oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 2	³ 1	⁴ 1	⁵ 6	⁶ 3	⁷ 3	⁸ 2
⁹ 6	¹⁰ 7	¹¹ 2	¹² 2	¹³ 4	¹⁴	¹⁵ 3
¹⁶ 4	¹⁷ 3	¹⁸ 3	¹⁹ 3	²⁰ 7	²¹ 3	²² 2
²³ 18	²⁴ 11	²⁵ 4	²⁶ 1	²⁷ 2	²⁸ 2	²⁹
³⁰ 3

Messages by day:

November 2 (2 messages)

CVE request: kernel: connector security bypass (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: connector security bypass (Mark J Cox <mjc@...hat.com>)

November 3 (1 message)

CVE-2009-3547 kernel: fs: pipe.c null pointer dereference (Eugene Teo <eugene@...hat.com>)

November 4 (1 message)

Re: CVE request - asterisk, python-markdown, jetty, kde (Tim Brown <tmb@...35.com>)

November 5 (6 messages)

CVE request: kernel: NULL pointer dereference in nfs4_proc_lock() (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request - Asterisk (AST-2009-008.html) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-2009-3555 for TLS renegotiation MITM attacks (Mark J Cox <mjc@...hat.com>)
Re: CVE request: kernel: NULL pointer dereference in nfs4_proc_lock() (Josh Bressers <bressers@...hat.com>)
Re: CVE-2009-3555 for TLS renegotiation MITM attacks (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Request - Asterisk (AST-2009-008.html) (Josh Bressers <bressers@...hat.com>)

November 6 (3 messages)

Re: CVE request for oCERT advisory 2009-013 (yTNEF/Evolution TNEF) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request for oCERT advisory 2009-013 (yTNEF/Evolution TNEF) (Josh Bressers <bressers@...hat.com>)
Re: CVE-2009-3555 for TLS renegotiation MITM attacks (Eygene Ryabinkin <rea-sec@...elabs.ru>)

November 7 (3 messages)

Re: CVE Request - Asterisk (AST-2009-008.html) (Moritz Muehlenhoff <jmm@...til.org>)
Re: CVE Request - Asterisk (AST-2009-008.html) (Alex Legler <a3li@...too.org>)
Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM attacks (Marsh Ray <marsh@...endedsubset.com>)

November 8 (2 messages)

Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM attacks (Peter Gutmann <pgut001@...auckland.ac.nz>)
Re: CVE-2009-3555 for TLS renegotiation MITM attacks (ArkanoiD <ark@...ex.net>)

November 9 (6 messages)

Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM attacks (Marsh Ray <marsh@...endedsubset.com>)
CVE request - kernel: NOMMU: Dont pass NULL pointers to fput() in do_mmap_pgoff() (Eugene Teo <eugeneteo@...nel.sg>)
X server umask issue (Josh Bressers <bressers@...hat.com>)
Re: X server umask issue (Steve Kemp <steve@...ve.org.uk>)
Re: X server umask issue (Julien Cristau <jcristau@...ian.org>)
Re: X server umask issue (Florian Weimer <fw@...eb.enyo.de>)

November 10 (7 messages)

Re: CVE request: oping allows the disclosure of arbitrary file contents ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (security curmudgeon <jericho@...rition.org>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Josh Bressers <bressers@...hat.com>)
Re: Handling cases of CWE-776 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: oping allows the disclosure of arbitrary file contents ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: libpoppler4: buffer overflow in the Abiword backend (Thomas Biege <thomas@...e.de>)
libjson-ruby: catastrophic backtracking (Michael Gilbert <michael.s.gilbert@...il.com>)

November 11 (2 messages)

CVE assignment and second opinion needed (Josh Bressers <bressers@...hat.com>)
Re: CVE assignment and second opinion needed (Sergei Golubchik <serg@...ql.com>)

November 12 (2 messages)

Re: CVE request: libpoppler4: buffer overflow in the Abiword backend (Josh Bressers <bressers@...hat.com>)
Re: libjson-ruby: catastrophic backtracking (Josh Bressers <bressers@...hat.com>)

November 13 (4 messages)

CVE request: kernel: bad permissions on megaraid_sas sysfs files (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: bad permissions on megaraid_sas sysfs files (Marcus Meissner <meissner@...e.de>)
Re: CVE request - kernel: NOMMU: Dont pass NULL pointers to fput() in do_mmap_pgoff() (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: bad permissions on megaraid_sas sysfs files (Josh Bressers <bressers@...hat.com>)

November 15 (3 messages)

CVE Id request: request-tracker (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request: Wordpress 2.8.6 (Alex Legler <a3li@...too.org>)
Re: CVE request: Wordpress 2.8.6 (security curmudgeon <jericho@...rition.org>)

November 16 (4 messages)

Re: CVE request: Wordpress 2.8.6 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Josh Bressers <bressers@...hat.com>)
Re: CVE Id request: request-tracker (Josh Bressers <bressers@...hat.com>)

November 17 (3 messages)

CVE request: virtualbox-ose guest can trigger denial of service at host, mem consumption (Thomas Biege <thomas@...e.de>)
Re: CVE request: libpoppler4: buffer overflow in the Abiword backend (Thomas Biege <thomas@...e.de>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Tomas Hoger <thoger@...hat.com>)

November 18 (3 messages)

