oss-security mailing list - 2011/01

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2011/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	² 1
³ 12	⁴ 13	⁵ 12	⁶ 21	⁷ 4	⁸	⁹ 2
¹⁰ 3	¹¹ 3	¹² 4	¹³ 2	¹⁴ 7	¹⁵	¹⁶
¹⁷ 1	¹⁸ 7	¹⁹ 6	²⁰ 6	²¹ 3	²² 1	²³ 1
²⁴ 10	²⁵ 15	²⁶ 1	²⁷ 6	²⁸ 3	²⁹	³⁰ 1
³¹ 8

Messages by day:

January 2 (1 message)

CVE request for subversion (Kurt Seifried <kurt@...fried.org>)

January 3 (12 messages)

Re: CVE request: kernel: irda: prevent integer underflow in IRLMP_ENUMDEVICES (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE request for buffer overflows in gimp (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request -- 1, ccid -- int.overflow leading to array index error 2, pcsc-lite stack-based buffer overflow in ATR de… (Josh Bressers <bressers@...hat.com>)
Re: Re: CVE Request -- OfflineIMAP -- 1), failed to validate remote SSL server certificate 2), allows SSLv2 protocol (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- addressing two security flaws (Josh Bressers <bressers@...hat.com>)
Re: CVE request: wordpress before 3.0.4 XSS (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: CrawlTrack < 3.2.7 - remote php code execution (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: Wireshark (Josh Bressers <bressers@...hat.com>)
Re: CVE request for subversion (Josh Bressers <bressers@...hat.com>)
Possible CVE Request: improper AppArmor exec transition (Jamie Strandboge <jamie@...onical.com>)
Re: Possible CVE Request: improper AppArmor exec transition (Jamie Strandboge <jamie@...onical.com>)
CVE request: silverstripe before 2.4.4 (Hanno Böck <hanno@...eck.de>)

January 4 (13 messages)

CVE request: AusweisApp (Hanno Böck <hanno@...eck.de>)
Re: CVE request: AusweisApp (Hanno Böck <hanno@...eck.de>)
CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect() (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: Multiple DoS issues in block layer (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part) (Jan Lieskovsky <jlieskov@...hat.com>)
(possible) CVE request: Clickjacking in Mediawiki (Jonathan Wiltshire <jmw@...ian.org>)
Re: CVE request for buffer overflows in gimp (Josh Bressers <bressers@...hat.com>)
Re: CVE request for subversion (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part) (Mark Stosberg <mark@...mersault.com>)
Re: CVE request for subversion (Hyrum Wright <hwright@...che.org>)
Re: CVE request: silverstripe before 2.4.4 (Josh Bressers <bressers@...hat.com>)
Re: (possible) CVE request: Clickjacking in Mediawiki (Josh Bressers <bressers@...hat.com>)
Re: CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect() (Greg KH <greg@...ah.com>)

January 5 (12 messages)

CVE-2010-4525 kvm: x86: zero kvm_vcpu_events->interrupt.pad infoleak (Eugene Teo <eugene@...hat.com>)
possible flaw in widely used strtod.c implementation (Pierre Joye <pierre.php@...il.com>)
CVE request: hastymail before 1.01 XSS (Hanno Böck <hanno@...eck.de>)
Re: CVE request for subversion (Josh Bressers <bressers@...hat.com>)
Re: possible flaw in widely used strtod.c implementation (Michael Gilbert <michael.s.gilbert@...il.com>)
CGI.pm 3.51 released (Mark Stosberg <mark@...mersault.com>)
Re: CGI.pm 3.51 released (revised) (Mark Stosberg <mark@...mersault.com>)
Re: possible flaw in widely used strtod.c implementation (Pierre Joye <pierre.php@...il.com>)
Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events->interrupt.pad infoleak (Greg KH <greg@...ah.com>)
CVE request: patch directory traversal flaw (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: patch directory traversal flaw (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: patch directory traversal flaw (Vincent Danen <vdanen@...hat.com>)

January 6 (21 messages)

CVE Request: Multiple XSS Vulnerabiliies < Piwik 1.1 (Anthon Pang <anthon.pang@...il.com>)
CVE-NONE kernel: PHONET signedness issue (Eugene Teo <eugene@...hat.com>)
Re: CVE-2010-4525 kvm: x86: zero kvm_vcpu_events->interrupt.pad infoleak (Eugene Teo <eugene@...hat.com>)
Re: possible flaw in widely used strtod.c implementation (Pierre Joye <pierre.php@...il.com>)
Re: possible flaw in widely used strtod.c implementation (Josh Bressers <bressers@...hat.com>)
CVE Request for Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CVE Request: Eclipse IDE Version: 3.6.1 | Help Server Local Cross Site Scripting (XSS) (YGN Ethical Hacker Group <lists@...g.net>)
CVE Request: kernel [Re: Security review of 2.6.32.28] (dann frazier <dannf@...nf.org>)
Re: CVE-NONE kernel: PHONET signedness issue (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE-NONE kernel: PHONET signedness issue (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE-NONE kernel: PHONET signedness issue (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE-NONE kernel: PHONET signedness issue (Nelson Elhage <nelhage@...lice.com>)
Re: CVE request: patch directory traversal flaw (Steve Beattie <steve@...w.org>)
Re: CVE request: hastymail before 1.01 XSS (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: Multiple XSS Vulnerabiliies < Piwik 1.1 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: Eclipse IDE Version: 3.6.1 | Help Server Local Cross Site Scripting (XSS) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request for Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: kernel [Re: Security review of 2.6.32.28] (Josh Bressers <bressers@...hat.com>)
Re: CVE request: patch directory traversal flaw (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: patch directory traversal flaw (Josh Bressers <bressers@...hat.com>)
Re: CVE request: patch directory traversal flaw (Raphael Geissert <geissert@...ian.org>)

