oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 4	² 1	³ 7	⁴ 3	⁵ 2	⁶ 2
⁷ 4	⁸ 8	⁹ 6	¹⁰ 2	¹¹ 4	¹² 2	¹³
¹⁴ 3	¹⁵ 5	¹⁶ 6	¹⁷ 16	¹⁸ 6	¹⁹ 1	²⁰ 1
²¹ 3	²² 9	²³ 3	²⁴ 1	²⁵ 1	²⁶	²⁷
²⁸ 1	²⁹	³⁰ 1

Messages by day:

September 1 (4 messages)

Re: CVE Request -- HTMLDOC (Alex Legler <a3li@...too.org>)
Re: Re: CVE-2007-1558 update (was: mailfilter 0.8.2 fixes CVE-2007-1558 (APOP)) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: spip ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- OCS Inventory NG ("Steven M. Christey" <coley@...us.mitre.org>)

September 2 (1 message)

Re: CVE Request -- HTMLDOC ("Steven M. Christey" <coley@...us.mitre.org>)

September 3 (7 messages)

CVE request: kernel: tc: uninitialised kernel memory leak (Eugene Teo <eugeneteo@...nel.sg>)
Re: Re: "umbrella" CVE names (was: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass) (Tomas Hoger <thoger@...hat.com>)
More CVE-2009-2408 like issues (Tomas Hoger <thoger@...hat.com>)
CVE request: kernel: NULL pointer dereference in sg_build_indirect() (Eugene Teo <eugene@...hat.com>)
Re: CVE id request: silc-toolkit ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: tty: make sure to flush any pending work when halting the ldisc (Greg KH <greg@...ah.com>)
Re: CVE request: kernel: tty: make sure to flush any pending work when halting the ldisc (Eugene Teo <eugeneteo@...nel.sg>)

September 4 (3 messages)

Re: CVE id request: silc-toolkit (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: silc-toolkit (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: fluxbb < 1.2.22 XSS (Hanno Böck <hanno@...eck.de>)

September 5 (2 messages)

[oCERT-2009-013] yTNEF/Evolution TNEF attachment decoder input sanitization errors (Andrea Barisani <lcars@...rt.org>)
Re: CVE request: kernel: tc: uninitialised kernel memory leak (Solar Designer <solar@...nwall.com>)

September 6 (2 messages)

Re: Re: expat bug 1990430 (Robert Buchholz <rbu@...too.org>)
Re: CVE request: kernel: tc: uninitialised kernel memory leak (Willy Tarreau <w@....eu>)

September 7 (4 messages)

Re: CVE request: kernel: tc: uninitialised kernel memory leak (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: tc: uninitialised kernel memory leak (Willy Tarreau <w@....eu>)
viewvc: CVE request: XSS and illegal characters while printing name-value pairs (Thomas Biege <thomas@...e.de>)
Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs (Alex Legler <a3li@...too.org>)

September 8 (8 messages)

CVE for recent cyrus-imap issue (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE for recent cyrus-imap issue (Thomas Biege <thomas@...e.de>)
CVE Request - Pidgin 2.6.2 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE for recent cyrus-imap issue (Chad Dougherty <crd@...t.org>)
Re: CVE for recent cyrus-imap issue (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE for recent cyrus-imap issue ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request - Debian/Ubuntu PAM auth module selection (Kees Cook <kees@...ntu.com>)
CVE Request - glib symlink copying permission exposure (Kees Cook <kees@...ntu.com>)

September 9 (6 messages)

CVE Request -- FreeRADIUS 1.1.8 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- PostgreSQL (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- PostgreSQL (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- FreeRADIUS 1.1.8 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- FreeRADIUS 1.1.8 ("Steven M. Christey" <coley@...us.mitre.org>)
OpenOffice.org CVE-2009-2139 (Tomas Hoger <thoger@...hat.com>)

September 10 (2 messages)

Re: OpenOffice.org CVE-2009-2139 (Thomas Biege <thomas@...e.de>)
Re: OpenOffice.org CVE-2009-2139 (Tomas Hoger <thoger@...hat.com>)

September 11 (4 messages)

Re: OpenOffice.org CVE-2009-2139 (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: silc-toolkit (Tomas Hoger <thoger@...hat.com>)
Re: CVE id request: silc-toolkit ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: silc-toolkit (Tomas Hoger <thoger@...hat.com>)

September 12 (2 messages)

CVE request(?): Thin: Client IP spoofing (Alex Legler <a3li@...too.org>)
CVE request: serendipity freetag plugin (Hanno Böck <hanno@...eck.de>)

September 14 (3 messages)

CVE-2009-2903 kernel: appletalk: denial of service when handling IP tunnelled over DDP datagrams (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2009-2903 kernel: appletalk: denial of service when handling IP tunnelled over DDP datagrams (Willy Tarreau <w@....eu>)
Re: CVE for recent cyrus-imap issue (Tomas Hoger <thoger@...hat.com>)

