oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 8	² 2	³ 10	⁴ 3	⁵ 1	⁶ 2	⁷ 2
⁸ 10	⁹ 5	¹⁰ 6	¹¹ 1	¹² 1	¹³ 4	¹⁴ 1
¹⁵ 4	¹⁶ 1	¹⁷ 31	¹⁸	¹⁹ 3	²⁰	²¹
²² 1	²³ 1	²⁴ 5	²⁵	²⁶	²⁷ 1	²⁸ 3
²⁹	³⁰ 1	³¹

Messages by day:

December 1 (8 messages)

(sort of urgent) CVE Request -- cups (repost) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: tikiwiki < 2.2 (Hanno Böck <hanno@...eck.de>)
Re: (sort of urgent) CVE Request -- cups (repost) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: no-ip DUC buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: chm2pdf insecure temporary files usage ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: fix soft lockups/OOM issues with unix garbage collector ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request - cups, dovecot-managesieve, perl, wireshark ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: clamav 0.94.2 (Marcus Meissner <meissner@...e.de>)

December 2 (2 messages)

Re: CVE request: kernel: Unix sockets kernel panic (Eugene Teo <eteo@...hat.com>)
Re: CVE Request - cups, dovecot-managesieve, perl, wireshark (Eygene Ryabinkin <rea-sec@...elabs.ru>)

December 3 (10 messages)

Re: CVE request: cups - potential integer overflow in PNG image reader [was: CUPS DoS via RSS subscriptions] (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: lcms (old issues) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: clamav 0.94.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request/update: mailscanner: many scripts allow local users to overwrite arbitrary files via symlink attack… ("Steven M. Christey" <coley@...us.mitre…)
Re: CVE request: kernel: Unix sockets kernel panic ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: tikiwiki < 2.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: xine-lib and ocert-2008-008 (Nico Golde <oss-security+ml@...lde.de>)
Re: xine-lib and ocert-2008-008 (Nico Golde <oss-security+ml@...lde.de>)
Re: xine-lib and ocert-2008-008 (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (zaptel) (Josh Bressers <bressers@...hat.com>)

December 4 (3 messages)

Re: CVE Request (zaptel) (Florian Weimer <fw@...eb.enyo.de>)
ruby CVE-2008-4310 (Red Hat specific) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE for SE-2008-06 in PHP 5.2.7 (ZipArchive) (David Remahl <dremahl@...le.com>)

December 5 (1 message)

CVE Request (nagios) (Josh Bressers <bressers@...hat.com>)

December 6 (2 messages)

Fwd: CVE-2008-5079: multiple listen()s on same socket corrupts the vcc table ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: weak PRNG in GNU Classpath (Florian Weimer <fw@...eb.enyo.de>)

December 7 (2 messages)

CVE requests: Typo3 (Moritz Muehlenhoff <jmm@...til.org>)
CVE request: Quassel IRC client (Moritz Muehlenhoff <jmm@...til.org>)

December 8 (10 messages)

CVE request: vinagre (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request (nagios) (Andreas Ericsson <ae@....se>)
CVE Request - tor (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request (nagios) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request (nagios) (Andreas Ericsson <ae@....se>)
Re: CVE Request (nagios) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request (nagios) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request (nagios) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request (nagios) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
CVE Request - rsyslog (Jan Lieskovsky <jlieskov@...hat.com>)

December 9 (5 messages)

CVE request: kernel: MIPS: Fix potential DOS by untrusted user app ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: kernel: enforce a minimum SG_IO timeout ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: Four issues in PunBB (Hanno Böck <hanno@...eck.de>)
CVE request: moodle (XSS) (Hanno Böck <hanno@...eck.de>)
CVE request: phpMyAdmin < 3.1.1.0 (SQL injection through XSRF on several pages ) (Hanno Böck <hanno@...eck.de>)

December 10 (6 messages)

CVE request: kernel: applicom: fix an unchecked user ioctl range ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: kernel: watchdog: ib700wdt.c - buffer_underflow bug ("Eugene Teo" <eugeneteo@...nel.sg>)
Re: CVE Request (nagios) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request (nagios) (Andreas Ericsson <ae@....se>)
Re: CVE Request (nagios) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request (nagios) (Andreas Ericsson <ae@....se>)

December 11 (1 message)

