oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2011/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 20	² 10	³ 40
⁴ 58	⁵ 37	⁶ 17	⁷ 9	⁸ 6	⁹ 2	¹⁰
¹¹ 18	¹² 19	¹³ 20	¹⁴ 14	¹⁵ 12	¹⁶	¹⁷ 1
¹⁸ 8	¹⁹ 5	²⁰ 7	²¹ 7	²² 11	²³	²⁴ 6
²⁵ 6	²⁶ 3	²⁷ 6	²⁸ 2	²⁹ 4	³⁰ 6

Messages by day:

April 1 (20 messages)

BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload (Tavis Ormandy <taviso@...xchg8b.com>)
Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE Request -- perl -- lc(), uc() routines are laundering tainted data (Jan Lieskovsky <jlieskov@...hat.com>)
6-year FreeBSD-SA-05:02.sendfile exploit (Solar Designer <solar@...nwall.com>)
Closed list (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Reed Loden <reed@...dloden.com>)
Re: Closed list ("Patrick J. Volkerding" <security@...ckware.com>)
Re: Closed list (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Closed list (Charles Blas <cblas@....org>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (Steve Beattie <sbeattie@...ntu.com>)
Re: Closed list (zardoz@...h.com)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)
Re: Closed list (Kees Cook <kees@...ntu.com>)
Re: Closed list ("Dmitry V. Levin" <ldv@...linux.org>)
Re: Closed list (Marcus Meissner <meissner@...e.de>)
Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)

April 2 (10 messages)

Re: Closed list (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (Alex Legler <a3li@...too.org>)
Re: Closed list (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)
Re: Closed list (klondike <klondike@...cosoft.es>)
Re: Closed list (Es gibt immer etwas zu tratschen <tratschen@...il.com>)
Closed list (R P Herrold <herrold@...river.com>)
Re: Closed list (Thijs Kinkhorst <thijs@...ian.org>)
Re: Closed list (ArkanoiD <ark@...ex.net>)
Re: Closed list (Elliot Peele <elliot@...th.com>)

April 3 (40 messages)

Re: Closed list (Miklos Vajna <vmiklos@...galware.org>)
Re: Closed list (AK <platsakos@...il.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Mark J Cox <mjc@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Ben Laurie <benl@...gle.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Steve Kemp <steve@...ve.org.uk>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Steve Kemp <steve@...ve.org.uk>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (ArkanoiD <ark@...ex.net>)
Re: Closed list (ArkanoiD <ark@...ex.net>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Benji <me@...ji.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: Closed list ("Patrick J. Volkerding" <security@...ckware.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)

April 4 (58 messages)

Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list (Eugene Teo <eugene@...hat.com>)
Re: Closed list (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: Closed list (Oden Eriksson <oeriksson@...driva.com>)
Re: Closed list (Mark J Cox <mjc@...hat.com>)
Re: Closed list (Marcus Meissner <meissner@...e.de>)
Re: Closed list (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Closed list (Nico Golde <oss-security+ml@...lde.de>)
Re: Closed list (Micah Gersten <micah@...ntu.com>)
Re: CVE Request -- Erlang/OTP R14, Erlang/OTP R14B01, Erlang/OTP R14B02 -- multiple security fixes (Hans Bolinder <hans.bolinder@...csson.com>)
Re: Closed list (Benji <me@...ji.com>)
Re: Closed list (ksha <ksha@...m.cl>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Marcus Meissner <meissner@...e.de>)
Re: Closed list (Ben Laurie <benl@...gle.com>)
Re: Closed list (phocean <0x90@...cean.net>)
my key (Sebastian Krahmer <krahmer@...e.de>)
Re: Closed list (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE request: libvirt: error reporting in libvirtd is not thread safe (Petr Matousek <pmatouse@...hat.com>)
Re: Closed list (Nico Golde <oss-security+ml@...lde.de>)
Re: Closed list (Eugene Teo <eugene@...hat.com>)
Re: Local memory disclosure (was: libpurple CVE UnRequest) (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Miklos Vajna <vmiklos@...galware.org>)
Closed list (R P Herrold <herrold@...river.com>)
Re: CVE request: libvirt: error reporting in libvirtd is not thread safe (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- perl -- lc(), uc() routines are laundering tainted data (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list ("Dmitry V. Levin" <ldv@...linux.org>)
Re: my key (Solar Designer <solar@...nwall.com>)
Re: CVE Request: rsyslogd memory leaks (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: CVE request: kernel: multiple issues in ROSE (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: multiple issues in ROSE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: CVE request: roundcube < 0.5.1 CSRF (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: multiple issues in ROSE (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Yves-Alexis Perez <corsac@...ian.org>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Web of trust (Yves-Alexis Perez <corsac@...ian.org>)
Re: Closed list (Jeffrey Czerniak <jeffcz@...le.com>)
Re: Closed list (klondike <klondike@...cosoft.es>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)

April 5 (37 messages)

