oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 3	⁴ 6	⁵ 12	⁶ 2	⁷	⁸	⁹ 3
¹⁰ 2	¹¹ 1	¹² 1	¹³ 2	¹⁴ 7	¹⁵ 3	¹⁶
¹⁷ 6	¹⁸ 16	¹⁹ 2	²⁰ 1	²¹ 2	²² 1	²³
²⁴ 2	²⁵ 1	²⁶ 4	²⁷ 6	²⁸ 1	²⁹ 1	³⁰ 1
³¹ 13

Messages by day:

August 3 (3 messages)

Re: http://www.securityfocus.com/bid/33672/info kernel issue (Marcus Meissner <meissner@...e.de>)
Re: CVE request: Wireshark <1.2.1 Multiple DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: squid DoS in external auth header parser (security curmudgeon <jericho@...rition.org>)

August 4 (6 messages)

CVE request - kernel: information leak in sigaltstack (Eugene Teo <eugene@...hat.com>)
CVE request - kernel: execve: must clear current->clear_child_tid (Eugene Teo <eugene@...hat.com>)
Re: squid DoS in external auth header parser (Nico Golde <oss-security+ml@...lde.de>)
Re: squid DoS in external auth header parser (Vincent Danen <vdanen@...hat.com>)
CVE request: Wordpress (Alex Legler <a3li@...too.org>)
Re: squid DoS in external auth header parser (Nico Golde <oss-security+ml@...lde.de>)

August 5 (12 messages)

Re: CVE request - kernel: information leak in sigaltstack (Eugene Teo <eugene@...hat.com>)
Re: CVE request: XEmacs Multiple Integer Overflows (Thomas Biege <thomas@...e.de>)
Re: CVE request: XEmacs Multiple Integer Overflows (Vincent Danen <vdanen@...hat.com>)
CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass ("Matthias Andree" <matthias.andree@....de>)
Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass ("Matthias Andree" <matthias.andree@....de>)
Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass (Henri Salo <hsalogeek@...il.com>)
Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: XEmacs Multiple Integer Overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - kernel: execve: must clear current->clear_child_tid ("Michael K. Johnson" <johnsonm@...th.com>)
Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass (Tomas Hoger <thoger@...hat.com>)

August 6 (2 messages)

Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass ("Matthias Andree" <matthias.andree@....de>)
CVE request: kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference (Eugene Teo <eugene@...hat.com>)

August 9 (3 messages)

CVE id request: groff (pdfroff) (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: spip (Nico Golde <oss-security+ml@...lde.de>)
CVE request: mantis ("Michael S. Gilbert" <michael.s.gilbert@...il.com>)

August 10 (2 messages)

CVE request: kernel: parisc: isa-eeprom missing lower bound check (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE id request: groff (pdfroff) (Tomas Hoger <thoger@...hat.com>)

August 11 (1 message)

CVE-2009-2691 kernel: /proc/$pid/maps visible during initial setuid ELF loading (Eugene Teo <eugene@...hat.com>)

August 12 (1 message)

CVE request: phpgroupware (Alex Legler <a3li@...too.org>)

August 13 (2 messages)

CVE request: kernel: flat: fix uninitialized ptr with shared libs (Eugene Teo <eugeneteo@...nel.sg>)
new root exploit from Brad (Marcus Meissner <meissner@...e.de>)

August 14 (7 messages)

CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc (Marcus Meissner <meissner@...e.de>)
CVE request: Common Data Format (CDF) library multiple heap-based buffer overflows (Alex Legler <a3li@...too.org>)
Re: CVE id request: groff (pdfroff) (Solar Designer <solar@...nwall.com>)
Re: CVE id request: groff (pdfroff) (Nico Golde <oss-security+ml@...lde.de>)
GnuTLS CVE-2009-2730 Patches (Was Re: GnuTLS 2.8.2) (Jamie Strandboge <jamie@...onical.com>)
kernel issues pending CVE assignment (dann frazier <dannf@...ian.org>)

August 15 (3 messages)

mailfilter 0.8.2 fixes CVE-2007-1558 (APOP) (Robert Buchholz <rbu@...too.org>)
Re: kernel issues pending CVE assignment (Jon Oberheide <jon@...rheide.org>)
Re: GnuTLS CVE-2009-2730 Patches (Simon Josefsson <simon@...efsson.org>)

August 17 (6 messages)

CVE request: kernel: cfg80211: missing NULL pointer checks (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: cfg80211: missing NULL pointer checks (Eugene Teo <eugene@...hat.com>)
CVE Request -- OCS Inventory NG (Jan Lieskovsky <jlieskov@...hat.com>)
SELinux and mmap_min_addr behaviour (CVE-2009-2695) (Mark J Cox <mjc@...hat.com>)
Re: GnuTLS CVE-2009-2730 Patches (Was Re: GnuTLS 2.8.2) (Jamie Strandboge <jamie@...onical.com>)
Re: GnuTLS CVE-2009-2730 Patches (Jamie Strandboge <jamie@...onical.com>)

