oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 4	² 13	³ 3	⁴ 10	⁵ 4	⁶	⁷ 3
⁸ 13	⁹ 6	¹⁰ 18	¹¹ 2	¹² 6	¹³ 1	¹⁴ 6
¹⁵ 8	¹⁶ 7	¹⁷ 11	¹⁸ 8	¹⁹	²⁰ 1	²¹ 1
²² 20	²³ 11	²⁴ 14	²⁵ 4	²⁶ 1	²⁷	²⁸
²⁹ 3	³⁰ 9

Messages by day:

November 1 (4 messages)

Re: CVE request: kernel: iovec overflow in rds_rdma_pages() (Josh Bressers <bressers@...hat.com>)
Proftpd pre-authentication buffer overflow in Telnet code (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: moodle 1.9.10 (Josh Bressers <bressers@...hat.com>)
Re: Proftpd pre-authentication buffer overflow in Telnet code (Josh Bressers <bressers@...hat.com>)

November 2 (13 messages)

utf-8 security issue in php (Oden Eriksson <oeriksson@...driva.com>)
Re: utf-8 security issue in php (Pierre Joye <pierre.php@...il.com>)
Re: utf-8 security issue in php (Pierre Joye <pierre.php@...il.com>)
Re: utf-8 security issue in php (Josh Bressers <bressers@...hat.com>)
libxml2 xpath (Sebastian Krahmer <krahmer@...e.de>)
Re: utf-8 security issue in php (Pierre Joye <pierre.php@...il.com>)
CVE request: kernel stack infoleaks (Jon Oberheide <jon@...rheide.org>)
Re: utf-8 security issue in php (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: kernel stack infoleaks (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: kernel stack infoleaks (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: utf-8 security issue in php (Pierre Joye <pierre.php@...il.com>)
Re: CVE request: kernel stack infoleaks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: utf-8 security issue in php (Vincent Danen <vdanen@...hat.com>)

November 3 (3 messages)

Re: utf-8 security issue in php (Sebastian Krahmer <krahmer@...e.de>)
CVE request: X.25 remote DoS (Dan Rosenberg <dan.j.rosenberg@...il.com>)
CVE request: kernel: CAN information leak (Dan Rosenberg <dan.j.rosenberg@...il.com>)

November 4 (10 messages)

CVE request: kernel: sys_semctl: fix kernel stack leakage (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: sys_semctl: fix kernel stack leakage (Eugene Teo <eugene@...hat.com>)
Re: CVE request: X.25 remote DoS (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: CAN information leak (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel stack infoleaks (Josh Bressers <bressers@...hat.com>)
Re: libxml2 xpath (Josh Bressers <bressers@...hat.com>)
CVE Clarification: OpenFabrics ofed stack also contains RDS protocol (Marcus Meissner <meissner@...e.de>)
CVE request: fuse (Marc Deslauriers <marc.deslauriers@...onical.com>)
CVE request: kernel: logic error in INET_DIAG bytecode auditing (Nelson Elhage <nelhage@...lice.com>)
CVE request: kernel: kvm kernel stack leakage (Petr Matousek <pmatouse@...hat.com>)

November 5 (4 messages)

Re: CVE Clarification: OpenFabrics ofed stack also contains RDS protocol (Josh Bressers <bressers@...hat.com>)
Re: CVE request: fuse (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: logic error in INET_DIAG bytecode auditing (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: kvm kernel stack leakage (Josh Bressers <bressers@...hat.com>)

November 7 (3 messages)

Re: CVE request: moodle 1.9.10 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE Request: PHP 5.3.3, libmbfl, mb_strcut (Pierre Joye <pierre.php@...il.com>)
Linux kernel proactive security hardening (Kees Cook <kees@...ntu.com>)

November 8 (13 messages)

