oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 6	² 12	³ 1	⁴ 4
⁵ 5	⁶ 12	⁷ 5	⁸ 3	⁹ 6	¹⁰ 2	¹¹ 1
¹² 7	¹³ 2	¹⁴ 4	¹⁵ 1	¹⁶ 7	¹⁷	¹⁸
¹⁹ 3	²⁰ 2	²¹ 11	²² 4	²³ 4	²⁴	²⁵
²⁶ 5	²⁷	²⁸ 3	²⁹ 6	³⁰ 1	³¹ 2

Messages by day:

July 1 (6 messages)

Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove (dann frazier <dannf@...ian.org>)
Re: CVE requests: LibTIFF (Tomas Hoger <thoger@...hat.com>)
CVE request: moin multiple XSS (Raphael Geissert <geissert@...ian.org>)
CVE request: ZNC NULL pointer dereference (Raphael Geissert <geissert@...ian.org>)
Re: CVE requests: LibTIFF ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability (Péter Veres <moltesalt@...il.com>)

July 2 (12 messages)

CVE Request [Microsoft Windows Ruby-v1.9.x] -- Buffer over-run leading to ACE (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- Mumble server (Murmur) / Qt SQLite -- Remotely exploitable DoS (murmur termination) due QueryUsers Qt SQLit… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- Roundup: XSS by processing PageTemplate template for a named page (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Mumble server (Murmur) / Qt SQLite -- Remotely exploitable DoS (murmur termination) due QueryUsers Qt … (Luigi Auriemma <aluigi@...istici.org>)
Re: CVE Request -- Mumble server (Murmur) / Qt SQLite -- Remotely exploitable DoS (murmur termination) due QueryUsers Qt … (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability (Josh Bressers <bressers@...hat.com>)
Re: CVE request: simplemachinesforum (Josh Bressers <bressers@...hat.com>)
Re: CVE request: moin multiple XSS (Josh Bressers <bressers@...hat.com>)
Re: CVE request: ZNC NULL pointer dereference (Josh Bressers <bressers@...hat.com>)
Re: CVE Request [Microsoft Windows Ruby-v1.9.x] -- Buffer over-run leading to ACE (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Mumble server (Murmur) / Qt SQLite -- Remotely exploitable DoS (murmur termination) due QueryUsers Qt S… (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Roundup: XSS by processing PageTemplate template for a named page (Josh Bressers <bressers@...hat.com>)

July 3 (1 message)

Request CVE ID for bogofilter base64 decoder heap corruption (Matthias Andree <matthias.andree@....de>)

July 4 (4 messages)

CVE request for browser IFRAME/file download DoS (Kurt Seifried <kurt@...fried.org>)
Re: kernel: l2tp: Fix oops in pppol2tp_xmit (Moritz Muehlenhoff <jmm@...til.org>)
Re: CVE Request: kernel: l2tp: Fix oops in pppol2tp_xmit (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface (Christoph Thiel <ct@....org>)

July 5 (5 messages)

[HITB-Announce] HITB Magazine Issue 003 + HITBSecConf2010 - Amsterdam (Hafez Kamal <aphesz@...kinthebox.org>)
Re: Request CVE ID for bogofilter base64 decoder heap corruption (Eren Türkay <eren@...dus.org.tr>)
Re: CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks (Marcus Meissner <meissner@...e.de>)
RE: [png-mng-implement] CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malforme… ("John Bowler" <jbowler@...ntiernet.net>)
Re: [png-mng-implement] CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malfor… (Glenn Randers-Pehrson <glennrp@...il.co…)

July 6 (12 messages)

Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface (Ben Schmidt <mail_ben_schmidt@...oo.com.a…)
REPOST: CVE request for bogofilter (Matthias Andree <matthias.andree@....de>)
CVE request: Apache Axis2 Session Fixation (Matthias Weckbecker <mweckbecker@...e.de>)
Re: CVE request: Apache Axis2 Session Fixation (security curmudgeon <jericho@...rition.org>)
patch for remote buffer overflows and local message spoofing in mipv6 daemon (Sebastian Krahmer <krahmer@...e.de>)
Bugzilla 3.7.1 CVE request (Kurt Seifried <kurt@...fried.org>)
CVE Request: kernel: hvc_console: Fix race between hvc_close and hvc_remove (dann frazier <dannf@...nf.org>)
Re: CVE request: Apache Axis2 Session Fixation (Marcus Meissner <meissner@...e.de>)
Re: Request CVE ID for bogofilter base64 decoder heap corruption (Josh Bressers <bressers@...hat.com>)
Re: CVE request for browser IFRAME/file download DoS (Josh Bressers <bressers@...hat.com>)
Re: kernel: l2tp: Fix oops in pppol2tp_xmit (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Apache Axis2 Session Fixation (Josh Bressers <bressers@...hat.com>)

July 7 (5 messages)

CVE request - kernel: nfsd4: bug in read_buf (Eugene Teo <eugeneteo@...nel.sg>)
Re: Bugzilla 3.7.1 CVE request (Reed Loden <reed@...dloden.com>)
Re: patch for remote buffer overflows and local message spoofing in mipv6 daemon (Josh Bressers <bressers@...hat.com>)
Re: patch for remote buffer overflows and local message spoofing in mipv6 daemon (Sebastian Krahmer <krahmer@...e.de>)
Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove ("Steven M. Christey" <coley@...us.mitre.org>)

July 8 (3 messages)

kernel: bridge br_multicast null ptr deref (Eugene Teo <eugeneteo@...nel.sg>)
Re: patch for remote buffer overflows and local message spoofing in mipv6 daemon (arno@...isbad.org (Arnaud Ebalard))
Re: Bugzilla 3.7.1 CVE request (Moritz Muehlenhoff <jmm@...ian.org>)

July 9 (6 messages)

Re: patch for remote buffer overflows and local message spoofing in mipv6 daemon (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: nfsd4: bug in read_buf (Josh Bressers <bressers@...hat.com>)
kernel: gfs2 acl issue (Eugene Teo <eugeneteo@...nel.sg>)
Re: kernel: gfs2 acl issue (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: kernel: gfs2 acl issue (Eugene Teo <eugeneteo@...nel.sg>)
Re: kernel: gfs2 acl issue (Josh Bressers <bressers@...hat.com>)

July 10 (2 messages)

Re: kernel: gfs2 acl issue (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: kernel: gfs2 acl issue (akuster <akuster@...sta.com>)

July 11 (1 message)

Re: Re: Stefan Esser's 0day PHP SysCan flaw (Nico Golde <oss-security+ml@...lde.de>)

July 12 (7 messages)

CVE request: ghostscript (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE request: ghostscript (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: ghostscript (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: ghostscript (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: ghostscript (Marc Deslauriers <marc.deslauriers@...onical.com>)
CVE request: NetSMB BSD kernel module (minor) (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: ghostscript (Josh Bressers <bressers@...hat.com>)

July 13 (2 messages)

CVE request, php var_export (Pierre Joye <pierre.php@...il.com>)
Multiple bugs in freetype (Robert Święcki <robert@...ecki.net>)

July 14 (4 messages)

znc id: CVE-2010-2448 or CVE-2010-2488? (Raphael Geissert <geissert@...ian.org>)
Re: Multiple bugs in freetype (Pierre Joye <pierre.php@...il.com>)
Re: Multiple bugs in freetype (Josh Bressers <bressers@...hat.com>)
Re: CVE request, php var_export (Pierre Joye <pierre.php@...il.com>)

July 15 (1 message)

CVE request: lxsession-logout (Matthias Weckbecker <mweckbecker@...e.de>)

July 16 (7 messages)

Re: Qt SSL endless loop (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: NetSMB BSD kernel module (minor) (Josh Bressers <bressers@...hat.com>)
Re: Re: CVE request, php var_export (Josh Bressers <bressers@...hat.com>)
Re: CVE request: lxsession-logout (Josh Bressers <bressers@...hat.com>)
Re: Qt SSL endless loop (Josh Bressers <bressers@...hat.com>)
Re: Re: CVE request, php var_export (Pierre Joye <pierre.php@...il.com>)
Re: Qt SSL endless loop (Vincent Danen <vdanen@...hat.com>)