January 7 (4 messages)

Re: CVE-NONE kernel: PHONET signedness issue ("Steven M. Christey" <coley@...-smtp.mitre.org>)
CVE-2010-4225: XSP/mod_mono source code disclosure (Thomas Biege <thomas@...e.de>)
CVE Request - pimd - Insecure file creation in /var/tmp (Steve Kemp <steve@...ve.org.uk>)
Re: CVE Request - pimd - Insecure file creation in /var/tmp (Josh Bressers <bressers@...hat.com>)

January 9 (2 messages)

Re: CVE request for subversion (Hyrum K Wright <hyrum@...umwright.org>)
Re: CVE request for subversion (Kurt Seifried <kurt@...fried.org>)

January 10 (3 messages)

Re: Re: CVE-2010-2094: PECL's phar code is vulnerable too (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: Re: CVE-2010-2094: PECL's phar code is vulnerable too (Pierre Joye <pierre.php@...il.com>)
CVE request: qemu-kvm: Setting VNC password to empty string silently disables all authentication (Petr Matousek <pmatouse@...hat.com>)

January 11 (3 messages)

Re: CVE request: qemu-kvm: Setting VNC password to empty string silently disables all authentication (Kurt Seifried <kurt@...fried.org>)
Re: possible flaw in widely used strtod.c implementation ("Steven M. Christey" <coley@...-smtp.mitre.org>)
CVE request: sudo does not ask for password on GID changes (Vincent Danen <vdanen@...hat.com>)

January 12 (4 messages)

Re: CVE request: sudo does not ask for password on GID changes (Josh Bressers <bressers@...hat.com>)
Re: CVE request: qemu-kvm: Setting VNC password to empty string silently disables all authentication (Josh Bressers <bressers@...hat.com>)
Re: CVE request: sudo does not ask for password on GID changes ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
CVE assignments for Wireshark ("Steven M. Christey" <coley@...-smtp.mitre.org>)

January 13 (2 messages)

Re: CVE requests: IO::Socket::SSL, cakephp, collectd, gnash, ocrodjvu, hypermail, libcloud, piwigo (Raphael Geissert <geissert@...ian.org>)
CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 (Raphael Geissert <geissert@...ian.org>)

January 14 (7 messages)

Re: CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 (Moritz Mühlenhoff <jmm@...til.org>)
Re: CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 (Tomas Hoger <thoger@...hat.com>)
CVE request: proftpd before 1.3.3d (Hanno Böck <hanno@...eck.de>)
Re: CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: proftpd before 1.3.3d (Josh Bressers <bressers@...hat.com>)
Re: CVE request: proftpd before 1.3.3d ("TJ Saunders" <tj@...taglia.org>)

January 17 (1 message)

CVE request: tor (Moritz Muehlenhoff <jmm@...ian.org>)

January 18 (7 messages)

CVE request (Tim Brown <timb@...-dimension.org.uk>)
Re: CVE request (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE request (Tim Brown <timb@...-dimension.org.uk>)
Re: CVE request (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE request (Josh Bressers <bressers@...hat.com>)
CVE request: heap corruption in libpango (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: tor (Josh Bressers <bressers@...hat.com>)

January 19 (6 messages)

Re: CVE request: tor ("Steven M. Christey" <coley@...-smtp.mitre.org>)
CVE Request -- Asterisk: Stack-based buffer overflow by forming an outgoing SIP request with specially-crafted caller ID i… (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Asterisk: Stack-based buffer overflow by forming an outgoing SIP request with specially-crafted call… ("Steven M. Christey" <coley@...-smtp.mi…)
2 acpid flaws (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE Request -- Asterisk: Stack-based buffer overflow by forming an outgoing SIP request with specially-crafted call… (Matthew Nicholson <mnicholson@...ium.co…)
CVE request: heap corruption in VLC media player (Dan Rosenberg <dan.j.rosenberg@...il.com>)

January 20 (6 messages)

Re: CVE assignments for Wireshark (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE request: heap corruption in libpango (Josh Bressers <bressers@...hat.com>)
Re: CVE request: heap corruption in VLC media player (Josh Bressers <bressers@...hat.com>)
Re: CVE-2010-4225: XSP/mod_mono source code disclosure (Oden Eriksson <oeriksson@...driva.com>)
Re: CVE-2010-4225: XSP/mod_mono source code disclosure (Vincent Danen <vdanen@...hat.com>)
CVE request: xpdf (Dan Rosenberg <dan.j.rosenberg@...il.com>)

