oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 2	² 5	³ 14	⁴ 4	⁵
⁶ 7	⁷ 7	⁸ 5	⁹ 2	¹⁰ 1	¹¹	¹²
¹³ 4	¹⁴ 7	¹⁵ 10	¹⁶ 3	¹⁷	¹⁸	¹⁹ 2
²⁰ 3	²¹ 7	²² 7	²³ 3	²⁴	²⁵ 3	²⁶
²⁷ 6	²⁸ 7	²⁹ 10	³⁰ 2	³¹ 2

Messages by day:

October 1 (2 messages)

CVE id request: sabre (Gerfried Fuchs <rhonda@....at>)
Re: CVE req: phpmyadmin < 2.11.9.2 xss (Hanno Böck <hanno@...eck.de>)

October 2 (5 messages)

CVE-2008-3832 kernel: null pointer dereference in utrace_control (Eugene Teo <eteo@...hat.com>)
Re: CVE id request: proftpd (Miklos Vajna <vmiklos@...galware.org>)
CVE request: XSS in mediawiki 1.13.1 and 1.12.0 (Hanno Böck <hanno@...eck.de>)
libxml2 "ampproblem" DoS (Robert Buchholz <rbu@...too.org>)
blosxom XSS issue (CVE-2008-2236) (Gerfried Fuchs <rhonda@....at>)

October 3 (14 messages)

CVE-2008-3833 kernel: remove SUID when splicing into an inode (Eugene Teo <eteo@...hat.com>)
Re: libxml2 "ampproblem" DoS (Daniel Veillard <veillard@...hat.com>)
CVE request: kernel: x86: Fix broken LDT access in VMI (Eugene Teo <eteo@...hat.com>)
Re: Re: libxml2 "ampproblem" DoS (Robert Buchholz <rbu@...too.org>)
Re: CVE Request (xen) (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: proftpd (Thomas Bläsing <thomasbl@...l.math.tu-berlin.de>)
regarding CVE-2008-4382 & CVE-2008-4381 (Nico Golde <nico@...lde.de>)
Re: regarding CVE-2008-4382 & CVE-2008-4381 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: regarding CVE-2008-4382 & CVE-2008-4381 (Nico Golde <oss-security+ml@...lde.de>)
Re: regarding CVE-2008-4382 & CVE-2008-4381 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: libxml2 "ampproblem" DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: x86: Fix broken LDT access in VMI ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (xen) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: XSS in mediawiki 1.13.1 and 1.12.0 ("Steven M. Christey" <coley@...us.mitre.org>)

October 4 (4 messages)

duplicates: CVE-2008-4406 and CVE-2008-4407 [sabre insecure temp file] (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE id request: mon (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE Request (xen) ("Daniel P. Berrange" <berrange@...hat.com>)
Re: amarok temp file vuln (Robert Buchholz <rbu@...too.org>)

October 6 (7 messages)

CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter (Eugene Teo <eteo@...hat.com>)
Re: Re: libxml2 "ampproblem" DoS (Tomas Hoger <thoger@...hat.com>)
Re: Re: libxml2 "ampproblem" DoS (Robert Buchholz <rbu@...too.org>)
CVE request - (vim : netrw plugin - ftp user credentials disclosure) (Jan Lieskovsky <jlieskov@...hat.com>)
data-destroiny malfunction: is that a "security" issue (Hanno Böck <hanno@...eck.de>)
Re: data-destroiny malfunction: is that a "security" issue (Nico Golde <oss-security+ml@...lde.de>)
dbus DoS (CVE-2008-3834) (Josh Bressers <bressers@...hat.com>)

October 7 (7 messages)

CVE request: crashers / potential security risks in mplayer (Hanno Böck <hanno@...eck.de>)
Mozilla CVE duplicate (Moritz Muehlenhoff <jmm@...til.org>)
Re: Re: libxml2 "ampproblem" DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: duplicates: CVE-2008-4406 and CVE-2008-4407 [sabre insecure temp file] ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: mon ("Steven M. Christey" <coley@...us.mitre.org>)
Re: amarok temp file vuln ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Mozilla CVE duplicate ("Steven M. Christey" <coley@...us.mitre.org>)

October 8 (5 messages)

CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH (Eugene Teo <eteo@...hat.com>)
Re: Mozilla CVE duplicate (Josh Bressers <bressers@...hat.com>)
Re: Mozilla CVE duplicate (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2008-4324 ("lists@...uarter.de" <lists@...uarter.de>)
Re: data-destroiny malfunction: is that a "security" issue ("Steven M. Christey" <coley@...us.mitre.org>)

October 9 (2 messages)

CVE request: xss in phpmyid 0.9 (Hanno Böck <hanno@...eck.de>)
lynx lynxcgi handler flaw (Josh Bressers <bressers@...hat.com>)

October 10 (1 message)

CVE Request (Josh Bressers <bressers@...hat.com>)

October 13 (4 messages)

