oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 8	² 4	³ 4	⁴ 9	⁵ 4	⁶ 3	⁷ 3
⁸ 3	⁹ 11	¹⁰ 3	¹¹ 2	¹² 5	¹³	¹⁴
¹⁵ 5	¹⁶	¹⁷ 3	¹⁸ 7	¹⁹ 1	²⁰	²¹ 2
²² 7	²³ 4	²⁴ 5	²⁵ 3	²⁶	²⁷	²⁸

Messages by day:

February 1 (8 messages)

CVE request - kernel: DoS on x86_64 (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- Squid -- SQUID-2010_1.txt (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- OCSNG_UNIX_SERVER-1.02.2 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request - kernel: DoS on x86_64 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Squid -- SQUID-2010_1.txt (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- OCSNG_UNIX_SERVER-1.02.2 (Josh Bressers <bressers@...hat.com>)
lighttpd: slow request dos/oom attack [CVE-2010-0295] (Stefan Bühler <lighttpd@...uehler.de>)

February 2 (4 messages)

CVE request - kvm: cat /dev/port in the guest can cause host DoS (Eugene Teo <eugeneteo@...nel.sg>)
KVM possible security issues fixed (Thomas Biege <thomas@...e.de>)
Re: KVM possible security issues fixed (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS (Josh Bressers <bressers@...hat.com>)

February 3 (4 messages)

CVE request: kernel OOM/crash in drivers/connector (Marcus Meissner <meissner@...e.de>)
CVE Request -- GMime-2.4.15 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: kernel OOM/crash in drivers/connector (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- GMime-2.4.15 (Josh Bressers <bressers@...hat.com>)

February 4 (9 messages)

Re: CVE request - kernel: DoS on x86_64 (dann frazier <dannf@...ian.org>)
Re: CVE request - kernel: DoS on x86_64 (Eugene Teo <eugene@...hat.com>)
Re: KVM possible security issues fixed (Eren Türkay <eren@...dus.org.tr>)
CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) (Matthias Andree <matthias.andree@....de>)
Re: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) (Nico Golde <oss-security+ml@...lde.de>)
Re: KVM possible security issues fixed (Josh Bressers <bressers@...hat.com>)
CVE-2009-3297 clarification needed - samba/fuse/ncpfs symlinks ("Steven M. Christey" <coley@...us.mitre.org>)
systemtap DoS issue (CVE-2010-0411) (Vincent Danen <vdanen@...hat.com>)
Re: CVE request - kernel: DoS on x86_64 (dann frazier <dannf@...nf.org>)

February 5 (4 messages)

Samba symlink 0day flaw (Josh Bressers <bressers@...hat.com>)
Re: Samba symlink 0day flaw (Nico Golde <oss-security+ml@...lde.de>)
Re: Samba symlink 0day flaw (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Samba symlink 0day flaw (Simo Sorce <ssorce@...hat.com>)

February 6 (3 messages)

Re: Samba symlink 0day flaw (Eren Türkay <eren@...dus.org.tr>)
Re: Samba symlink 0day flaw (Nico Golde <oss-security+ml@...lde.de>)
Re: Samba symlink 0day flaw (Yves-Alexis Perez <corsac@...ian.org>)

February 7 (3 messages)

CVE request: information leak / potential crash in sys_move_pages (Marcus Meissner <meissner@...e.de>)
Re: CVE request: information leak / potential crash in sys_move_pages (Eugene Teo <eugeneteo@...nel.sg>)
Re: Samba symlink 0day flaw (Nico Golde <oss-security+ml@...lde.de>)

February 8 (3 messages)

CVE request - kernel: ima: fix null pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request: information leak / potential crash in sys_move_pages (Marcus Meissner <meissner@...e.de>)
gnome-screensaver vulnerability (CVE-2010-0414) (Vincent Danen <vdanen@...hat.com>)

February 9 (11 messages)

CVE request - kernel: race in ptrace (Eugene Teo <eugeneteo@...nel.sg>)
CVE request - kernel: futex: Handle user space corruption gracefully (Eugene Teo <eugeneteo@...nel.sg>)
Fwd: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) ("Matthias Andree" <matthias.andree@....de>)
Re: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) (Tomas Hoger <thoger@...hat.com>)
CVE Request -- cURL/libCURL 7.20.0 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Greg KH <greg@...ah.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Mark J Cox <mjc@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Greg KH <greg@...ah.com>)
vulnerability in netpbm (CVE-2009-4274) (Vincent Danen <vdanen@...hat.com>)