July 19 (3 messages)

Re: Qt SSL endless loop (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: ghostscript and gv (Tomas Hoger <thoger@...hat.com>)
Re: Qt SSL endless loop (Vincent Danen <vdanen@...hat.com>)

July 20 (2 messages)

CVE request for OpenTTD (Matthijs Kooijman <matthijs@...in.nl>)
[oCERT-2010-002] Joomla input sanitization errors (XSS) (Andrea Barisani <lcars@...rt.org>)

July 21 (11 messages)

CVE for Intel INTEL-SA-00025 (Kurt Seifried <kurt@...fried.org>)
Re: CVE for Intel INTEL-SA-00025 (Mike O'Connor <mjo@...o.mi.org>)
Universal XSS in Rekonq (Tim Brown <timb@...-dimension.org.uk>)
CVE request: kernel: btrfs (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE for Intel INTEL-SA-00025 (Josh Bressers <bressers@...hat.com>)
Re: CVE request for OpenTTD (Josh Bressers <bressers@...hat.com>)
CVE id request: mapserver (Nico Golde <oss-security+ml@...lde.de>)
Re: [oCERT-2010-002] Joomla input sanitization errors (XSS) (Josh Bressers <bressers@...hat.com>)
Re: Universal XSS in Rekonq (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: btrfs (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: mapserver (Josh Bressers <bressers@...hat.com>)

July 22 (4 messages)

CVE request: git (Greg Brockman <gdb@....EDU>)
Cacti XSS fixes in 0.8.7g (Tomas Hoger <thoger@...hat.com>)
Another freetype-demos buffer overflow (Josh Bressers <bressers@...hat.com>)
Re: CVE request: git (Josh Bressers <bressers@...hat.com>)

July 23 (4 messages)

mikmod incomplete fix for CVE-2009-3995 (Tomas Hoger <thoger@...hat.com>)
Re: Another freetype-demos buffer overflow (Werner LEMBERG <wl@....org>)
CVE assignment notification -- CVE-2010-2474 -- JBossESB (Marc Schoenefeld <mschoene@...hat.com>)
CVE request: GnuPG 2 (Florian Weimer <fw@...eb.enyo.de>)

July 26 (5 messages)

CVE-2008-id Request -- ssmtp -- standardise() -- Buffer overflow (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Cacti XSS fixes in 0.8.7g (Josh Bressers <bressers@...hat.com>)
Re: mikmod incomplete fix for CVE-2009-3995 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: GnuPG 2 (Josh Bressers <bressers@...hat.com>)
Re: CVE-2008-id Request -- ssmtp -- standardise() -- Buffer overflow (Josh Bressers <bressers@...hat.com>)

July 28 (3 messages)

CVE Request -- KVIrc -- Remote CTCP commands execution via specially-crafted CTCP parameter (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request: Piwik < 0.6.4 Arbitrary file inclusion (Anthon Pang <anthon.pang@...il.com>)
CVE request: mediawiki (Raphael Geissert <geissert@...ian.org>)

July 29 (6 messages)

CVE request: zabbix (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request -- KVIrc -- Remote CTCP commands execution via specially-crafted CTCP parameter (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: Piwik < 0.6.4 Arbitrary file inclusion (Josh Bressers <bressers@...hat.com>)
Re: CVE request: mediawiki (Josh Bressers <bressers@...hat.com>)
Re: CVE request: zabbix (Josh Bressers <bressers@...hat.com>)
[HITB-Ann] Reminder: HITB2010 Malaysia Call for Papers Closing August 9th (Hafez Kamal <aphesz@...kinthebox.org>)

July 30 (1 message)

CVE-2010-2791: mod_proxy information leak affecting 2.2.9 only (Joe Orton <jorton@...hat.com>)

July 31 (2 messages)

Re: CVE request: lxr (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: lxr (Dan Rosenberg <dan.j.rosenberg@...il.com>)

119 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.