CVE request: kernel: don't allow splice() to files opened with O_APPEND (Eugene Teo <eteo@...hat.com>)
CVE id request: qemu (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE Request (Tomas Hoger <thoger@...hat.com>)
CVE Request (nfs-utils) (Josh Bressers <bressers@...hat.com>)

October 14 (7 messages)

CVE request: strongswam denial-of-service (Thomas Biege <thomas@...e.de>)
Re: CVE Request (nfs-utils) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: strongswam denial-of-service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: qemu ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: don't allow splice() to files opened with O_APPEND ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)

October 15 (10 messages)

Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: graphviz buffer overflow while parsinf DOT file (Thomas Biege <thomas@...e.de>)
Re: CVE request: graphviz buffer overflow while parsinf DOT file (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH (Marcus Meissner <meissner@...e.de>)
CVE request: jhead (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request ("Steven M. Christey" <coley@...us.mitre.org>)

October 16 (3 messages)

Re: CVE Request (Tomas Hoger <thoger@...hat.com>)
CVE request - Vim netrw.plugin (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: jhead ("John Dong" <jdong@...ntu.com>)

October 19 (2 messages)

CVE request: mantisbt < 1.1.4: RCE (Christian Hoffmann <hoffie@...too.org>)
CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)

October 20 (3 messages)

Re: CVE request: mantisbt < 1.1.4: RCE (Tomas Hoger <thoger@...hat.com>)
CVE request (vim) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: crashers / potential security risks in mplayer ("Steven M. Christey" <coley@...us.mitre.org>)

October 21 (7 messages)

Re: CVE-2008-3528 Linux kernel ext[234] directory corruption DoS (Eugene Teo <eteo@...hat.com>)
Re: CVE-2008-3528 Linux kernel ext[234] directory corruption DoS (Eugene Teo <eteo@...hat.com>)
Re: CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter (Eugene Teo <eteo@...hat.com>)
Re: CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter (Eugene Teo <eteo@...hat.com>)
CVE Request: Opera 9.60 with security fixes (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: Opera 9.60 with security fixes (Marcus Meissner <meissner@...e.de>)
CVE req: drupal < 5.11/6.5 (Hanno Böck <hanno@...eck.de>)

October 22 (7 messages)

Re: CVE request: mantisbt < 1.1.4: RCE ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: Opera 9.60 with security fixes ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (netpbm) (Josh Bressers <bressers@...hat.com>)

October 23 (3 messages)

CVE req: another drupal one (<5.12/6.6) (Hanno Böck <hanno@...eck.de>)
Re: CVE Request (netpbm) (Josh Bressers <bressers@...hat.com>)
CVE request for ecryptfs (Jamie Strandboge <jamie@...onical.com>)

October 25 (3 messages)

Not a security issue: htpdate "buffer overflow" (Robert Buchholz <rbu@...too.org>)
Regarding SA32329 (Smarty "_expand_quoted_text()" Security Bypass) (Robert Buchholz <rbu@...too.org>)
CVE request: lynx (old) .mailcap handling flaw (Tomas Hoger <thoger@...hat.com>)

October 27 (6 messages)

CVE id request: blender (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request -- Python imageop#3 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: lynx (old) .mailcap handling flaw ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tavis Ormandy <taviso@....lonestar.org>)
CVE request phpmyadmin (Fwd: XSS in phpMyadmin) (Hanno Böck <hanno@...eck.de>)
XSS in HTML Tidy plugin used in WYSIWYG HTML editors ("Steven M. Christey" <coley@...us.mitre.org>)

October 28 (7 messages)

Re: XSS in HTML Tidy plugin used in WYSIWYG HTML editors ("Steven M. Christey" <coley@...us.mitre.org>)
CVE-2008-4619 / milw0rm6775 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) ("Thijs Kinkhorst" <thijs@...ian.org>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) (Hanno Böck <hanno@...eck.de>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tomas Hoger <thoger@...hat.com>)
CVE request - libgadu (Tomas Hoger <thoger@...hat.com>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) ("Steven M. Christey" <coley@...us.mitre.org>)

October 29 (10 messages)

Re: CVE-2008-4619 / milw0rm6775 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request - libgadu (Tomas Hoger <thoger@...hat.com>)
CVE Request - Python imageop (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request for ecryptfs (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tavis Ormandy <taviso@....lonestar.org>)
Fwd: [Full-disclosure] [PLSA 2008-36] Ffmpeg: Multiple vulnerabilities (Vincent Danen <vdanen@...sec.ca>)
Re: CVE request for ecryptfs (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) (Hanno Böck <hanno@...eck.de>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tomas Hoger <thoger@...hat.com>)
CVE Request (dovecot) (Josh Bressers <bressers@...hat.com>)

October 30 (2 messages)

CVE Request / Question (Craig <craig@...uarter.de>)
CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire (Robert Buchholz <rbu@...too.org>)

October 31 (2 messages)

New net-snmp DoS (Josh Bressers <bressers@...hat.com>)
Re: CVE-2008-4619 / milw0rm6775 ("Steven M. Christey" <coley@...us.mitre.org>)

123 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.