oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 1	²
³ 7	⁴	⁵ 4	⁶ 2	⁷ 9	⁸ 1	⁹
¹⁰ 2	¹¹ 4	¹² 1	¹³ 1	¹⁴ 3	¹⁵	¹⁶ 2
¹⁷ 2	¹⁸ 13	¹⁹ 6	²⁰ 6	²¹ 7	²² 1	²³ 1
²⁴ 2	²⁵ 16	²⁶ 7	²⁷ 2	²⁸ 6	²⁹ 5	³⁰ 2
³¹ 2

Messages by day:

May 1 (1 message)

Multiple vulnerabilities in OpenTTD (Matthijs Kooijman <matthijs@...in.nl>)

May 3 (7 messages)

CVE request: lxr (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: lxr (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: lxr (Henri Salo <henri@...v.fi>)
Re: CVE request: lxr (Josh Bressers <bressers@...hat.com>)
Re: CVE request: lxr (Henri Salo <henri@...v.fi>)
Re: CVE request: lxr (Josh Bressers <bressers@...hat.com>)
Re: CVE request: lxr (Dan Rosenberg <dan.j.rosenberg@...il.com>)

May 5 (4 messages)

CVE Request [was Re: kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)] (dann frazier <dannf@...ian.org>)
Re: CVE Request [was Re: kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)] (Josh Bressers <bressers@...hat.com>)
CVE Request - Piwik 0.5.5 - XSS vulnerability (Anthon Pang <anthon.pang@...il.com>)
Re: CVE Request - Piwik 0.5.5 - XSS vulnerability (Josh Bressers <bressers@...hat.com>)

May 6 (2 messages)

Re: CVE request: lxr ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: lxr (Dan Rosenberg <dan.j.rosenberg@...il.com>)

May 7 (9 messages)

CVE-2010-0730 xen: emulator instruction decoding inconsistency (Eugene Teo <eugene@...hat.com>)
A mysql flaw. (Oden Eriksson <oeriksson@...driva.com>)
MOPS and CVEs? (Hanno Böck <hanno@...eck.de>)
Re: MOPS and CVEs? (Josh Bressers <bressers@...hat.com>)
CVE Assignment (wireshark) (Josh Bressers <bressers@...hat.com>)
CVE Assignment (gnustep) (Josh Bressers <bressers@...hat.com>)
Re: CVE Assignment (wireshark) (Josh Bressers <bressers@...hat.com>)
Re: CVE Assignment (gnustep) (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE Assignment (gnustep) (Josh Bressers <bressers@...hat.com>)

May 8 (1 message)

Re: A mysql flaw. (Josh Bressers <bressers@...hat.com>)

May 10 (2 messages)

Re: A mysql flaw. (Oden Eriksson <oeriksson@...driva.com>)
Re: A mysql flaw. (Tomas Hoger <thoger@...hat.com>)

May 11 (4 messages)

Month of PHP Security 2010 Issues (Eren Türkay <eren@...dus.org.tr>)
Re: Month of PHP Security 2010 Issues (Moritz Muehlenhoff <jmm@...ian.org>)
CVE assignment: ghostscript stack-based overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Month of PHP Security 2010 Issues ("Steven M. Christey" <coley@...us.mitre.org>)

May 12 (1 message)

Re: CVE assignment: ghostscript stack-based overflow (Dan Rosenberg <dan.j.rosenberg@...il.com>)

May 13 (1 message)

KDENetwork vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

May 14 (3 messages)

Re: CVE request: lxr (Josh Bressers <bressers@...hat.com>)
Re: CVE request: lxr (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: lxr (Josh Bressers <bressers@...hat.com>)

May 16 (2 messages)

CVE request: phpbb 3.0.7 and before 3.0.5 (Hanno Böck <hanno@...eck.de>)
CVE request: phorum < 5.2.15 backend XSS (Hanno Böck <hanno@...eck.de>)

May 17 (2 messages)

[oCERT-2010-001] multiple http client unexpected download filename vulnerability (Daniele Bianco <danbia@...rt.org>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Florian Weimer <fw@...eb.enyo.de>)

May 18 (13 messages)

Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Ludwig Nussel <ludwig.nussel@...e.de>)
kernel: btrfs: check for read permission on src file in the clone ioctl (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference (Greg KH <greg@...ah.com>)
Re: A mysql flaw. (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phorum < 5.2.15 backend XSS (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 (Josh Bressers <bressers@...hat.com>)
Re: CVE assignment: ghostscript stack-based overflow (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phorum < 5.2.15 backend XSS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: kernel: btrfs: check for read permission on src file in the clone ioctl (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: phorum < 5.2.15 backend XSS (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 (Josh Bressers <bressers@...hat.com>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Solar Designer <solar@...nwall.com>)

May 19 (6 messages)

Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 (Hanno Böck <hanno@...eck.de>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 ("Thijs Kinkhorst" <thijs@...ian.org>)
Re: CVE request: phpbb 3.0.7 and before 3.0.5 ("Steven M. Christey" <coley@...us.mitre.org>)