Re: CVE request: libpoppler4: buffer overflow in the Abiword backend (Thomas Biege <thomas@...e.de>)
Re: CVE request: virtualbox-ose guest can trigger denial of service at host, mem consumption (Josh Bressers <bressers@...hat.com>)
Re: CVE request: libpoppler4: buffer overflow in the Abiword backend (Josh Bressers <bressers@...hat.com>)

November 19 (3 messages)

CVE request: kernel: fuse: prevent fuse_put_request on invalid pointer (Eugene Teo <eugeneteo@...nel.sg>)
CVE assignment (libexif) (Josh Bressers <bressers@...hat.com>)
mysql-5.1.41 (Oden Eriksson <oeriksson@...driva.com>)

November 20 (7 messages)

CVEs for nginx (Craig <craig@...uarter.de>)
CVE request: php 5.3.1 update (Thomas Biege <thomas@...e.de>)
Re: CVE request: php 5.3.1 update (Joe Orton <jorton@...hat.com>)
CVE request: v1.2.8 released to fix the 0777 base_dir creation issue (Thomas Biege <thomas@...e.de>)
Re: CVE request: php 5.3.1 update (Tomas Hoger <thoger@...hat.com>)
CVE Assignment nginx (Josh Bressers <bressers@...hat.com>)
Re: CVE request: php 5.3.1 update (Eren Türkay <eren@...dus.org.tr>)

November 21 (3 messages)

CVE Request - Dovecot - 1.2.8 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request - MySQL - 5.0.88 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request - MySQL - 5.0.88 (Sergei Golubchik <serg@...ql.com>)

November 22 (2 messages)

CVE request: awstats (Craig <craig@...uarter.de>)
Re: CVE request: php 5.3.1 update (security curmudgeon <jericho@...rition.org>)

November 23 (18 messages)

Re: CVEs for nginx (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVEs for nginx (Igor Sysoev <igor@...oev.ru>)
Re: CVEs for nginx (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: php 5.3.1 - "max_file_uploads" [was: Re: CVE request: php 5.3.1 update] (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: php 5.3.1 - proc_open() bypass PHP Bug #49026 [was: Re: CVE request: php 5.3.1 update] (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: v1.2.8 released to fix the 0777 base_dir creation issue (Josh Bressers <bressers@...hat.com>)
Re: CVE Request - Dovecot - 1.2.8 (Josh Bressers <bressers@...hat.com>)
CVE request: Argument injections in multiple PEAR packages (Alex Legler <a3li@...too.org>)
Re: CVEs for nginx (Igor Sysoev <igor@...oev.ru>)
Re: CVEs for nginx (Josh Bressers <bressers@...hat.com>)
Re: CVE request: awstats (Josh Bressers <bressers@...hat.com>)
Re: CVE request - asterisk, python-markdown, jetty, kde (Raphael Geissert <geissert@...ian.org>)
CVE request: Mail PEAR module code injection vulnerability (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: php 5.3.1 - "max_file_uploads" [was: Re: CVE request: php 5.3.1 update] (Josh Bressers <bressers@...hat.com>)
Re: CVE request: php 5.3.1 - proc_open() bypass PHP Bug #49026 [was: Re: CVE request: php 5.3.1 update] (Josh Bressers <bressers@...hat.com>)
Re: mysql-5.1.41 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request - MySQL - 5.0.88 (Josh Bressers <bressers@...hat.com>)
Re: CVEs for nginx ("Steven M. Christey" <coley@...us.mitre.org>)

November 24 (11 messages)

a new bind issue (Oden Eriksson <oeriksson@...driva.com>)
CVE request: BIND 9 bug involving DNSSEC and the additional section (Florian Weimer <fw@...eb.enyo.de>)
Re: mysql-5.1.41 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: mysql-5.1.41 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: kernel: fuse: prevent fuse_put_request on invalid pointer (Josh Bressers <bressers@...hat.com>)
Re: mysql-5.1.41 (Sergei Golubchik <serg@...ql.com>)
Re: a new bind issue (Josh Bressers <bressers@...hat.com>)
Re: a new bind issue (Josh Bressers <bressers@...hat.com>)
Re: a new bind issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: a new bind issue (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Argument injections in multiple PEAR packages (Josh Bressers <bressers@...hat.com>)

November 25 (4 messages)

CVE request: kernel: KVM: x86 emulator: limit instructions to 15 bytes (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request - Cacti - 0.8.7e (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: kernel: KVM: x86 emulator: limit instructions to 15 bytes (Josh Bressers <bressers@...hat.com>)
Re: CVE Request - Cacti - 0.8.7e (Josh Bressers <bressers@...hat.com>)

November 26 (1 message)

Re: CVE Request - Cacti - 0.8.7e (oss-security@...itz-naumann.com)

November 27 (2 messages)

Re: CVE request: php 5.3.1 - proc_open() bypass PHP Bug #49026 [was: Re: CVE request: php 5.3.1 update] (Milen Rangelov <mrangelov@...bul.bg>)
CVE request: ruby on rails XSS Weakness in strip_tags (Thomas Biege <thomas@...e.de>)

November 28 (2 messages)

CVE request: Ruby on Rails: CSRF circumvention (from 2008) (Alex Legler <a3li@...too.org>)
Re: CVE request: Argument injections in multiple PEAR packages ("Steven M. Christey" <coley@...us.mitre.org>)

November 30 (3 messages)

Re: mysql-5.1.41 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request - Cacti - 0.8.7e ("Steven M. Christey" <coley@...us.mitre.org>)
[oCERT-2009-017] PHP multiple issues (Andrea Barisani <lcars@...rt.org>)

108 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.