oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 6	² 4	³ 2	⁴ 1	⁵	⁶ 1
⁷	⁸ 6	⁹ 2	¹⁰ 2	¹¹ 7	¹² 4	¹³
¹⁴ 3	¹⁵ 1	¹⁶ 3	¹⁷ 8	¹⁸ 3	¹⁹	²⁰ 1
²¹ 3	²² 1	²³ 9	²⁴ 1	²⁵	²⁶ 1	²⁷
²⁸ 1	²⁹ 2	³⁰ 1	³¹ 1

Messages by day:

December 1 (6 messages)

Need more information on recent poppler issues ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: mac80211: fix two remote exploits (Eugene Teo <eugeneteo@...nel.sg>)
Re: Need more information on recent poppler issues (Tomas Hoger <thoger@...hat.com>)
Re: Need more information on recent poppler issues (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Need more information on recent poppler issues (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Need more information on recent poppler issues (Moritz Muehlenhoff <jmm@...til.org>)

December 2 (4 messages)

Re: CVE request: kernel: mac80211: fix two remote exploits (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Ruby on Rails: CSRF circumvention (from 2008) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: mac80211: fix two remote exploits (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: mac80211: fix two remote exploits ("Steven M. Christey" <coley@...us.mitre.org>)

December 3 (2 messages)

Re: CVE request: kernel: mac80211: fix two remote exploits (Eugene Teo <eugene@...hat.com>)
CVE Request -- xfig (Jan Lieskovsky <jlieskov@...hat.com>)

December 4 (1 message)

CVE-2009-4020 kernel: hfs buffer overflow (Eugene Teo <eugeneteo@...nel.sg>)

December 6 (1 message)

CVE Request -- moodle 1.9.7 and 1.8.11 (Jan Lieskovsky <jlieskov@...hat.com>)

December 8 (6 messages)

Re: CVE request: ruby on rails XSS Weakness in strip_tags (Josh Bressers <bressers@...hat.com>)
Re: CVE request: ruby on rails XSS Weakness in strip_tags ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: ruby on rails XSS Weakness in strip_tags (Josh Bressers <bressers@...hat.com>)
CVE Request -- coreutils -- unsafe temporary directory location use (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- xfig ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- coreutils -- unsafe temporary directory location use (Josh Bressers <bressers@...hat.com>)

December 9 (2 messages)

Linux/QEMU issue (Jamie Strandboge <jamie@...onical.com>)
Piwik <= 0.4.5 Cookie Unserialize() Vulnerability (Eren Türkay <eren@...dus.org.tr>)

December 10 (2 messages)

Re: Piwik <= 0.4.5 Cookie Unserialize() Vulnerability (Josh Bressers <bressers@...hat.com>)
mmsclient: CVE request (Stefan Behte <Stefan.Behte@....net>)

December 11 (7 messages)

Some small KDE issues (Jamie Strandboge <jamie@...onical.com>)
Re: Some small KDE issues (Raphael Geissert <geissert@...ian.org>)
Re: Re: Some small KDE issues (Tim Brown <tmb@...35.com>)
Re: Re: Some small KDE issues (Jamie Strandboge <jamie@...onical.com>)
Re: Re: Some small KDE issues (Tim Brown <tmb@...35.com>)
Re: Re: Some small KDE issues (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: Argument injections in multiple PEAR packages (Raphael Geissert <geissert@...ian.org>)

December 12 (4 messages)

Re: CVE request: Ruby on Rails: CSRF circumvention (from 2008) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- moodle 1.9.7 and 1.8.11 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: insecure usage of temporary files in docutils (Raphael Geissert <geissert@...ian.org>)
CVE request: polipo DoS via overly large "Content-Length" header (Raphael Geissert <geissert@...ian.org>)

December 14 (3 messages)

CVE Request - Open Flash Chart v2 (Anthon Pang <anthon.pang@...il.com>)
Re: Piwik <= 0.4.5 Cookie Unserialize() Vulnerability (Anthon Pang <anthon.pang@...il.com>)
Re: CVE Request - Open Flash Chart v2 (Josh Bressers <bressers@...hat.com>)

December 15 (1 message)

CVE-2009-4138 kernel: firewire: ohci: handle receive packets with a data length of zero (Eugene Teo <eugene@...hat.com>)

December 16 (3 messages)

Re: Re: Some small KDE issues (Tomas Hoger <thoger@...hat.com>)
Re: mysql-5.1.41 (Tomas Hoger <thoger@...hat.com>)
NetworkManager CVE assignment (Josh Bressers <bressers@...hat.com>)

December 17 (8 messages)

Re: Re: Some small KDE issues (Tim Brown <tmb@...35.com>)
Re: Re: Some small KDE issues (Raphael Geissert <geissert@...ian.org>)
Re: mysql-5.1.41 (Sergei Golubchik <serg@...ql.com>)
Re: mysql-5.1.41 (Tomas Hoger <thoger@...hat.com>)
[oCERT-2009-019] Ganeti path sanitization errors (Andrea Barisani <lcars@...rt.org>)
CVE request: php5: multiple issues (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: php5: multiple issues (Eren Türkay <eren@...dus.org.tr>)
Re: CVE request: php5: multiple issues (Joe Orton <jorton@...hat.com>)

December 18 (3 messages)

possible vulnerability in ghostscript >= 8.64 (Vincent Danen <vdanen@...hat.com>)
Re: possible vulnerability in ghostscript >= 8.64 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: php5: multiple issues (Raphael Geissert <geissert@...ian.org>)

December 20 (1 message)

CVE request: phpgroupware (Moritz Muehlenhoff <jmm@...ian.org>)

December 21 (3 messages)

CVE request: Serendipity < 1.5 upload of files with *.php.* possible (Hanno Böck <hanno@...eck.de>)
CVE request: phpLDAPadmin (Giuseppe Iuculano <giuseppe@...ulano.it>)
CVE request: simplemachinesforum (Hanno Böck <hanno@...eck.de>)

December 22 (1 message)

libtheora CVE-2009-3389? (Marcus Meissner <meissner@...e.de>)

December 23 (9 messages)

CVE request - kernel: fuse_ioctl_copy_user() dos (Eugene Teo <eugene@...hat.com>)
CVE request: acl 2.2.47 always follows symlinks (Hanno Böck <hanno@...eck.de>)
Re: libtheora CVE-2009-3389? (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: acl 2.2.47 always follows symlinks (Brandon Philips <brandon@...p.org>)
Re: CVE request - kernel: fuse_ioctl_copy_user() dos ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: acl 2.2.47 always follows symlinks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Serendipity < 1.5 upload of files with *.php.* possible ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Linux/QEMU issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: polipo DoS via overly large "Content-Length" header ("Steven M. Christey" <coley@...us.mitre.org>)

December 24 (1 message)

OpenTTD remote DoS (Moritz Muehlenhoff <jmm@...ian.org>)

December 26 (1 message)

CVE requests: Zabbix (Moritz Muehlenhoff <jmm@...ian.org>)

December 28 (1 message)

CVE requests - kernel security regressions for CVE-2009-1385/and -1389 (Eugene Teo <eugene@...hat.com>)

December 29 (2 messages)

Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 (Eugene Teo <eugene@...hat.com>)

December 30 (1 message)

Re: CVE requests: Zabbix ("Steven M. Christey" <coley@...us.mitre.org>)

December 31 (1 message)

Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 ("Steven M. Christey" <coley@...us.mitre.org>)

74 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.