Re: Linux kernel proactive security hardening (Solar Designer <solar@...nwall.com>)
Re: Linux kernel proactive security hardening (Dan Rosenberg <dan.j.rosenberg@...il.com>)
filesystem capabilities (Solar Designer <solar@...nwall.com>)
Re: Linux kernel proactive security hardening (Solar Designer <solar@...nwall.com>)
Re: Linux kernel proactive security hardening (Solar Designer <solar@...nwall.com>)
Re: filesystem capabilities (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: filesystem capabilities (Sebastian Krahmer <krahmer@...e.de>)
Re: filesystem capabilities (yersinia <yersinia.spiros@...il.com>)
Re: Linux kernel proactive security hardening (Vasiliy Kulikov <segooon@...il.com>)
Re: filesystem capabilities (Steve Grubb <sgrubb@...hat.com>)
Re: filesystem capabilities (Steve Grubb <sgrubb@...hat.com>)
Re: Linux kernel proactive security hardening (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE Request: PHP 5.3.3, libmbfl, mb_strcut (Josh Bressers <bressers@...hat.com>)

November 9 (6 messages)

CVE request: kernel: gdth: integer overflow in ioc_general() (Petr Matousek <pmatouse@...hat.com>)
Re: filesystem capabilities (James Morris <jmorris@...ei.org>)
Re: CVE request: kernel: gdth: integer overflow in ioc_general() (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: kernel: gdth: integer overflow in ioc_general() (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request: kernel: gdth: integer overflow in ioc_general() (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: libxml2 xpath (Giuseppe Iuculano <giuseppe@...ulano.it>)

November 10 (18 messages)

CVE-2010-3086 kernel panic via futex (Eugene Teo <eugene@...hat.com>)
CVE Request: kernel: socket filters infoleak (Eugene Teo <eugene@...hat.com>)
CVE request: mono loading shared libs from cwd (Thomas Biege <thomas@...e.de>)
Re: CVE request: mono loading shared libs from cwd (Thomas Biege <thomas@...e.de>)
CVE request: kernel: L2TP send buffer allocation size overflows (Petr Matousek <pmatouse@...hat.com>)
Re: Linux kernel proactive security hardening (Kees Cook <kees@...ntu.com>)
Re: Linux kernel proactive security hardening (Kees Cook <kees@...ntu.com>)
Re: filesystem capabilities (Kees Cook <kees@...ntu.com>)
Re: filesystem capabilities (Kees Cook <kees@...ntu.com>)
Re: Linux kernel proactive security hardening (Vasiliy Kulikov <segoon@...nwall.com>)
Re: filesystem capabilities (Steve Grubb <sgrubb@...hat.com>)
Re: CVE request: kernel: gdth: integer overflow in ioc_general() (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: kernel: socket filters infoleak (Josh Bressers <bressers@...hat.com>)
Re: CVE request: mono loading shared libs from cwd (Josh Bressers <bressers@...hat.com>)
Re: filesystem capabilities (Kees Cook <kees@...ntu.com>)
Re: CVE request: kernel: L2TP send buffer allocation size overflows (Josh Bressers <bressers@...hat.com>)
Re: filesystem capabilities (Steve Grubb <sgrubb@...hat.com>)
CVE request: kernel: Multiple DoS issues in block layer (Dan Rosenberg <dan.j.rosenberg@...il.com>)

November 11 (2 messages)

[HITB-Announce] HITB Magazine #5 Call for Articles (Hafez Kamal <aphesz@...kinthebox.org>)
CVE request: kernel: remote DoS in X.25 (Dan Rosenberg <dan.j.rosenberg@...il.com>)

November 12 (6 messages)

CVE request: kernel: possible kernel oops from user MSS (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: Multiple DoS issues in block layer (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: remote DoS in X.25 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: possible kernel oops from user MSS (Josh Bressers <bressers@...hat.com>)
CVE request: Joomla 1.5.21 SQL Injection and Information Disclosure (Henri Salo <henri@...v.fi>)
Re: CVE request: Joomla 1.5.21 SQL Injection and Information Disclosure (Josh Bressers <bressers@...hat.com>)

November 13 (1 message)

CVE request: ImageMagick opens config files in $CWD (Vincent Danen <vdanen@...hat.com>)

November 14 (6 messages)

Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (Marc Deslauriers <marc.deslauriers@...onical.com>)
econet iovec (Thomas Pollet <thomas.pollet@...il.com>)
Re: econet iovec (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: econet iovec (Dan Rosenberg <dan.j.rosenberg@...il.com>)
CVE request for OpenTTD (Rubidium <rubidium@...nttd.org>)
Re: utf-8 security issue in php (Pierre Joye <pierre.php@...il.com>)