January 21 (3 messages)

Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Eugene Teo <eugeneteo@...nel.org>)
Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Vasiliy Kulikov <segoon@...nwall.com>)
Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Eugene Teo <eugeneteo@...nel.sg>)

January 22 (1 message)

Re: [PATCH] acpi: debugfs: fix buffer overflows, double free ("Steven M. Christey" <coley@...-smtp.mitre.org>)

January 23 (1 message)

Re: Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Eugene Teo <eugeneteo@...nel.org>)

January 24 (10 messages)

CVE request: MaraDNS DoS via long queries (Raphael Geissert <geissert@...ian.org>)
Linux kernel av7110 negative array offset (Kees Cook <kees@...ntu.com>)
Re: CVE request: xpdf (Josh Bressers <bressers@...hat.com>)
Re: Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Josh Bressers <bressers@...hat.com>)
Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE request: MaraDNS DoS via long queries (Josh Bressers <bressers@...hat.com>)
CVE request: multiple status.net issues (Kees Cook <kees@...ntu.com>)
CVE request: libxml2 heap contents leak (Kees Cook <kees@...ntu.com>)
CVE request: linux kernel heap issues (Kees Cook <kees@...ntu.com>)
CVE request: multiple gypsy vulnerabilities (Kees Cook <kees@...ntu.com>)

January 25 (15 messages)

Re: Re: [PATCH] acpi: debugfs: fix buffer overflows, double free (Eugene Teo <eugene@...hat.com>)
Re: Linux kernel av7110 negative array offset (Eugene Teo <eugene@...hat.com>)
Re: CVE request: linux kernel heap issues (Kurt Seifried <kurt@...fried.org>)
Re: CVE request: linux kernel heap issues (Eugene Teo <eugene@...hat.com>)
Re: CVE request: linux kernel heap issues (Eugene Teo <eugene@...hat.com>)
syslog-ng wrong file permission vulnerability (SZALAY Attila <sasa@...abit.hu>)
CVE Request: VLC Subtitle StripTags heap corruption (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE request: libxml2 heap contents leak (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: VLC Subtitle StripTags heap corruption (Josh Bressers <bressers@...hat.com>)
Re: CVE request: multiple gypsy vulnerabilities (Josh Bressers <bressers@...hat.com>)
Re: CVE request: libxml2 heap contents leak (Pierre Joye <pierre.php@...il.com>)
Re: CVE request: libxml2 heap contents leak (Kees Cook <kees@...flux.net>)
Re: CVE request: multiple status.net issues (Josh Bressers <bressers@...hat.com>)
Batavi 1.0 - XSRF bug fixed (Ronald van den Blink <ronald@....nl>)
CVE-2010-4238 xen dom0 issue (Eugene Teo <eugene@...hat.com>)

January 26 (1 message)

Re: CVE request: patch directory traversal flaw (Vasiliy Kulikov <segoon@...nwall.com>)

January 27 (6 messages)

CVE Request for phpMyAdmin 3.4.x, 3.4.0 beta 2 <= Stored Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CVE Request:Vanilla Forums 2.0.16 <= Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: Batavi 1.0 - XSRF bug fixed (Josh Bressers <bressers@...hat.com>)
Re: CVE Request for phpMyAdmin 3.4.x, 3.4.0 beta 2 <= Stored Cross Site Scripting (XSS) Vulnerability (Josh Bressers <bressers@...hat.com>)
Re: CVE Request:Vanilla Forums 2.0.16 <= Cross Site Scripting Vulnerability (Josh Bressers <bressers@...hat.com>)
CVE request: puppet (Moritz Mühlenhoff <jmm@...til.org>)

January 28 (3 messages)

Re: CVE request: linux kernel heap issues (Eugene Teo <eugene@...hat.com>)
request CVE for weborf (Salvo Tomaselli <tiposchi@...cali.it>)
CVE Request -- NDB: CVE-2005-3534 reintroduced in upstream nbd-v2.9.0 version (Jan Lieskovsky <jlieskov@...hat.com>)

January 30 (1 message)

MaraDNS 1.4.06 and 1.3.07.11 released (Sam Trenholme <strenholme.usenet@...il.com>)

January 31 (8 messages)

[HITB-Announce] Reminder: HITB2011AMS - Call for Papers closes on the 18th of Feb (Hafez Kamal <aphesz@...kinthebox.org>)
Re: MaraDNS 1.4.06 and 1.3.07.11 released (Tomas Hoger <thoger@...hat.com>)
Re: CVE assignments for Wireshark (Josh Bressers <bressers@...hat.com>)
CVE request: code execution in VLC media player (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE request: puppet (Josh Bressers <bressers@...hat.com>)
Re: request CVE for weborf (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- NDB: CVE-2005-3534 reintroduced in upstream nbd-v2.9.0 version (Josh Bressers <bressers@...hat.com>)
Re: CVE request: code execution in VLC media player (Josh Bressers <bressers@...hat.com>)

153 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.