oss-security mailing list - 2010/06

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 13	² 5	³ 6	⁴ 5	⁵	⁶
⁷ 8	⁸ 5	⁹ 4	¹⁰ 2	¹¹ 3	¹² 1	¹³ 2
¹⁴ 15	¹⁵ 5	¹⁶	¹⁷ 1	¹⁸ 4	¹⁹	²⁰
²¹ 3	²² 2	²³ 7	²⁴ 5	²⁵ 4	²⁶ 1	²⁷ 2
²⁸ 8	²⁹ 8	³⁰ 23

Messages by day:

June 1 (13 messages)

CVE request: DM Database Server ("Shennan.Wang" <wsn1983@...il.com>)
Re: CVE Request -- Cacti v0.8.7 -- three security fixes (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: Mediawiki below 1.15.4 / 1.16.0beta3 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: joomla before 1.5.18 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: zonecheck (Josh Bressers <bressers@...hat.com>)
Re: Fwd: emesene preditable temporary filename (Josh Bressers <bressers@...hat.com>)
Re: SFCB vulnerabilities (Josh Bressers <bressers@...hat.com>)
Re: CVE request: DM Database Server (Josh Bressers <bressers@...hat.com>)
Re: CVE request: ghostscript and gv (Josh Bressers <bressers@...hat.com>)
Re: CVE request: ghostscript and gv (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE request: ghostscript and gv (Josh Bressers <bressers@...hat.com>)
Re: SFCB vulnerabilities (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
prewikka permission bug (Stefan Behte <craig@...too.org>)

June 2 (5 messages)

Re: SFCB vulnerabilities (Sebastian Krahmer <krahmer@...e.de>)
CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- Beanstalkd (prior v1.4.6) -- Improper sanitization of job body (job payload data) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: SFCB vulnerabilities (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)

June 3 (6 messages)

Re: prewikka permission bug (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Beanstalkd (prior v1.4.6) -- Improper sanitization of job body (job payload data) (Josh Bressers <bressers@...hat.com>)
CVE Request -- rpcbind -- Insecure (predictable) temporary file use (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) ("Steven M. Christey" <coley@...us.mitre.org>)
CVE requests for mplayer/vlc and abcm2ps (Moritz Muehlenhoff <jmm@...ian.org>)

June 4 (5 messages)

Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) (Panu Matilainen <pmatilai@...hat.com>)
Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use (Josh Bressers <bressers@...hat.com>)
Virii in the wild (Henri Salo <henri@...v.fi>)
Re: CVE requests for mplayer/vlc and abcm2ps (Josh Bressers <bressers@...hat.com>)
Re: CVE requests for mplayer/vlc and abcm2ps (Tomas Hoger <thoger@...hat.com>)

June 7 (8 messages)

CVE request - kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files (Eugene Teo <eugene@...hat.com>)
Re: CVE Request -- Cacti v0.8.7 -- three security fixes ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: zonecheck ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- Cacti v0.8.7 -- three security fixes (Larry Adams <thewitness@...ti.net>)
Re: CVE Request -- Cacti v0.8.7 -- three security fixes (Tony Roman <roman@...order.com>)
Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use ("Steven M. Christey" <coley@...us.mitre.org>)

June 8 (5 messages)

ArpON (Arp handler inspectiON) 2.0 released! (Andrea Di Pasquale <spikey.it@...il.com>)
jar, fastjar directory traversal vulnerabilities (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use (Josh Bressers <bressers@...hat.com>)
Re: jar, fastjar directory traversal vulnerabilities ("Steven M. Christey" <coley@...us.mitre.org>)
Re: jar, fastjar directory traversal vulnerabilities (Vincent Danen <vdanen@...hat.com>)

June 9 (4 messages)

Re: CVE request - kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files (Josh Bressers <bressers@...hat.com>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Marcus Meissner <meissner@...e.de>)
Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability ("Steven M. Christey" <coley@...us.mitre.org>)
CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc (Moritz Muehlenhoff <jmm@...ian.org>)

June 10 (2 messages)

Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Vincent Danen <vdanen@...hat.com>)
CVE-2010-2070 kernel-xen: ia64-xen: unset be from the task psr (Eugene Teo <eugeneteo@...nel.sg>)

June 11 (3 messages)

CVE request for new wireshark vulnerabilities (Vincent Danen <vdanen@...hat.com>)
Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc (Josh Bressers <bressers@...hat.com>)
CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own (Dan Rosenberg <dan.j.rosenberg@...il.com>)

June 12 (1 message)

CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution (Alex Legler <a3li@...too.org>)

June 13 (2 messages)

CVE request - pyftpd insecure usage of temporary directory (Henri Salo <henri@...v.fi>)
CVE request - pyftpd default username and password vulnerability (Henri Salo <henri@...v.fi>)

June 14 (15 messages)

Re: CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: punbb before 1.3.4 xss (Hanno Böck <hanno@...eck.de>)
CVE Request: w3m does not check null bytes CN/subjAltName (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution (Alex Legler <a3li@...too.org>)
Re: CVE request: punbb before 1.3.4 xss (Josh Bressers <bressers@...hat.com>)
Re: CVE request for new wireshark vulnerabilities (Josh Bressers <bressers@...hat.com>)
Re: CVE request - pyftpd insecure usage of temporary directory (Josh Bressers <bressers@...hat.com>)
Re: CVE request - pyftpd default username and password vulnerability (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: w3m does not check null bytes CN/subjAltName (Josh Bressers <bressers@...hat.com>)
Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution (Josh Bressers <bressers@...hat.com>)
Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution (Josh Bressers <bressers@...hat.com>)
Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: punbb before 1.3.4 xss ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request for new wireshark vulnerabilities ("Steven M. Christey" <coley@...us.mitre.org>)

