oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 5	² 1	³ 5	⁴ 24	⁵ 2	⁶ 3	⁷
⁸ 1	⁹ 20	¹⁰ 1	¹¹ 7	¹² 1	¹³ 2	¹⁴
¹⁵ 2	¹⁶ 10	¹⁷	¹⁸ 4	¹⁹ 4	²⁰ 1	²¹
²² 2	²³ 1	²⁴ 9	²⁵	²⁶ 6	²⁷ 2	²⁸
²⁹ 7	³⁰ 7

Messages by day:

September 1 (5 messages)

Re: CVE Request (gpicview) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: GNU ed heap overflow (Tavis Ormandy <taviso@....lonestar.org>)
Re: GNU ed heap overflow (Florian Weimer <fw@...eb.enyo.de>)
CVE id request: newsbeuter (Nico Golde <oss-security+ml@...lde.de>)
[oCERT-2008-014] WordNet stack and heap overflows (Rob Holland <rob@...rt.org>)

September 2 (1 message)

Re: CVE id request: newsbeuter (Nico Golde <oss-security+ml@...lde.de>)

September 3 (5 messages)

Re: CVE Request (gpicview) (Robert Buchholz <rbu@...too.org>)
request for CVE: clamav 0.94 release (Marcus Meissner <meissner@...e.de>)
CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) (Jan Lieskovsky <jlieskov@...hat.com>)
django CSRF vuln (Vincent Danen <vdanen@...sec.ca>)
CVE id request: dns2tcp (Nico Golde <oss-security+ml@...lde.de>)

September 4 (24 messages)

CVE request: kernel: dio: zero struct dio with kzalloc instead of manually (Eugene Teo <eteo@...hat.com>)
CVE request: kernel: sunrpc: fix possible overrun on read of /proc/sys/sunrpc/transports (Eugene Teo <eteo@...hat.com>)
Re: request for CVE: clamav 0.94 release (Hanno Böck <hanno@...eck.de>)
CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl (Eugene Teo <eteo@...hat.com>)
Re: OpenSSH key blacklisting (Tim Brown <tmb@...35.com>)
Re: CVE Request (gpicview) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request (gpicview) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request (gpicview) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mono Sys.Web header injection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: newsbeuter ("Steven M. Christey" <coley@...us.mitre.org>)
Re: [oCERT-2008-014] WordNet stack and heap overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: request for CVE: clamav 0.94 release ("Steven M. Christey" <coley@...us.mitre.org>)
Re: django CSRF vuln ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: dns2tcp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: dio: zero struct dio with kzalloc instead of manually ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sunrpc: fix possible overrun on read of /proc/sys/sunrpc/transports ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: newsbeuter (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: newsbeuter ("Steven M. Christey" <coley@...us.mitre.org>)
Re: GNU ed heap overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: GNU ed heap overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: newsbeuter (Nico Golde <oss-security+ml@...lde.de>)
Re: GNU ed heap overflow (Florian Weimer <fw@...eb.enyo.de>)

September 5 (2 messages)

CVE request: kernel: local keyboard DoS through LED switching (Eugene Teo <eteo@...hat.com>)
Re: opensc 0.11.6 with fixed security update (Ludwig Nussel <ludwig.nussel@...e.de>)

September 6 (3 messages)

CVE request: pam_mount: conf: re-add luserconf security checks (Eugene Teo <eteo@...hat.com>)
CVE id requests: gmanedit (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request: pam_mount < 0.47 missing security checks (Hanno Böck <hanno@...eck.de>)

September 8 (1 message)

Re: CVE request for bitlbee (Tomas Hoger <thoger@...hat.com>)

September 9 (20 messages)

CVE request: mybb < 1.4.1 (Hanno Böck <hanno@...eck.de>)
cve request: punbb < 1.2.20 xss (Hanno Böck <hanno@...eck.de>)
CVE request (libpng) (Pınar Yanardağ <pinar@...dus.org.tr>)
CVE request: MySQL empty bit-string literal server crash (Robert Buchholz <rbu@...too.org>)
ssmtp =2.62 unitialized memory disclosure (Robert Buchholz <rbu@...too.org>)
Re: ssmtp =2.62 unitialized memory disclosure ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: MySQL empty bit-string literal server crash ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request (libpng) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mybb < 1.4.1 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: cve request: punbb < 1.2.20 xss ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request for bitlbee ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: pam_mount < 0.47 missing security checks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id requests: gmanedit ("Steven M. Christey" <coley@...us.mitre.org>)
Re: opensc 0.11.6 with fixed security update ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: local keyboard DoS through LED switching ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: local keyboard DoS through LED switching (Eugene Teo <eteo@...hat.com>)
Re: CVE request: kernel: local keyboard DoS through LED switching ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: local keyboard DoS through LED switching (Eugene Teo <eteo@...hat.com>)
Re: CVE id requests: gmanedit (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: MySQL incomplete fix for CVE-2008-2079 (Tomas Hoger <thoger@...hat.com>)