Re: CVE Request (nagios) (Jan Lieskovsky <jlieskov@...hat.com>)

December 12 (1 message)

CVE Request - roundcubemail (Jan Lieskovsky <jlieskov@...hat.com>)

December 13 (4 messages)

Re: CVE Request - roundcubemail (Raphael Geissert <atomo64+debian@...il.com>)
Re: Re: CVE Request - roundcubemail (Florian Weimer <fw@...eb.enyo.de>)
Re: Re: CVE Request - roundcubemail (Florian Weimer <fw@...eb.enyo.de>)
Re: Re: CVE Request - roundcubemail (Florian Weimer <fw@...eb.enyo.de>)

December 14 (1 message)

Avahi daemon DoS (CVE-2008-5081) (Tomas Hoger <thoger@...hat.com>)

December 15 (4 messages)

Re: Re: CVE Request - roundcubemail (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE Request - roundcubemail (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Request - rsyslog ($allowedSender issue repost + imudp DoS) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE Request - roundcubemail (Christian Hoffmann <hoffie@...too.org>)

December 16 (1 message)

CVE request: mplayer (Steve Kemp <steve@...ve.org.uk>)

December 17 (31 messages)

Re: CVE request: mplayer ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request - rsyslog ($allowedSender issue repost + imudp DoS) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: CVE Request - roundcubemail ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpMyAdmin < 3.1.1.0 (SQL injection through XSRF on several pages ) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: applicom: fix an unchecked user ioctl range ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: watchdog: ib700wdt.c - buffer_underflow bug ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: applicom: fix an unchecked user ioctl range ("Eugene Teo" <eugeneteo@...nel.sg>)
Re: CVE request: kernel: applicom: fix an unchecked user ioctl range ("Eugene Teo" <eugeneteo@...nel.sg>)
Re: CVE request: kernel: watchdog: ib700wdt.c - buffer_underflow bug ("Eugene Teo" <eugeneteo@...nel.sg>)
Re: CVE Request (nagios) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: applicom: fix an unchecked user ioctl range ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: moodle (XSS) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Four issues in PunBB ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request - tor ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: gpsdrive (Raphael Geissert <atomo64+debian@...il.com>)
CVE id request: verlihub (Raphael Geissert <atomo64+debian@...il.com>)
Re: Re: CVE Request - roundcubemail (Raphael Geissert <atomo64+debian@...il.com>)
Re: Re: CVE Request - roundcubemail (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: phpMyAdmin < 3.1.1.0 (SQL injection through XSRF on several pages ) (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: watchdog: ib700wdt.c - buffer_underflow bug (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE request: kernel: applicom: fix an unchecked user ioctl range (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE request: kernel: applicom: fix an unchecked user ioctl range ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: php-xajax (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: php-xajax ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: php-xajax (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: php-xajax (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: php-xajax (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: php-xajax ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: php-xajax (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: php-xajax ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: CVE Request - roundcubemail (Florian Weimer <fw@...eb.enyo.de>)

December 19 (3 messages)

CVE Request -- Xen (Upstream patch for CVE-2008-4405 is incomplete) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request - Incomplete dahdi/zaptel tor2.c patch for CVE-2008-5396 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request - pdfjam (Tomas Hoger <thoger@...hat.com>)

December 22 (1 message)

Re: CVE request: kernel: watchdog: ib700wdt.c - buffer_underflow bug ("Eugene Teo" <eugeneteo@...nel.sg>)

December 23 (1 message)

CVE request: kernel: soft lockup occurs when network load is very high (Eugene Teo <eteo@...hat.com>)

December 24 (5 messages)

Re: CVE Request -- Xen (Upstream patch for CVE-2008-4405 is incomplete) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: soft lockup occurs when network load is very high ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: CVE Request - roundcubemail ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: watchdog: ib700wdt.c - buffer_underflow bug ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: verlihub ("Steven M. Christey" <coley@...us.mitre.org>)

December 27 (1 message)

Re: CVE id request: verlihub (Eygene Ryabinkin <rea-sec@...elabs.ru>)

December 28 (3 messages)

Re: CVE id request: verlihub (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: CVE Request - roundcubemail (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request - pdfjam (Robert Buchholz <rbu@...too.org>)

December 30 (1 message)

CVE id request: audiofile (Nico Golde <oss-security+ml@...lde.de>)

107 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.