oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 12	² 3	³ 1	⁴ 1	⁵
⁶ 2	⁷ 7	⁸ 11	⁹ 5	¹⁰	¹¹ 1	¹²
¹³ 2	¹⁴ 2	¹⁵ 7	¹⁶ 13	¹⁷ 5	¹⁸	¹⁹
²⁰ 2	²¹ 6	²² 3	²³ 10	²⁴ 6	²⁵ 4	²⁶
²⁷ 3	²⁸ 1	²⁹ 7	³⁰

Messages by day:

April 1 (12 messages)

Re: CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: < tikiwiki 2.3: XSS ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: KVM: VMX: Dont allow uninhibited access to EFER on i386 (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: udp: Wrong locking code in udp seq_file infrastructure (Eugene Teo <eugene@...hat.com>)
CVE Request: Wireshark DoS (Pinar Yanardag <pinar@...dus.org.tr>)
CVE id rquest: xfig insecure tmp files (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request -- bibtex, pam_ssh (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: PHP 5.2.9 (Tomas Hoger <thoger@...hat.com>)
CVE request -- ghostscript (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request: Wireshark DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: jhead (Tomas Hoger <thoger@...hat.com>)

April 2 (3 messages)

Re: CVE request -- ghostscript (Robert Buchholz <rbu@...too.org>)
Re: CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- ghostscript (Jan Lieskovsky <jlieskov@...hat.com>)

April 3 (1 message)

Re: CVE request -- Linux kernel irda driver buffer (security curmudgeon <jericho@...rition.org>)

April 4 (1 message)

CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)

April 6 (2 messages)

CVE request: kernel: NFS: Fix an Oops in encode_lookup() (Eugene Teo <eugene@...hat.com>)
CVE Request (xine-lib) (Josh Bressers <bressers@...hat.com>)

April 7 (7 messages)

CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)
CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Thomas Biege <thomas@...e.de>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Steven French <sfrench@...ibm.com>)

April 8 (11 messages)

Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Nico Golde <oss-security+ml@...lde.de>)
CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Eugene Teo <eugene@...hat.com>)
Re: (Sort of urgent) CVE request -- ghostscript (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Willy Tarreau <w@....eu>)
Re: (Sort of urgent) CVE request -- ghostscript ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (xine-lib) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- bibtex, pam_ssh ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: PHP 5.2.9 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE-2008-5519: mod_jk session information leak vulnerability (Vincent Danen <vdanen@...hat.com>)
CVE request: apt (Jamie Strandboge <jamie@...onical.com>)

April 9 (5 messages)

Re: CVE request: PHP 5.2.9 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Hanno Böck <hanno@...eck.de>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Marcus Meissner <meissner@...e.de>)
Solaris/OpenSolaris xscreensaver issue (CVE-2009-1276) (Vincent Danen <vdanen@...hat.com>)

April 11 (1 message)

CVE request: mpg123 Signedness Vulnerability (Alex Legler <a3li@...too.org>)

April 13 (2 messages)

CVE request: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow (Hanno Böck <hanno@...eck.de>)
CVE request: silverstripe - two sql injections (Hanno Böck <hanno@...eck.de>)

April 14 (2 messages)

Re: CVE request: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: PHP 5.2.9 (Christian Hoffmann <hoffie@...too.org>)

April 15 (7 messages)

Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))

April 16 (13 messages)

Re: Re: Some fun with tcp_wrappers ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (Eugene Teo <eugene@...hat.com>)
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
CVE request: phpmyadmin < 3.1.3.2 (Hanno Böck <hanno@...eck.de>)
Re: CVE request: phpmyadmin < 3.1.3.2 (Hanno Böck <hanno@...eck.de>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
FreeType malformed compressed data issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: FreeType malformed compressed data issue (Tavis Ormandy <taviso@...gle.com>)
CVE-2009-1189: invalid fix for CVE-2008-3834 (dbus) (Vincent Danen <vdanen@...hat.com>)

April 17 (5 messages)

Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: NFS: Fix an Oops in encode_lookup() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: apt (Jamie Strandboge <jamie@...onical.com>)

April 20 (2 messages)

CVE request: kernel: cifs: fix unicode string area word alignment in session setup (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: ipv6: null pointer dereference in __inet6_check_established() (Eugene Teo <eugene@...hat.com>)

April 21 (6 messages)

Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)
CVE Request -- libmodplug (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE request: apt ("Steven M. Christey" <coley@...us.mitre.org>)

April 22 (3 messages)

CVE id request: amule (Nico Golde <oss-security+ml@...lde.de>)
CVE-2009-1192 kernel: agp: zero pages before sending to userspace (Eugene Teo <eugene@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Marcus Meissner <meissner@...e.de>)

April 23 (10 messages)

Re: CVE request: kernel: ipv6: null pointer dereference in __inet6_check_established() (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: missing capabilities in fs_mask (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: missing capabilities in fs_mask (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Willy Tarreau <w@....eu>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Marcus Meissner <meissner@...e.de>)
CVE-2009-1191: mod_proxy_ajp information disclosure vulnerability (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive ("Steven M. Christey" <coley@...us.mitre.org>)

April 24 (6 messages)

Re: CVE request: kernel: missing capabilities in fs_mask ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: ipv6: null pointer dereference in __inet6_check_established() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mpg123 Signedness Vulnerability ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: PHP 5.2.9 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: Some fun with tcp_wrappers ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request? buffer overflow in CIFS in 2.6.* ("Steven M. Christey" <coley@...us.mitre.org>)

April 25 (4 messages)

Re: CVE request: kernel: missing capabilities in fs_mask (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
VDBs (was Re: CVE request: kernel: missing capabilities in fs_mask) (security curmudgeon <jericho@...rition.org>)
CVE-2008-5619 update (Raphael Geissert <atomo64+debian@...il.com>)

April 27 (3 messages)

Re: CVE request? buffer overflow in CIFS in 2.6.* (Mark J Cox <mjc@...hat.com>)
Re: CVE Request -- libmodplug (Jan Lieskovsky <jlieskov@...hat.com>)
Re: oss-security CNA (Josh Bressers <bressers@...hat.com>)

April 28 (1 message)

Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)

April 29 (7 messages)

Re: CVE request? buffer overflow in CIFS in 2.6.* (dann frazier <dannf@...ian.org>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Steven French <sfrench@...ibm.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (dann frazier <dannf@...ian.org>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE Request -- libmodplug (Jan Lieskovsky <jlieskov@...hat.com>)
ipsec-tools 0.7.2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check (Greg KH <greg@...ah.com>)

114 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.