May 20 (6 messages)

[HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers (Hafez Kamal <aphesz@...kinthebox.org>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Solar Designer <solar@...nwall.com>)
Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Thomas Biege <thomas@...e.de>)
CVE Request for Horde and Squirrelmail (Max Olsterd <max.olsterd@...il.com>)
CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request (Jan Lieskovsky <jlieskov@...hat.com>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Solar Designer <solar@...nwall.com>)

May 21 (7 messages)

Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Solar Designer <solar@...nwall.com>)
Re: [core] CVE Request for Horde and Squirrelmail ("Marcus I. Ryan" <marcus@...de.org>)
Re: CVE Request for Horde and Squirrelmail ("Thijs Kinkhorst" <thijs@...ian.org>)
clamav null pointer dereference (Thomas Biege <thomas@...ell.com>)
CVE Request: clamav crash via malformed PDF (Jamie Strandboge <jamie@...onical.com>)
Re: clamav null pointer dereference (Jamie Strandboge <jamie@...onical.com>)
CVE Request: off by one DoS in pe_icons.c (Jamie Strandboge <jamie@...onical.com>)

May 22 (1 message)

Re: CVE Request for Horde and Squirrelmail (Max Olsterd <max.olsterd@...il.com>)

May 23 (1 message)

Re: CVE Request for Horde and Squirrelmail (Thijs Kinkhorst <thijs@...ian.org>)

May 24 (2 messages)

CVE Request -- Cacti v0.8.7 -- three security fixes (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request for Horde and Squirrelmail (Nicob <nicob@...ob.net>)

May 25 (16 messages)

CVE request - kernel: GFS2: The setflags ioctl() doesn't check file ownership (Eugene Teo <eugeneteo@...nel.sg>)
Re: [core] CVE Request for Horde and Squirrelmail (Michael M Slusarz <slusarz@...de.org>)
Re: [SquirrelMail-Security] CVE Request for Horde and Squirrelmail (Paul Lesniewski <paul@...irrelmail.org>)
Who visits the Linux Security Summit 2010 (Thomas Biege <thomas@...e.de>)
Python rgbimg and audioop issues (Tomas Hoger <thoger@...hat.com>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Thomas Biege <thomas@...ell.com>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Josh Bressers <bressers@...hat.com>)
Re: kernel: btrfs: check for read permission on src file in the clone ioctl (Josh Bressers <bressers@...hat.com>)
Re: CVE Request for Horde and Squirrelmail (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: clamav crash via malformed PDF (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: off by one DoS in pe_icons.c (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: GFS2: The setflags ioctl() doesn't check file ownership (Josh Bressers <bressers@...hat.com>)
Re: CVE Request for Horde and Squirrelmail ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: clamav crash via malformed PDF ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: off by one DoS in pe_icons.c ("Steven M. Christey" <coley@...us.mitre.org>)

May 26 (7 messages)

Re: CVE request - kernel: GFS2: The setflags ioctl() doesn't check file ownership (Eugene Teo <eugene@...hat.com>)
CVE request - kernel: nfsd: fix vm overcommit crash (Eugene Teo <eugeneteo@...nel.sg>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Thomas Biege <thomas@...e.de>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Tomas Hoger <thoger@...hat.com>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (Thomas Biege <thomas@...e.de>)
Re: CVE request - kernel: nfsd: fix vm overcommit crash (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Cacti v0.8.7 -- three security fixes (Josh Bressers <bressers@...hat.com>)

May 27 (2 messages)

Re: CVE request - kernel: nfsd: fix vm overcommit crash (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request -- Cacti v0.8.7 -- three security fixes ("Steven M. Christey" <coley@...us.mitre.org>)

May 28 (6 messages)

Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) (Eren Türkay <eren@...dus.org.tr>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) (Tomas Hoger <thoger@...hat.com>)
CVE request: Mediawiki below 1.15.4 / 1.16.0beta3 (Hanno Böck <hanno@...eck.de>)
CVE request: ghostscript and gv (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) (Eren Türkay <eren@...dus.org.tr>)
CVE-2009-4824 is a duplicate of CVE-2009-3236 (Giuseppe Iuculano <giuseppe@...ulano.it>)

May 29 (5 messages)

CVE request: joomla before 1.5.18 (Hanno Böck <hanno@...eck.de>)
Re: CVE request: ghostscript and gv ("Bernhard R. Link" <brlink@...ian.org>)
CVE request: zonecheck (Sebastien Delafond <seb@...ian.org>)
Fwd: emesene preditable temporary filename (Emilio Pozuelo Monfort <pochu@...ian.org>)
Re: Fwd: emesene preditable temporary filename (Marcus Meissner <meissner@...e.de>)

May 30 (2 messages)

Re: CVE request: ghostscript and gv (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: ghostscript and gv ("Bernhard R. Link" <brlink@...ian.org>)

May 31 (2 messages)

Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) (Tomas Hoger <thoger@...hat.com>)
SFCB vulnerabilities (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)

115 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.