August 18 (16 messages)

Re: CVE-2007-1558 update (was: mailfilter 0.8.2 fixes CVE-2007-1558 (APOP)) ("Matthias Andree" <matthias.andree@....de>)
Re: GnuTLS CVE-2009-2730 Patches (Simon Josefsson <simon@...efsson.org>)
neon 0.28.6 - CVE-2009-2473, CVE-2009-2474 (Joe Orton <jorton@...hat.com>)
Re: CVE request: kernel: cfg80211: missing NULL pointer checks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: flat: fix uninitialized ptr with shared libs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: parisc: isa-eeprom missing lower bound check ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: flat: fix uninitialized ptr with shared libs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference ("Steven M. Christey" <coley@...us.mitre.org>)
Re: squid DoS in external auth header parser ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Wordpress ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- WordPress ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Common Data Format (CDF) library multiple heap-based buffer overflows ("Steven M. Christey" <coley@...us.mitre.org>)
Re: md raid null ptr dereference (when sysfs is writable) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - kernel: execve: must clear current->clear_child_tid ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - kernel: information leak in sigaltstack ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: parisc: isa-eeprom missing lower bound check ("Steven M. Christey" <coley@...us.mitre.org>)

August 19 (2 messages)

Re: CVE request: kernel: flat: fix uninitialized ptr with shared libs (Eugene Teo <eugene@...hat.com>)
CVE Request pidgin (Josh Bressers <bressers@...hat.com>)

August 20 (1 message)

Re: neon 0.28.6 - CVE-2009-2473, CVE-2009-2474 (Joe Orton <jorton@...hat.com>)

August 21 (2 messages)

Re: "umbrella" CVE names (was: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass) ("Matthias Andree" <matthias.andree@....de>)
expat bug 1990430 (Robert Buchholz <rbu@...too.org>)

August 22 (1 message)

Using NSS (Netscape Security Services) in setuid programs (Florian Weimer <fw@...eb.enyo.de>)

August 24 (2 messages)

Follow oss_security on Twitter (Eugene Teo <eugeneteo@...nel.sg>)
CVE id request: pidgin (Steffen Joeris <steffen.joeris@...lelinux.de>)

August 25 (1 message)

CVE-2009-2698 kernel: udp socket NULL ptr dereference (Eugene Teo <eugeneteo@...nel.sg>)

August 26 (4 messages)

CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request - kernel: information leak in sigaltstack (Solar Designer <solar@...nwall.com>)
Re: expat bug 1990430 (CERT-FI Vulnerability Coordination <vulncoord@...ora.fi>)
Re: Re: expat bug 1990430 ("Steven M. Christey" <coley@...us.mitre.org>)

August 27 (6 messages)

Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure (Eugene Teo <eugeneteo@...nel.sg>)
Re: Re: CVE id request: php5 (Tomas Hoger <thoger@...hat.com>)
Re: Re: expat bug 1990430 (Joe Orton <jorton@...hat.com>)
Re: Re: CVE id request: php5 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: expat bug 1990430 (CERT-FI Vulnerability Coordination <vulncoord@...ora.fi>)

August 28 (1 message)

CVE request: perl-IO-Socket-SSL certificate hostname compare bug (Ludwig Nussel <ludwig.nussel@...e.de>)

August 29 (1 message)

Re: CVE request: perl-IO-Socket-SSL certificate hostname compare bug (Steffen Ullrich <Steffen_Ullrich@...ua.de>)

August 30 (1 message)

Re: CVE-2009-2698 kernel: udp socket NULL ptr dereference (Eugene Teo <eugeneteo@...nel.sg>)

August 31 (13 messages)

CVE request: kernel: tty: make sure to flush any pending work when halting the ldisc (Eugene Teo <eugeneteo@...nel.sg>)
Re: Follow oss_security on Twitter (Solar Designer <solar@...nwall.com>)
Re: Re: CVE request: perl-IO-Socket-SSL certificate hostname compare bug (Tomas Hoger <thoger@...hat.com>)
Re: Re: CVE request: perl-IO-Socket-SSL certificate hostname compare bug (Steffen Ullrich <Steffen_Ullrich@...ua.de>)
CVE id request: silc-toolkit (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: CVE request: perl-IO-Socket-SSL certificate hostname compare bug (Tomas Hoger <thoger@...hat.com>)
CVE id request: squirrelmail CSRF (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: squirrelmail CSRF (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: squirrelmail CSRF (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: CVE request: perl-IO-Socket-SSL certificate hostname compare bug (Steffen Ullrich <Steffen_Ullrich@...ua.de>)
Re: CVE id request: pidgin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request pidgin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: perl-IO-Socket-SSL certificate hostname compare bug ("Steven M. Christey" <coley@...us.mitre.org>)

99 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.