oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 5	²	³
⁴ 4	⁵ 4	⁶ 10	⁷ 1	⁸ 1	⁹	¹⁰
¹¹ 1	¹² 6	¹³ 6	¹⁴ 6	¹⁵ 7	¹⁶	¹⁷
¹⁸ 5	¹⁹ 1	²⁰ 3	²¹ 9	²² 14	²³	²⁴
²⁵ 2	²⁶ 2	²⁷ 1	²⁸ 2	²⁹ 5	³⁰ 1	³¹

Messages by day:

May 1 (5 messages)

CVE request (sort of): Quagga BGP crasher (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request (sort of): Quagga BGP crasher (Jon Oberheide <jon@...rheide.org>)
CVE Request: clamav-milter on Ubuntu (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request (sort of): Quagga BGP crasher (Florian Weimer <fw@...eb.enyo.de>)
CVE request: file security issue (Vincent Danen <vdanen@...hat.com>)

May 4 (4 messages)

CVE-2009-1184 selinux: skipped node/port send checks in the compat_net=1 case (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: ptrace_attach: fix the usage of ->cred_exec_mutex (Eugene Teo <eugene@...hat.com>)
Re: ipsec-tools 0.7.2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request (sort of): Quagga BGP crasher (Florian Weimer <fw@...eb.enyo.de>)

May 5 (4 messages)

Old cscope buffer overflow (Tomas Hoger <thoger@...hat.com>)
CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Vincent Danen <vdanen@...hat.com>)

May 6 (10 messages)

CVE request: moin (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE id request: coccinelle (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: oss-security CNA ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: file security issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Old cscope buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: ipsec-tools 0.7.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request (sort of): Quagga BGP crasher ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Old cscope buffer overflow (Tomas Hoger <thoger@...hat.com>)
Re: Old cscope buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)

May 7 (1 message)

[oCERT-2009-001] Pango integer overflow in heap allocation size calculations (Will Drewry <redpig@...rt.org>)

May 8 (1 message)

OpenSC 0.11.8 released with security update (Andreas Jellinghaus <aj@...geon.inka.de>)

May 11 (1 message)

[oCERT-2009-004] AjaxTerm session id collision (Andrea Barisani <lcars@...rt.org>)

May 12 (6 messages)

CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution (Hanno Böck <hanno@...eck.de>)
CVE Request -- kdebase4 (konqueror) -- Incomplete SSL Certificate support in KDE4 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: ipsec-tools 0.7.2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution (Hanno Böck <hanno@...eck.de>)
CVE Request (evolution) (Josh Bressers <bressers@...hat.com>)

May 13 (6 messages)

php mb_ereg_replace() (Sebastian Krahmer <krahmer@...e.de>)
CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission (Eugene Teo <eugene@...hat.com>)
Re: php mb_ereg_replace() (Christian Hoffmann <hoffie@...too.org>)
Re: php mb_ereg_replace() (Oden Eriksson <oeriksson@...driva.com>)
Re: php mb_ereg_replace() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: php mb_ereg_replace() (Christian Hoffmann <hoffie@...too.org>)

May 14 (6 messages)

Update - Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
CVE Request: XEN local denial of service (Marcus Meissner <meissner@...e.de>)
Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* (Jeff Layton <jlayton@...hat.com>)
Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* ("Steven M. Christey" <coley@...us.mitre.org>)
utmp reliability? (Marcus Meissner <meissner@...e.de>)
CVE Request for libsndfile (Jamie Strandboge <jamie@...onical.com>)

May 15 (7 messages)

CVE Request for cacti (Henri Salo <henri@...v.fi>)
Re: Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)
CVE Request -- Eggdrop (Jan Lieskovsky <jlieskov@...hat.com>)
ptrace race CVE ID? ("Michael K. Johnson" <johnsonm@...th.com>)
Re: ptrace race CVE ID? (dann frazier <dannf@...ian.org>)
Re: ptrace race CVE ID? ("Michael K. Johnson" <johnsonm@...th.com>)
Re: ptrace race CVE ID? ("Steven M. Christey" <coley@...us.mitre.org>)

May 18 (5 messages)

Two OpenSSL DTLS remote DoS (Mark J Cox <mjc@...hat.com>)
CVE id request: slim (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request for cacti (Robert Buchholz <rbu@...too.org>)
Re: Two OpenSSL DTLS remote DoS (Mark J Cox <mjc@...hat.com>)
Re: CVE Request for cacti (Henri Salo <henri@...v.fi>)

May 19 (1 message)

CVE id request: nsd (Nico Golde <oss-security+ml@...lde.de>)

May 20 (3 messages)

Re: CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission (Eugene Teo <eugene@...hat.com>)
CVE request: coppermine <= 1.4.22 (Hanno Böck <hanno@...eck.de>)
CVE request: ctorrent (Vincent Danen <vdanen@...hat.com>)

May 21 (9 messages)

CVE request: transmission <1.61 CSRF (Marcus Meissner <meissner@...e.de>)
Re: CVE Request for cacti ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: moin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- kdebase4 (konqueror) -- Incomplete SSL Certificate support in KDE4 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: clamav-milter on Ubuntu ("Steven M. Christey" <coley@...us.mitre.org>)
Linux kernels and security issues? (Hanno Böck <hanno@...eck.de>)
Re: CVE Request -- libmodplug ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- libmodplug ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission ("Steven M. Christey" <coley@...us.mitre.org>)

May 22 (14 messages)

Re: CVE request: ctorrent ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: transmission <1.61 CSRF ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: nsd ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: slim ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: XEN local denial of service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (evolution) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: coccinelle ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: slim (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request: XEN local denial of service (Eugene Teo <eugene@...hat.com>)
Re: Linux kernels and security issues? (Marcus Meissner <meissner@...e.de>)
Re: CVE id request: slim ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Linux kernels and security issues? (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Linux kernels and security issues? (dann frazier <dannf@...ian.org>)
[oCERT-2009-006] Android improper package verification when using shared uids (Will Drewry <redpig@...rt.org>)

May 25 (2 messages)

Re: CVE Request for libsndfile (Robert Buchholz <rbu@...too.org>)
CVE-2009-0161 dupe of CVE-2009-0642 (Nico Golde <oss-security+ml@...lde.de>)

May 26 (2 messages)

Re: CVE-2009-0161 dupe of CVE-2009-0642 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request for libsndfile ("Steven M. Christey" <coley@...us.mitre.org>)

May 27 (1 message)

CVE assignment notification (pam_krb5 CVE-2009-1384) (Jan Lieskovsky <jlieskov@...hat.com>)

May 28 (2 messages)

CVE Request -- ImageMagick -- Integer overflow in XMakeImage() (Jan Lieskovsky <jlieskov@...hat.com>)
CVE id request: drupal (Nico Golde <oss-security+ml@...lde.de>)

May 29 (5 messages)

CVE request: Wireshark ("Stefan Behte" <s.behte@...iel.com>)
CVE request: kernel: splice local denial of service (Marcus Meissner <meissner@...e.de>)
CVE Request (irssi) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Wireshark ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- Eggdrop ("Steven M. Christey" <coley@...us.mitre.org>)

May 30 (1 message)

Re: CVE request: kernel: splice local denial of service (Jon Oberheide <jon@...rheide.org>)

96 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.