September 10 (1 message)

[oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS) (Will Drewry <redpig@...rt.org>)

September 11 (7 messages)

Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) (Tomas Hoger <thoger@...hat.com>)
Re: ssmtp =2.62 unitialized memory disclosure (Robert Buchholz <rbu@...too.org>)
[oss-list] CVE request (vim) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: [oss-list] CVE request (vim) (Pınar Yanardağ <pinar@...dus.org.tr>)
CVE request: joomla < 1.5.7 (Hanno Böck <hanno@...eck.de>)
CVE request: wordpress < 2.6.2 (Hanno Böck <hanno@...eck.de>)
Re: [oss-list] CVE request (vim) ("Jan Minář" <rdancer@...ncer.org>)

September 12 (1 message)

CVE request for Joomla multiple vuln. (Emanuele Gentili <emgent@...ntu.com>)

September 13 (2 messages)

Re: CVE Request (gpicview) (Robert Buchholz <rbu@...too.org>)
CVE request: Ruby on Rails <2.1.1 :limit and :offset SQL injection (Robert Buchholz <rbu@...too.org>)

September 15 (2 messages)

CVE Request (python) (Jan Lieskovsky <jlieskov@...hat.com>)
phpMyAdmin code execution (CVE request) (Thijs Kinkhorst <thijs@...ian.org>)

September 16 (10 messages)

Re: CVE request: Ruby on Rails <2.1.1 :limit and :offset SQL injection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: phpMyAdmin code execution (CVE request) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: MySQL incomplete fix for CVE-2008-2079 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: [oss-list] CVE request (vim) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: [oss-list] CVE request (vim) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: joomla < 1.5.7 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: wordpress < 2.6.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (python) ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: splice: fix bad unlock_page() in error case (Eugene Teo <eteo@...hat.com>)

September 18 (4 messages)

CVE Request (mercurial) (Josh Bressers <bressers@...hat.com>)
CVE-2008-3528 Linux kernel ext[234] directory corruption DoS (Eugene Teo <eteo@...hat.com>)
CVE Request (openswan, emacspeak, cman) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request (gallery2) (Josh Bressers <bressers@...hat.com>)

September 19 (4 messages)

Re: CVE Request (gallery2) (Hanno Böck <hanno@...eck.de>)
CVE request: Opera < 9.52 multiple vulnerabilities ("Pierre-Yves Rofes" <py@...too.org>)
CVE request: pdnsd <1.2.7 Denial of Service (Robert Buchholz <rbu@...too.org>)
viewvc security flaw? (Josh Bressers <bressers@...hat.com>)

September 20 (1 message)

Re: viewvc security flaw? (Robert Buchholz <rbu@...too.org>)

September 22 (2 messages)

CVE id request: proftpd (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE req: phpmyadmin < 2.11.9.2 xss (Hanno Böck <hanno@...eck.de>)

September 23 (1 message)

CVE id request: fraud2 (Steffen Joeris <steffen.joeris@...lelinux.de>)

September 24 (9 messages)

Re: CVE Request (gallery2) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (openswan, emacspeak, cman) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: pdnsd <1.2.7 Denial of Service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Opera < 9.52 multiple vulnerabilities ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: open() call allows setgid bit when user is not in new file's group (Eugene Teo <eteo@...hat.com>)
Re: CVE id request: fraud2 (Robert Buchholz <rbu@...too.org>)
Re: CVE id request: fraud2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: open() call allows setgid bit when user is not in new file's group ("Steven M. Christey" <coley@...us.mitre.org>)
CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)

September 26 (6 messages)

CVE id request: faad2 (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: faad2 (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: faad2 (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE-2008-4182 clarification (Josh Bressers <bressers@...hat.com>)
CVE Request (lighttpd) (Josh Bressers <bressers@...hat.com>)
Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option ("Steven M. Christey" <coley@...us.mitre.org>)

September 27 (2 messages)

Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)
Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)

September 29 (7 messages)

CVE id request: ftpd (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: ftpd (Robert Buchholz <rbu@...too.org>)
Re: CVE Request (mercurial) (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)
Re: CVE Request (mercurial) (Robert Buchholz <rbu@...too.org>)
Re: CVE Request (mercurial) (Christian Hoffmann <hoffie@...too.org>)
[oCERT-2008-013] MPlayer Real demuxer heap overflow (Andrea Barisani <lcars@...rt.org>)

September 30 (7 messages)

Re: CVE request: lighttpd issues (Christian Hoffmann <hoffie@...too.org>)
Re: CVE request: lighttpd issues (Christian Hoffmann <hoffie@...too.org>)
Re: Re: CVE request: lighttpd issues ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: ftpd ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: ftpd (Josh Bressers <bressers@...hat.com>)
CVE Request (xen) (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: ftpd ("Steven M. Christey" <coley@...us.mitre.org>)

127 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.