oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 13	² 2	³ 3	⁴ 1
⁵ 5	⁶ 5	⁷ 1	⁸ 12	⁹ 6	¹⁰ 2	¹¹ 1
¹² 4	¹³ 3	¹⁴ 6	¹⁵ 5	¹⁶ 4	¹⁷ 2	¹⁸ 2
¹⁹ 4	²⁰ 1	²¹	²² 3	²³ 4	²⁴	²⁵
²⁶ 7	²⁷ 7	²⁸ 4	²⁹ 10	³⁰ 1

Messages by day:

April 1 (13 messages)

CVE Request: moodle 1.9.8, 1.8.2 (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE Request -- Zabbix v1.8.2 and v.1.6.9 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- libnids v1.24 -- Null pointer dereference (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- aMSN -- improper SSL certificate validation (MITM) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: DeviceKit privilege escalation via pluggable storage device labels (Josh Bressers <bressers@...hat.com>)
CVE Request: policykit (minor) (Kees Cook <kees@...ntu.com>)
Re: CVE request: kernel: connector security bypass (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Transmission v1.92 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: policykit (minor) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- libnids v1.24 -- Null pointer dereference (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: moodle 1.9.8, 1.8.2 (Josh Bressers <bressers@...hat.com>)

April 2 (2 messages)

RE: CVE Request -- Zabbix v1.8.2 and v.1.6.9 ("Nicolas GREGOIRE" <nicolas.gregoire@...aires.fr>)
Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 (Moritz Muehlenhoff <jmm@...til.org>)

April 3 (3 messages)

CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO message (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 (Tomas Hoger <thoger@...hat.com>)
CVE-2010-0463 incomplete horde fixes (Nico Golde <oss-security+ml@...lde.de>)

April 4 (1 message)

Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 (Nicob <nicob@...ob.net>)

April 5 (5 messages)

CVE request: kernel: cifs: cifs_create() NULL pointer dereference (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference (Eugene Teo <eugeneteo@...nel.sg>)
Debian Moin Question (Josh Bressers <bressers@...hat.com>)
Re: Debian Moin Question (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Debian Moin Question (Giuseppe Iuculano <giuseppe@...ulano.it>)

April 6 (5 messages)

Re: CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO message (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 ("Steven M. Christey" <coley@...us.mitre.org>)
ClamAV small issues (Jamie Strandboge <jamie@...onical.com>)
CVE Request -- udisks v1.0.0 -- (serious) information disclosure (Jan Lieskovsky <jlieskov@...hat.com>)

April 7 (1 message)

CVE Request: MediaWiki 1.15.3 -- Login CSRF (Reed Loden <reed@...dloden.com>)

April 8 (12 messages)

Re: ClamAV small issues (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- udisks v1.0.0 -- (serious) information disclosure (Josh Bressers <bressers@...hat.com>)
Re: ClamAV small issues (Kurt Seifried <kurt@...fried.org>)
Re: CVE Request: MediaWiki 1.15.3 -- Login CSRF (Josh Bressers <bressers@...hat.com>)
CVE Request -- Abcm2ps v5.9.12 -- multiple unspecified vulnerabilities (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Abcm2ps v5.9.12 -- multiple unspecified vulnerabilities (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Abcm2ps v5.9.12 -- multiple unspecified vulnerabilities (Tim Starling <tstarling@...imedia.org>)
CVE request -- memcached (Jamie Strandboge <jamie@...onical.com>)
CVE Request -- perl v5.8.* -- stack overflow by processing certain regex (Gentoo BTS#313565 / RH BZ#580605) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request -- memcached (Jamie Strandboge <jamie@...onical.com>)
[HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam (Hafez Kamal <aphesz@...kinthebox.org>)
Re: CVE request -- memcached (Josh Bressers <bressers@...hat.com>)

April 9 (6 messages)

CVE-2010-1146 kernel: reiserfs priv escalation (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2010-1146 kernel: reiserfs priv escalation (Eugene Teo <eugeneteo@...nel.sg>)
Re: ClamAV small issues (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: ClamAV small issues (Eren Türkay <eren@...dus.org.tr>)
Re: ClamAV small issues (Eren Türkay <eren@...dus.org.tr>)
Re: ClamAV small issues (Ludwig Nussel <ludwig.nussel@...e.de>)

April 10 (2 messages)

CVE request: typo3 remote command execution (Hanno Böck <hanno@...eck.de>)
CVE request: Java webstart remote code execution (Hanno Böck <hanno@...eck.de>)

April 11 (1 message)

CVE request: irssi 0.8.15 (Tobias Heinlein <keytoaster@...too.org>)

April 12 (4 messages)

Re: CVE request: typo3 remote command execution (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Java webstart remote code execution (Josh Bressers <bressers@...hat.com>)
Re: CVE request: irssi 0.8.15 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: irssi 0.8.15 ("Steven M. Christey" <coley@...us.mitre.org>)

April 13 (3 messages)

Re: CVE request: irssi 0.8.15 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: irssi 0.8.15 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: irssi 0.8.15 (Wouter Coekaerts <coekie@...si.org>)

April 14 (6 messages)