November 15 (8 messages)

Re: econet iovec (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: perf bug (Eugene Teo <eugene@...hat.com>)
Re: CVE request: ImageMagick opens config files in $CWD (Josh Bressers <bressers@...hat.com>)
Re: CVE request for OpenTTD (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: perf bug (Josh Bressers <bressers@...hat.com>)
Re: econet iovec ("Steven M. Christey" <coley@...us.mitre.org>)
Re: econet iovec (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly ("Steven M. Christey" <coley@...us.mitre.org>)

November 16 (7 messages)

utf-8 security issue in php - 2 CVEs? (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request: libsdp (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: utf-8 security issue in php - 2 CVEs? (Pierre Joye <pierre.php@...il.com>)
Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (Ben Laurie <benl@...gle.com>)
Clear text password in process list when using MySQL GUI tools (Martin Drescher <drescher@...fu.de>)
Re: CVE Request: libsdp (Josh Bressers <bressers@...hat.com>)

November 17 (11 messages)

Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (Matthias Andree <matthias.andree@....de>)
Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (dave b <db.pub.mail@...il.com>)
Re: Re: utf-8 security issue in php - 2 CVEs? (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly (dave b <db.pub.mail@...il.com>)
Re: Clear text password in process list when using MySQL GUI tools (Josh Bressers <bressers@...hat.com>)
Re: Re: utf-8 security issue in php - 2 CVEs? (Pierre Joye <pierre.php@...il.com>)
CVE request: kernel: integer overflow in RDS (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Clear text password in process list when using MySQL GUI tools (Moritz Muehlenhoff <jmm@...til.org>)
Re: Clear text password in process list when using MySQL GUI tools ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Clear text password in process list when using MySQL GUI tools (Martin Drescher <drescher@...fu.de>)

November 18 (8 messages)

Re: CVE request: kernel: integer overflow in RDS (Eugene Teo <eugene@...hat.com>)
Re: Clear text password in process list when using MySQL GUI tools (Josh Bressers <bressers@...hat.com>)
[HITB-Announce] HITB2011AMS -- Call For Papers now Open (Hafez Kamal <aphesz@...kinthebox.org>)
NULL byte poisoning fix in php 5.3.4+ (Pierre Joye <pierre.php@...il.com>)
Re: NULL byte poisoning fix in php 5.3.4+ (Pierre Joye <pierre.php@...il.com>)
Re: filesystem capabilities (Kees Cook <kees@...ntu.com>)
Re: filesystem capabilities (Daniel J Walsh <dwalsh@...hat.com>)
CVE request: tikiwiki <= 5.2 XSS, CSRF, file inclusion (Hanno Böck <hanno@...eck.de>)

November 20 (1 message)

Re: Clear text password in process list when using MySQL GUI tools (Moritz Muehlenhoff <jmm@...ian.org>)

November 21 (1 message)

CVE Request: gif2png: command-line buffer overflow problem (Kurt Seifried <kurt@...fried.org>)

November 22 (20 messages)

Re: CVE Request: gif2png: command-line buffer overflow problem (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: NULL byte poisoning fix in php 5.3.4+ (Pierre Joye <pierre.php@...il.com>)
Re: CVE Request: gif2png: command-line buffer overflow problem (Kurt Seifried <kurt@...fried.org>)
Re: CVE Request: gif2png: command-line buffer overflow problem ("Benji" <me@...ji.com>)
CVE request: kernel: missing tty ops write function presence check in hci_uart_tty_open() (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads (Eugene Teo <eugene@...hat.com>)
CVE-2010-4161 kernel: rhel5 backport of 93821778 caused deadlock (Eugene Teo <eugene@...hat.com>)
CVE Request -- pootle -- XSS via 'match_names' parameter on translate.html page (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: tikiwiki <= 5.2 XSS, CSRF, file inclusion (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: gif2png: command-line buffer overflow problem (Josh Bressers <bressers@...hat.com>)
Re: Re: NULL byte poisoning fix in php 5.3.4+ (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: gif2png: command-line buffer overflow problem ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: missing tty ops write function presence check in hci_uart_tty_open() (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: gif2png: command-line buffer overflow problem ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- pootle -- XSS via 'match_names' parameter on translate.html page (Josh Bressers <bressers@...hat.com>)
CVE assignments for Wireshark LDSS / ZCL issues ("Steven M. Christey" <coley@...us.mitre.org>)
Can I request a cve for pfsense regarding --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities" (dave b <db.pub.mail@...il.com>)
Linux kernel address leaks (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Linux kernel address leaks (Michael Gilbert <michael.s.gilbert@...il.com>)

