oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 4
² 6	³ 1	⁴ 3	⁵ 2	⁶ 2	⁷ 1	⁸ 2
⁹	¹⁰ 1	¹¹ 4	¹² 2	¹³	¹⁴	¹⁵ 1
¹⁶ 2	¹⁷ 10	¹⁸ 5	¹⁹ 2	²⁰ 3	²¹ 1	²²
²³ 4	²⁴ 5	²⁵ 7	²⁶ 2	²⁷ 1	²⁸	²⁹
³⁰ 2	³¹ 2

Messages by day:

March 1 (4 messages)

CVE id request: dkim-milter (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE id request: znc (Florian Weimer <fw@...eb.enyo.de>)
CVE id request: Tor <0.2.0.34 multiple DoS (Raphael Marichez <falco@...too.org>)
CVE id request: tinydns crafted zone file cache poisoning vulnerability (Florian Weimer <fw@...eb.enyo.de>)

March 2 (6 messages)

CVE id request: avahi (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request: kernel: x86-64: seccomp: 32/64 syscall hole (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: x86-64: syscall-audit: 32/64 syscall hole (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request: mpfr (Buffer Overflow) (Pinar Yanardag <pinar@...dus.org.tr>)
Re: CVE request: optipng security release ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt ("Steven M. Christey" <coley@...us.mitre.org>)

March 3 (1 message)

Re: CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt (Eugene Teo <eugeneteo@...nel.sg>)

March 4 (3 messages)

Re: CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt (Florian Weimer <fw@...eb.enyo.de>)
lxc-sshd security issues? ("Michael K. Johnson" <johnsonm@...th.com>)

March 5 (2 messages)

CVE Request -- pam (Jan Lieskovsky <jlieskov@...hat.com>)
Re: lxc-sshd security issues? ("Michael K. Johnson" <johnsonm@...th.com>)

March 6 (2 messages)

CVE request: kernel: shm: fix shmctl(SHM_INFO) lockup with !CONFIG_SHMEM (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: inotify local DoS (Eugene Teo <eugene@...hat.com>)

March 7 (1 message)

CVE Request: Opera <9.64: Execution of arbitrary code (Alex Legler <a3li@...too.org>)

March 8 (2 messages)

CVE request: dotclear < 2.1.5 XSS (Hanno Böck <hanno@...eck.de>)
CVE request: nucleus cms < 3.40 (3.33 and below) directory traversal (Hanno Böck <hanno@...eck.de>)

March 10 (1 message)

CVE Request: courier-authlib < 0.62.0 SQL Injection (Pierre-Yves Rofes <py@...too.org>)

March 11 (4 messages)

CVE-2009-0028 Linux kernel minor signal handling vulnerability (Eugene Teo <eugene@...hat.com>)
CVE-2009-0778 kernel: rt_cache leak (Eugene Teo <eugene@...hat.com>)
Re: CVE Request: courier-authlib < 0.62.0 SQL Injection (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request -- postgresql (Vincent Danen <vdanen@...hat.com>)

March 12 (2 messages)

Re: CVE request - horde, imp (Ludwig Nussel <ludwig.nussel@...e.de>)
[oCERT-2008-015] glib and glib-predecessor heap overflows (Will Drewry <redpig@...rt.org>)

March 15 (1 message)

CVE-2009-0876 (VirtualBox) references (Robert Buchholz <rbu@...too.org>)

March 16 (2 messages)

CVE request: XSS in MUC logs of ejabberd (Hanno Böck <hanno@...eck.de>)
Re: [oCERT-2008-015] glib and glib-predecessor heap overflows (Robert Buchholz <rbu@...too.org>)

March 17 (10 messages)

Re: CVE id request: tinydns crafted zone file cache poisoning vulnerability ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE-2009-0876 (VirtualBox) references (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request -- postgresql ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request -- firefox, vlc, WeeChat (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE-2009-0876 (VirtualBox) references ("Steven M. Christey" <coley@...us.mitre.org>)
Re: lxc-sshd security issues? ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: nucleus cms < 3.40 (3.33 and below) directory traversal ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- firefox, vlc, WeeChat (Moritz Muehlenhoff <jmm@...til.org>)
Re: CVE request - horde, imp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE-2009-0876 (VirtualBox) references (Nico Golde <oss-security+ml@...lde.de>)

March 18 (5 messages)

Re: CVE id request: Tor <0.2.0.34 multiple DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: XSS in MUC logs of ejabberd ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: inotify local DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: lxc-sshd security issues? ("Michael K. Johnson" <johnsonm@...th.com>)
Re: CVE request: kernel: inotify local DoS ("Michael K. Johnson" <johnsonm@...th.com>)

March 19 (2 messages)

Re: CVE request: kernel: inotify local DoS (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: inotify local DoS ("Michael K. Johnson" <johnsonm@...th.com>)

March 20 (3 messages)

Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE-2008-5621 is a duplicate (was: Re: CVE request: phpMyAdmin < 3.1.1.0 (SQL injection through XSRF on sever… ("Steven M. Christey" <coley@...us.mitre…)
[oCERT-2009-003] LittleCMS integer errors (Andrea Barisani <lcars@...rt.org>)

March 21 (1 message)

CVE request - openfire (Matti Bickel <mabi@...too.org>)

March 23 (4 messages)

CVE request: kernel: nfsd did not drop CAP_MKNOD for non-root (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: API key disclosure in piwik (Hanno Böck <hanno@...eck.de>)
CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap (Nico Golde <oss-security+ml@...lde.de>)

March 24 (5 messages)

Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap (yersinia <yersinia.spiros@...il.com>)
Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap (Vincent Danen <vdanen@...hat.com>)
Lua 5.1.4 (Kees Cook <kees@...ntu.com>)
CVE id request: ldns (Nico Golde <oss-security+ml@...lde.de>)
Re: Lua 5.1.4 ("Steven M. Christey" <coley@...us.mitre.org>)

March 25 (7 messages)

Re: CVE request - openfire ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: nfsd did not drop CAP_MKNOD for non-root ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap (Vincent Danen <vdanen@...hat.com>)
Re: Lua 5.1.4 (Florian Weimer <fw@...eb.enyo.de>)
CVE id request: phpMyAdmin (Thijs Kinkhorst <thijs@...ian.org>)
CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen (Jan Lieskovsky <jlieskov@...hat.com>)

March 26 (2 messages)

Re: CVE id request: ldns ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: API key disclosure in piwik ("Steven M. Christey" <coley@...us.mitre.org>)

March 27 (1 message)

CVE request: < tikiwiki 2.3: XSS (Hanno Böck <hanno@...eck.de>)

March 30 (2 messages)

CVE id request: auth2db (Steffen Joeris <steffen.joeris@...lelinux.de>)
[Fwd: Cross-Site Scripting in Banshee DAAP Extension] (Anthony <tony@...post24.com>)

March 31 (2 messages)

Re: [Fwd: Cross-Site Scripting in Banshee DAAP Extension] ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: phpMyAdmin ("Steven M. Christey" <coley@...us.mitre.org>)

75 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.