September 15 (5 messages)

CVE-2009-1883 kernel: missing capability check in z90crypt (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2009-1883 kernel: missing capability check in z90crypt (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2009-1883 kernel: missing capability check in z90crypt (Solar Designer <solar@...nwall.com>)
CVE Request -- Horde 3.3.5 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Horde 3.3.5 (Alex Legler <a3li@...too.org>)

September 16 (6 messages)

CVE request: kernel: perf_counter: Fix buffer overflow in perf_copy_attr() (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: cfg80211: fix looping soft lockup in find_ie() (Eugene Teo <eugeneteo@...nel.sg>)
CVE id request: changetrack (Nico Golde <oss-security+ml@...lde.de>)
CVE-2008-4609 / Outpost24 TCP issues (Marcus Meissner <meissner@...e.de>)
Re: [Security] CVE-2008-4609 / Outpost24 TCP issues (Willy Tarreau <w@....eu>)
watch for LDAP anonymous binds and empty passwords ("Steven M. Christey" <coley@...us.mitre.org>)

September 17 (16 messages)

Re: CVE request: kernel: tc: uninitialised kernel memory leak ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- Horde 3.3.5 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE for recent cyrus-imap issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: perf_counter: Fix buffer overflow in perf_copy_attr() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: changetrack ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - Debian/Ubuntu PAM auth module selection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- PostgreSQL ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: tc: uninitialised kernel memory leak (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: tc: uninitialised kernel memory leak (Willy Tarreau <w@....eu>)
Re: CVE-2009-2903 kernel: appletalk: denial of service when handling IP tunnelled over DDP datagrams (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2009-2903 kernel: appletalk: denial of service when handling IP tunnelled over DDP datagrams (Eugene Teo <eugene@...hat.com>)
Re: CVE for recent cyrus-imap issue (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: perf_counter: Fix buffer overflow in perf_copy_attr() (Marcus Meissner <meissner@...e.de>)
Re: watch for LDAP anonymous binds and empty passwords (yersinia <yersinia.spiros@...il.com>)
Wireshark - wnpa-sec-2009-05.html && wnpa-sec-2009-06.html -- CVE confirmation and CVE Request (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: VLC -- Stack-based buffer overflows in three demuxers (Alex Legler <a3li@...too.org>)

September 18 (6 messages)

CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 (Eugene Teo <eugeneteo@...nel.sg>)
Re: Wireshark - wnpa-sec-2009-05.html && wnpa-sec-2009-06.html -- CVE confirmation and CVE Request (Gerald Combs <gerald@...eshark.org>)
CVE Request -- PHP 5 - 5.2.11 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- PHP 5 - 5.2.11 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request -- PHP 5 - 5.2.11 (Joe Orton <jorton@...hat.com>)
Insecure pid directory permissions for postfix on Debian / Ubuntu (Jamie Strandboge <jamie@...onical.com>)

September 19 (1 message)

Re: CVE Request -- PHP 5 - 5.2.11 (Nico Golde <oss-security+ml@...lde.de>)

September 20 (1 message)

Re: CVE Request -- PHP 5 - 5.2.11 (yersinia <yersinia.spiros@...il.com>)

September 21 (3 messages)

Re: CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: issue with O_EXCL creates on NFSv4 (Eugene Teo <eugeneteo@...nel.sg>)
Re: OpenOffice.org CVE-2009-2139 ("Steven M. Christey" <coley@...us.mitre.org>)

September 22 (9 messages)

Re: CVE Request -- PHP 5 - 5.2.11 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: issue with O_EXCL creates on NFSv4 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request(?): Thin: Client IP spoofing ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: NULL pointer dereference in sg_build_indirect() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request - glib symlink copying permission exposure ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- PHP 5 - 5.2.11 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 (Eugene Teo <eugene@...hat.com>)
Re: OpenOffice.org CVE-2009-2139 (Marcus Meissner <meissner@...e.de>)

September 23 (3 messages)

Re: CVE request: kernel: issue with O_EXCL creates on NFSv4 (Eugene Teo <eugene@...hat.com>)
Re: More CVE-2009-2408 like issues (Tomas Hoger <thoger@...hat.com>)
Three Shibboleth issues (Florian Weimer <fw@...eb.enyo.de>)

September 24 (1 message)

Re: CVE request: serendipity freetag plugin ("Steven M. Christey" <coley@...us.mitre.org>)

September 25 (1 message)

CVE Request -- Xen -- PyGrub (Jan Lieskovsky <jlieskov@...hat.com>)

September 28 (1 message)

CVE request: oping allows the disclosure of arbitrary file contents (Steve Kemp <steve@...ve.org.uk>)

September 30 (1 message)

Re: CVE Request (Sort of urgent) -- Xen -- PyGrub (Jan Lieskovsky <jlieskov@...hat.com>)

102 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.