Couple of kernel issues (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: aircrack-ng EAPOL buffer overflow (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Request -- perl v5.8.* -- stack overflow by processing certain regex (Gentoo BTS#313565 / RH BZ#580605) (Josh Bressers <bressers@...hat.com>)
CVE request: GNU nano (minor) (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: aircrack-ng EAPOL buffer overflow (Josh Bressers <bressers@...hat.com>)
Re: CVE request: GNU nano (minor) (Josh Bressers <bressers@...hat.com>)

April 15 (5 messages)

Re: Couple of kernel issues (Michael Gilbert <michael.s.gilbert@...il.com>)
CVE request: kernel: tty: release_one_tty() forgets to put pids (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: tty: release_one_tty() forgets to put pids (Eugene Teo <eugene@...hat.com>)
CVE request - sudo (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Java webstart remote code execution ("Steven M. Christey" <coley@...us.mitre.org>)

April 16 (4 messages)

Re: CVE request: kernel: tty: release_one_tty() forgets to put pids (Josh Bressers <bressers@...hat.com>)
Re: CVE request - sudo (Josh Bressers <bressers@...hat.com>)
CVE Request: JIRA Issues (Eren Türkay <eren@...dus.org.tr>)
Re: CVE Request: JIRA Issues (Josh Bressers <bressers@...hat.com>)

April 17 (2 messages)

Re: Re: CVE request: irssi 0.8.15 (Jamie Strandboge <jamie@...onical.com>)
Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove (Michael Gilbert <michael.s.gilbert@...il.com>)

April 18 (2 messages)

Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove (Michael Gilbert <michael.s.gilbert@...il.com>)
CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input ("Matthias Andree" <matthias.andree@....de>)

April 19 (4 messages)

Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove (Eugene Teo <eugene@...hat.com>)
Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove (Eugene Teo <eugene@...hat.com>)
Re: CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input (Josh Bressers <bressers@...hat.com>)

April 20 (1 message)

Re: CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input ("Matthias Andree" <matthias.andree@....de>)

April 22 (3 messages)

Re: CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw (dann frazier <dannf@...ian.org>)
Check your WPA2 Enterprise setup (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE request: VLC <1.0.6 Multiple issues (Alex Legler <a3li@...too.org>)

April 23 (4 messages)

[HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials (Hafez Kamal <aphesz@...kinthebox.org>)
[HITB-Announce] HITB eZine Issue 002 out now! (Hafez Kamal <aphesz@...kinthebox.org>)
Re: CVE Request: moodle 1.9.8, 1.8.2 (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE Request: cacti SQL injection in template_export ("Thijs Kinkhorst" <thijs@...ian.org>)

April 26 (7 messages)

CVE request: joomla <= 1.5.15 code upload, information leak, session fixation, unauthorized access (was Fwd: Joomla! Security News… (Hanno Böck <hanno@...eck.de>)
WordNet wn format string issue (Tomas Hoger <thoger@...hat.com>)
Searching for vuln apps for testing free code review tools (Taras <oxdef@...ef.info>)
Re: Searching for vuln apps for testing free code review tools (Henri Salo <henri@...v.fi>)
Re: CVE Request: cacti SQL injection in template_export (Josh Bressers <bressers@...hat.com>)
Re: Re: CVE request: irssi 0.8.15 (Wouter Coekaerts <coekie@...si.org>)
Re: CVE request: joomla <= 1.5.15 code upload, information leak, session fixation, unauthorized access (was Fwd: Joomla! S… (Josh Bressers <bressers@...hat.com>)

April 27 (7 messages)

CVE request - gfs2 kernel issue (Eugene Teo <eugene@...hat.com>)
CVE request - kernel: find_keyring_by_name() can gain the freed keyring (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: tty: release_one_tty() forgets to put pids (Eren Türkay <eren@...dus.org.tr>)
Re: CVE request: kernel: tty: release_one_tty() forgets to put pids (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE request: irssi 0.8.15 (Steve Langasek <steve.langasek@...onical.com>)
wafp insecure temporary directory (Henri Salo <henri@...v.fi>)
CVS request - Moodle (Dan Poltawski <talktodan@...il.com>)

April 28 (4 messages)

Re: CVE request - gfs2 kernel issue (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: find_keyring_by_name() can gain the freed keyring (Josh Bressers <bressers@...hat.com>)
Re: wafp insecure temporary directory (Josh Bressers <bressers@...hat.com>)
Re: CVE request: VLC <1.0.6 Multiple issues (Josh Bressers <bressers@...hat.com>)

April 29 (10 messages)

CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors (Hui Zhu <hui.zhu@...driver.com>)
CVE request - Linux Kernel KGDB/ppc issue (Hui Zhu <hui.zhu@...driver.com>)
Re: CVE request - Linux Kernel KGDB/ppc issue (Eugene Teo <eugene@...hat.com>)
Re: CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors (Hui Zhu <hui.zhu@...driver.com>)
Re: CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors (Eugene Teo <eugene@...hat.com>)
Re: [security-linux] Re: CVE request - Linux Kernel KGDB/ppc issue (Mark Hatle <mark.hatle@...driver.com>)
Re: CVS request - Moodle (Josh Bressers <bressers@...hat.com>)
Re: CVE request - Linux Kernel KGDB/ppc issue (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: moodle 1.9.8, 1.8.2 ("Steven M. Christey" <coley@...us.mitre.org>)

April 30 (1 message)

Re: CVE request - Linux Kernel KGDB/ppc issue (Eugene Teo <eugene@...hat.com>)

118 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.