)
Re: swfdec 0.6.8 stable update (Marcus Meissner <meissner@...e.de>)
Re: libxml2 denial of service flaw (CVE-2008-3281) (Robert Buchholz <rbu@...too.org>)
Re: swfdec 0.6.8 stable update (Nico Golde <oss-security+ml@...lde.de>)

August 24 (6 messages)

CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: vlc (Pınar Yanardağ <pinar@...dus.org.tr>)
Re: CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: vlc (Pınar Yanardağ <pinar@...dus.org.tr>)

August 25 (10 messages)

CVE request: kernel: sctp: fix potential panics in the SCTP-AUTH API (Eugene Teo <eteo@...hat.com>)
Pardus Bugs / Patches, Was: Re: CVE id request: vlc (Robert Buchholz <rbu@...too.org>)
CVE Request (gpicview) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request (ruby) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Vincent Danen <vdanen@...sec.ca>)
Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Tomas Hoger <thoger@...hat.com>)
Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Vincent Danen <vdanen@...sec.ca>)
Re: [vendor-sec] Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Florian Weimer <fw@...eb.enyo.de>)
Re: Pardus Bugs / Patches, Was: Re: CVE id request: vlc (Pınar Yanardağ <pinar@...dus.org.tr>)
Re: Re: [vendor-sec] Re: Re: libxml2 denial of service flaw (CVE-2008-3281) (Vincent Danen <vdanen@...sec.ca>)

August 26 (10 messages)

Re: CVE Request (ruby) (Pınar Yanardağ <pinar@...dus.org.tr>)
CVE Request (samba) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request (samba) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ruby) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (gpicview) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: fix potential panics in the SCTP-AUTH API ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: fix potential panics in the SCTP-AUTH API (Eugene Teo <eteo@...hat.com>)
CVE-2008-3526 Linux kernel sctp_setsockopt_auth_key() integer overflow (Eugene Teo <eteo@...hat.com>)
Re: CVE Request (gpicview) (Jan Lieskovsky <jlieskov@...hat.com>)

August 27 (6 messages)

opensc 0.11.6 with fixed security update (Andreas Jellinghaus <aj@...geon.inka.de>)
CVE id request: awstats (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: awstats (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: awstats (Steve Kemp <steve@...ve.org.uk>)
Re: CVE id request: awstats (Nico Golde <oss-security+ml@...lde.de>)
CVE request: mono Sys.Web header injection (Marcus Meissner <meissner@...e.de>)

August 29 (3 messages)

Re: CVE-2008-3526 Linux kernel sctp_setsockopt_auth_key() integer overflow (Eugene Teo <eteo@...hat.com>)
CVE-2008-3525 kernel: missing capability checks in sbni_ioctl() (Eugene Teo <eteo@...hat.com>)
CVE request for bitlbee (Miklos Vajna <vmiklos@...galware.org>)

August 30 (1 message)

Re: CVE Request (gpicview) (Nico Golde <oss-security+ml@...lde.de>)

August 31 (1 message)

GNU ed heap overflow (Florian Weimer <fw@...eb.enyo.de>)

125 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.