oss-security mailing list - 2009/06

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 4	³ 9	⁴ 2	⁵	⁶ 13	⁷ 1
⁸ 2	⁹ 1	¹⁰ 3	¹¹ 1	¹² 3	¹³	¹⁴
¹⁵ 1	¹⁶	¹⁷ 3	¹⁸	¹⁹ 2	²⁰	²¹ 1
²² 3	²³ 1	²⁴ 1	²⁵ 1	²⁶	²⁷	²⁸
²⁹ 5	³⁰ 2

Messages by day:

June 2 (4 messages)

Re: Two OpenSSL DTLS remote DoS (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: splice local denial of service (Miklos Szeredi <mszeredi@...e.cz>)
CVE request: two denial of service bugs in strongswan (Thomas Biege <thomas@...e.de>)
CVE Request - Ghostscript -- Multiple NULL ptr dereference flaws in JBIG2 decoder proved by PoC for CVE-2009-0658 (Jan Lieskovsky <jlieskov@...hat.com>)

June 3 (9 messages)

Re: CVE request: kernel: splice local denial of service (Eugene Teo <eugene@...hat.com>)
CVE-2009-1385 kernel: e1000_clean_rx_irq() denial of service (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: sparc64: Fix crash with /proc/iomem (Eugene Teo <eugene@...hat.com>)
CVE request: "billion laughs" attack against Apache APR (Joe Orton <jorton@...hat.com>)
CVE Request: ModSecurity / apache2 mod_security 2.5.9 (Marcus Meissner <meissner@...e.de>)
CVE Request: PDF XSS in ModSecurity / apache2 mod_security 2.5.8 (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: PDF XSS in ModSecurity / apache2 mod_security 2.5.8 (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request: PDF XSS in ModSecurity / apache2 mod_security 2.5.8 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: ModSecurity / apache2 mod_security 2.5.9 ("Steven M. Christey" <coley@...us.mitre.org>)

June 4 (2 messages)

CVE id request: dokuwiki (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (gstreamer-plugins-good) (Josh Bressers <bressers@...hat.com>)

June 6 (13 messages)

CVE Request (apr-util) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: "billion laughs" attack against Apache APR (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (gstreamer-plugins-good) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: drupal ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (apr-util) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id rquest: xfig insecure tmp files ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: splice local denial of service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: two denial of service bugs in strongswan ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sparc64: Fix crash with /proc/iomem ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: "billion laughs" attack against Apache APR ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: dokuwiki ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (irssi) ("Steven M. Christey" <coley@...us.mitre.org>)

June 7 (1 message)

Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Willy Tarreau <w@....eu>)

June 8 (2 messages)

Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage() (Thomas Biege <thomas@...e.de>)
xfig-3.2.5 diff (CVE-2009-1962) (Sebastian Krahmer <krahmer@...e.de>)

June 9 (1 message)

Predictable Math.random() in browsers (Florian Weimer <fw@...eb.enyo.de>)

June 10 (3 messages)

CVE-2009-1389 kernel: r8169: fix crash when large packets are received (Eugene Teo <eugene@...hat.com>)
Mutt 1.5.19 SSL chain verification flaw (Tomas Hoger <thoger@...hat.com>)
Re: xfig-3.2.5 diff (CVE-2009-1962) (Tomas Hoger <thoger@...hat.com>)

June 11 (1 message)

Re: CVE request: "billion laughs" attack against Apache APR (Joe Orton <jorton@...che.org>)

June 12 (3 messages)

Git daemon infinite loop (Tomas Hoger <thoger@...hat.com>)
Re: xfig-3.2.5 diff (CVE-2009-1962) (Nico Golde <oss-security+ml@...lde.de>)
Re: xfig-3.2.5 diff (CVE-2009-1962) (Tomas Hoger <thoger@...hat.com>)

June 15 (1 message)

CVE request for old Apache 2.2 issue (Stefan Fritsch <sf@...itsch.de>)

June 17 (3 messages)

clamav CVE ids? (Marcus Meissner <meissner@...e.de>)
Re: clamav CVE ids? (Tavis Ormandy <taviso@....lonestar.org>)
Re: clamav CVE ids? (Hanno Böck <hanno@...eck.de>)

June 19 (2 messages)

libpng-1.2.37 fixes a security issue ("Patrick J. Volkerding" <security@...ckware.com>)
Re: libpng-1.2.37 fixes a security issue ("Michael S. Gilbert" <michael.s.gilbert@...il.com>)

June 21 (1 message)

CVE id request: strongswan (Nico Golde <oss-security+ml@...lde.de>)

June 22 (3 messages)

libtiff buffer underflow in LZWDecodeCompat (Kees Cook <kees@...ntu.com>)
incorrect upstream fix for CVE-2009-0840 (mapserver) (Nico Golde <oss-security+ml@...lde.de>)
Re: incorrect upstream fix for CVE-2009-0840 (mapserver) (Nico Golde <oss-security+ml@...lde.de>)

June 23 (1 message)

Re: libtiff buffer underflow in LZWDecodeCompat (Vincent Danen <vdanen@...hat.com>)

June 24 (1 message)

Re: CVE id request: strongswan ("Steven M. Christey" <coley@...us.mitre.org>)

June 25 (1 message)

Re: incorrect upstream fix for CVE-2009-0840 (mapserver) (Alan Boudreault <aboudreault@...gears.com>)

June 29 (5 messages)

nagios: remote code execution (Tomas Hoger <thoger@...hat.com>)
CVE id request: compface (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: nagios (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: compface (Tomas Hoger <thoger@...hat.com>)
CVE Request -- libtiff [was: Re: libtiff buffer underflow in LZWDecodeCompat] (Jan Lieskovsky <jlieskov@...hat.com>)

June 30 (2 messages)

CVE Request: kernel: kvm: failure to validate cr3 after KVM_SET_SREGS (Eugene Teo <eugene@...hat.com>)
CVE assignment notification -- CVE-2009-1889 Pidgin: DoS (OOM, crash) via specially-crafted ICQWebMessage (Jan Lieskovsky <jlieskov@...hat.com>)

59 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.