June 15 (5 messages)

Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request - kernel: put_tty_queue NULL pointer deref (dann frazier <dannf@...ian.org>)
Re: CVE Request - kernel: put_tty_queue NULL pointer deref (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request - kernel: put_tty_queue NULL pointer deref (Josh Bressers <bressers@...hat.com>)
Re: CVE Request - kernel: put_tty_queue NULL pointer deref ("Steven M. Christey" <coley@...us.mitre.org>)

June 17 (1 message)

CVE request - kernel: xfs swapext ioctl issue (Eugene Teo <eugeneteo@...nel.sg>)

June 18 (4 messages)

VLC 1.0 series End of Life ("Rémi Denis-Courmont" <rem@...eolan.org>)
Stefan Esser's 0day PHP SysCan flaw (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: xfs swapext ioctl issue (Josh Bressers <bressers@...hat.com>)
CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities (Vincent Danen <vdanen@...hat.com>)

June 21 (3 messages)

Re: [SquirrelMail-Security] CVE Request for Horde and Squirrelmail (Paul Lesniewski <paul@...irrelmail.org>)
Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities (Josh Bressers <bressers@...hat.com>)
CVE Request -- Plone -- arbitrary HTML code injection in safe_html (Jan Lieskovsky <jlieskov@...hat.com>)

June 22 (2 messages)

Re: CVE Request -- Plone -- arbitrary HTML code injection in safe_html (Matthew Wilkes <matthewwilkes@...nternet.com>)
Re: Re: CVE Request -- Plone -- arbitrary HTML code injection in safe_html ("Steven M. Christey" <coley@...us.mitre.org>)

June 23 (7 messages)

CVE request: kernel: timekeeping: Prevent oops when GENERIC_TIME=n (Eugene Teo <eugeneteo@...nel.sg>)
kernel: thinkpad-acpi: lock down video output state access (Eugene Teo <eugeneteo@...nel.sg>)
kernel: l2tp: Fix oops in pppol2tp_xmit (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request: avahi DoS (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface (Florian Streibelt <gentoo@...treibelt.de>)
CVE requests: LibTIFF (Dan Rosenberg <dan.j.rosenberg@...il.com>)

June 24 (5 messages)

Re: CVE requests: LibTIFF (Tomas Hoger <thoger@...hat.com>)
Re: CVE requests: LibTIFF (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE requests: LibTIFF (Tomas Hoger <thoger@...hat.com>)
Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc (Marcus Meissner <meissner@...e.de>)
Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc ("Steven M. Christey" <coley@...us.mitre.org>)

June 25 (4 messages)

Re: CVE request: kernel: timekeeping: Prevent oops when GENERIC_TIME=n (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: avahi DoS (Josh Bressers <bressers@...hat.com>)
CVE request: feh (Daniel Friesel <derf@...osdorf.de>)

June 26 (1 message)

Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface (Morten Shearman Kirkegaard <morten@...eli…)

June 27 (2 messages)

Re: Stefan Esser's 0day PHP SysCan flaw (Raphael Geissert <geissert@...ian.org>)
CVE request: makepasswd, Default settings generate insecure passwords (Henri Salo <henri@...v.fi>)

June 28 (8 messages)

CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001 (Henri Salo <henri@...v.fi>)
Re: CVE request: feh (Josh Bressers <bressers@...hat.com>)
Re: CVE request: makepasswd, Default settings generate insecure passwords (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001 (Josh Bressers <bressers@...hat.com>)

June 29 (8 messages)

kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE requests: LibTIFF (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL (akuster <akuster@...sta.com>)
Re: CVE requests: LibTIFF (Tomas Hoger <thoger@...hat.com>)
CVE id request: syscp (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE requests: LibTIFF (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server (akuster <akuster@...sta.com>)
CVE request: XSS in python paste (Raphael Geissert <geissert@...ian.org>)

June 30 (23 messages)

Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request: kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: HTML Purifier (Raphael Geissert <geissert@...ian.org>)
Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server (akuster <akuster@...sta.com>)
Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability (Péter Veres <moltesalt@...il.com>)
Re: CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks (Marcus Meissner <meissner@...e.de>)
Re: Stefan Esser's 0day PHP SysCan flaw (Raphael Geissert <geissert@...ian.org>)
CVE Request -- Python-Mako (prior v0.3.4): Improper escaping of single quotes in escape.cgi (XSS) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: PHP MOPS-2010-56..60 (Raphael Geissert <geissert@...ian.org>)
Re: Re: Stefan Esser's 0day PHP SysCan flaw (Pierre Joye <pierre.php@...il.com>)
Re: CVE requests: LibTIFF (Josh Bressers <bressers@...hat.com>)
Re: CVE request: PHP MOPS-2010-56..60 (Josh Bressers <bressers@...hat.com>)
Re: CVE requests: LibTIFF (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE id request: syscp (Josh Bressers <bressers@...hat.com>)
Re: CVE request: XSS in python paste (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL (Josh Bressers <bressers@...hat.com>)
Re: CVE request: HTML Purifier (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Python-Mako (prior v0.3.4): Improper escaping of single quotes in escape.cgi (XSS) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability (Pierre Joye <pierre.php@...il.com>)
Re: CVE requests: LibTIFF (Josh Bressers <bressers@...hat.com>)
Re: CVE request: simplemachinesforum (Henri Salo <henri@...v.fi>)

142 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.