November 23 (11 messages)

CVE request: xen: request-processing loop is unbounded in blkback (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: posix-cpu-timers: workaround to suppress the problems with mt exec (Eugene Teo <eugene@...hat.com>)
Re: Linux kernel address leaks (Yves-Alexis Perez <corsac@...ian.org>)
Re: Linux kernel address leaks (Marcus Meissner <meissner@...e.de>)
Re: Linux kernel address leaks (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Linux kernel address leaks (Steve Grubb <sgrubb@...hat.com>)
Re: Linux kernel address leaks (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Linux kernel address leaks (Jon Oberheide <jon@...rheide.org>)
Re: Linux kernel address leaks (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Linux kernel address leaks (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Linux kernel address leaks (Marcus Meissner <meissner@...e.de>)

November 24 (14 messages)

Re: Linux kernel address leaks (Jon Oberheide <jon@...rheide.org>)
CVE request: kernel: unix socket local dos (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: inotify memory leak (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: L2TP send buffer allocation size overflows (Thomas Biege <thomas@...e.de>)
Re: CVE request: kernel: L2TP send buffer allocation size overflows (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: L2TP send buffer allocation size overflows (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Can I request a cve for pfsense regarding --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities" (Josh Bressers <bressers@...hat.com>)
Re: CVE request: xen: request-processing loop is unbounded in blkback (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: posix-cpu-timers: workaround to suppress the problems with mt exec (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: unix socket local dos (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: inotify memory leak (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: L2TP send buffer allocation size overflows (Josh Bressers <bressers@...hat.com>)
Interesting behavior with struct initiailization (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Interesting behavior with struct initiailization (Dan Rosenberg <dan.j.rosenberg@...il.com>)

November 25 (4 messages)

CVE-2010-3699 xen: guest->host denial of service from invalid xenbus transitions (Eugene Teo <eugene@...hat.com>)
Re: Interesting behavior with struct initiailization (Nelson Elhage <nelhage@...lice.com>)
CVE tagged Linux kernel git repositories (Eugene Teo <eugene@...hat.com>)
CVE request: mono/moonlight: execution of arbitrary code due to mutable Strings (Thomas Biege <thomas@...e.de>)

November 26 (1 message)

Re: CVE request: kernel: unix socket local dos (Thomas Biege <thomas@...e.de>)

November 29 (3 messages)

Re: CVE request: kernel: Multiple DoS issues in block layer (Eugene Teo <eugene@...hat.com>)
Re: Linux kernel address leaks ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mono/moonlight: execution of arbitrary code due to mutable Strings (Josh Bressers <bressers@...hat.com>)

November 30 (9 messages)

kernel: Multiple vulnerabilities in AF_ECONET (Nelson Elhage <nelhage@...lice.com>)
Re: Re: NULL byte poisoning fix in php 5.3.4+ (Pierre Joye <pierre.php@...il.com>)
Re: Interesting behavior with struct initiailization (Geoff Keating <geoffk@...le.com>)
Re: CVE request: kernel: Multiple DoS issues in block layer (Eugene Teo <eugene@...hat.com>)
CVE request: xen: x86-64: don't crash Xen upon direct pv guest access (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: pipe_fcntl local DoS (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: Multiple DoS issues in block layer (Thomas Biege <thomas@...e.de>)
Re: CVE request: xen: x86-64: don't crash Xen upon direct pv guest access (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: pipe_fcntl local DoS (Josh Bressers <bressers@...hat.com>)

187 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.