February 10 (3 messages)

CVE request - coppermine gallery <1.4.26 code execution vulnerability (Hanno Böck <hanno@...eck.de>)
CVE Request -- ModSecurity - v2.5.12 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request - kernel: race in ptrace (Eugene Teo <eugene@...hat.com>)

February 11 (2 messages)

CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: futex: Handle user space corruption gracefully ("Steven M. Christey" <coley@...us.mitre.org>)

February 12 (5 messages)

CVE Request: gnome-screensaver termination by pressing "Enter" (Marcus Meissner <meissner@...e.de>)
CVE Request: KDE screensaver unlock issue similar to GNOME one (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: KDE screensaver unlock issue similar to GNOME one (Jeff Mitchell <mitchell@....org>)
Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one (Jeff Mitchell <mitchell@....org>)
Re: gnome-screensaver vulnerability (CVE-2010-0414) (Vincent Danen <vdanen@...hat.com>)

February 15 (5 messages)

Re: CVE request - kernel: race in ptrace (Eugene Teo <eugene@...hat.com>)
CVE Request -- MoinMoin -- 1.8.7 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- MoinMoin -- 1.8.7 (Thomas Waldmann <tw-public@....de>)
Re: CVE Request -- MoinMoin -- 1.8.7 (Thomas Waldmann <tw-public@....de>)
CouchDB: Don't use a RESTful API from the browser, please (Florian Weimer <fw@...eb.enyo.de>)

February 17 (3 messages)

CVE request: kernel information leak via userspace USB interface (Marcus Meissner <meissner@...e.de>)
additional memory leak in USB userspace handling (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one (Jeff Mitchell <mitchell@....org>)

February 18 (7 messages)

Re: CVE request: kernel information leak via userspace USB interface (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: DoS on x86_64 (Eugene Teo <eugene@...hat.com>)
CVE requests - kernel network vulns (Eugene Teo <eugene@...hat.com>)
Re: additional memory leak in USB userspace handling (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel information leak via userspace USB interface (Marcus Meissner <meissner@...e.de>)
Re: CVE request: kernel information leak via userspace USB interface ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel information leak via userspace USB interface ("Bernhard R. Link" <brlink@...ian.org>)

February 19 (1 message)

Re: CVE request: kernel information leak via userspace USB interface (Eugene Teo <eugene@...hat.com>)

February 21 (2 messages)

Re: CVE Request -- MoinMoin -- 1.8.7 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- MoinMoin -- 1.8.7 ("Steven M. Christey" <coley@...us.mitre.org>)

February 22 (7 messages)

lwn: 2.6.32.9 Release notes (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: ALSA: hda-intel: Avoid divide by zero crash (Eugene Teo <eugeneteo@...nel.sg>)
CVE-2005-4886 assigned to old remote oops (Mark J Cox <mjc@...hat.com>)
WANTED: mikmod patches (Thomas Biege <thomas@...e.de>)
Re: CVE request - coppermine gallery <1.4.26 code execution vulnerability (Henri Salo <henri@...v.fi>)
CVE request: wordpress < 2.9.2 information leak (Hanno Böck <hanno@...eck.de>)
Re: CVE request: wordpress < 2.9.2 information leak ("Steven M. Christey" <coley@...us.mitre.org>)

February 23 (4 messages)

CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
CVE request: typo3 below 4.3.2 and 4.2.12 Authentication bypass, 2x XSS, Information disclosure (Hanno Böck <hanno@...eck.de>)
CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jan Lieskovsky <jlieskov@...hat.com>)

February 24 (5 messages)

kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only) (Eugene Teo <eugeneteo@...nel.sg>)
kernel: RTO (Retransmission Timeouts) Remote DoS (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: NFS DoS related to "automount" symlinks (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jamie Strandboge <jamie@...onical.com>)
Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jan Lieskovsky <jlieskov@...hat.com>)

February 25 (3 messages)

incorrect description for CVE-2010-0412 systemtap flaw (Vincent Danen <vdanen@...hat.com>)
Re: Re: CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check (Jamie Strandboge <jamie@...onical.com>)
Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jamie Strandboge <jamie@...onical.com>)

96 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.