Re: Web of trust (Solar Designer <solar@...nwall.com>)
Re: Closed list (Jeffrey Czerniak <jeffcz@...le.com>)
Vouching system (was Re: Closed list) (Eugene Teo <eugene@...hat.com>)
Re: Closed list (Matthias Andree <matthias.andree@....de>)
Re: Closed list (Matthias Andree <matthias.andree@....de>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Benji <me@...ji.com>)
A new way of writing secure data backups, combining RAID and one time pads. (Gareth Randall <gareth.randall@...gin.net>)
CVE re-request (Sebastian Krahmer <krahmer@...e.de>)
Re: Closed list (Thomas Biege <thomas@...e.de>)
Re: Closed list (Thomas Biege <thomas@...e.de>)
Re: Vouching system (was Re: Closed list) (Solar Designer <solar@...nwall.com>)
Re: CVE re-request (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: CVE request: kernel: multiple issues in ROSE ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: kernel: multiple issues in ROSE ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: kernel: multiple issues in ROSE ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: Closed list (Tim Zingelman <tez@...bsd.org>)
Re: CVE re-request ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: CVE request: kernel: multiple issues in ROSE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Vincent Danen <vdanen@...hat.com>)
Re: Closed list (Andrea Barisani <lcars@...rt.org>)
Re: Closed list (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Vincent Danen <vdanen@...hat.com>)
Re: Closed list (Vincent Danen <vdanen@...hat.com>)
CVE request: kernel: two issues in mpt2sas (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: A new way of writing secure data backups, combining RAID and one time pads. (klondike <klondike@...cosoft.es>)
Re: A new way of writing secure data backups, combining RAID and one time pads. (Yves-Alexis Perez <corsac@...ian.org>)
Re: Closed list (Jamie Strandboge <jamie@...onical.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
CVE id request: tmux (debian specific) (Nico Golde <oss-security+ml@...lde.de>)

April 6 (17 messages)

Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)
Re: CVE request: kernel: two issues in mpt2sas (Eugene Teo <eugene@...hat.com>)
CVE for ruby on rails XSS fixes (Sebastian Krahmer <krahmer@...e.de>)
Re: Closed list (Milan Berger <m.berger@...ject-mindstorm.net>)
Re: Closed list (Jeremy Stanley <fungi@...goth.org>)
Re: CVE requests : Liferay 6.0.6 (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
CVE Request -- dhcp: DoS (excessive CPU use) by opening an OMAPI connection (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: CVE id request: tmux (debian specific) (Josh Bressers <bressers@...hat.com>)
Re: CVE for ruby on rails XSS fixes (Josh Bressers <bressers@...hat.com>)
Moonlight release 2.4.1 with security fixes (Marcus Meissner <meissner@...e.de>)
Re: CVE Request -- dhcp: DoS (excessive CPU use) by opening an OMAPI connection (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Stefan Behte <craig@...too.org>)

April 7 (9 messages)

Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list (akuster <akuster@...sta.com>)
consolekit security flaw heads up (Josh Bressers <bressers@...hat.com>)
Re: Possible security fixes in 5.05? (Vincent Danen <vdanen@...hat.com>)
Re: Possible security fixes in 5.05? (christos@...las.com (Christos Zoulas))
Apache HttpClient CVE request [VU#153049] (Chad Dougherty <crd@...t.org>)
Re: Possible security fixes in 5.05? (Vincent Danen <vdanen@...hat.com>)
CVE request: tinyproxy runs as an open proxy when attempting to restrict allowable IP ranges (Vincent Danen <vdanen@...hat.com>)

April 8 (6 messages)

Re: Apache HttpClient CVE request [VU#153049] (Mark J Cox <mjc@...hat.com>)
CVE request for pithos information disclosure (Luke Faraone <lfaraone@...ian.org>)
Re: CVE request: tinyproxy runs as an open proxy when attempting to restrict allowable IP ranges (Josh Bressers <bressers@...hat.com>)
Re: CVE request for pithos information disclosure (Josh Bressers <bressers@...hat.com>)
Re: CVE requests : Liferay 6.0.6 (Josh Bressers <bressers@...hat.com>)
Re: Closed list (akuster <akuster@...sta.com>)

April 9 (2 messages)

CVE id request: gitolite (Nico Golde <oss-security+ml@...lde.de>)
Re: Closed list (Solar Designer <solar@...nwall.com>)

April 11 (18 messages)

Re: CVE request: kernel: inotify memory leak (Eugene Teo <eugene@...hat.com>)
CVE-2011-1479 (was Re: CVE request: kernel: inotify memory leak) (Eugene Teo <eugene@...hat.com>)
pure-ftpd STARTTLS command injection / new CVE? (Sebastian Krahmer <krahmer@...e.de>)
CVE request - kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set (Eugene Teo <eugene@...hat.com>)
Re: Closed list (akuster <akuster@...sta.com>)
CVE request for libmodplug (Vincent Danen <vdanen@...hat.com>)
Re: pure-ftpd STARTTLS command injection / new CVE? ("Mike O'Connor" <mjo@...o.mi.org>)
Re: pure-ftpd STARTTLS command injection / new CVE? ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE requests : Liferay 6.0.6 (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: gitolite (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set (Josh Bressers <bressers@...hat.com>)
Re: CVE request for libmodplug (Josh Bressers <bressers@...hat.com>)
Re: pure-ftpd STARTTLS command injection / new CVE? (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Moritz Muehlenhoff <jmm@...ian.org>)
CVE requests: Three Linux kernel issues (Moritz Muehlenhoff <jmm@...ian.org>)
CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE requests: Three Linux kernel issues (Dan Rosenberg <dan.j.rosenberg@...il.com>)

April 12 (19 messages)

Re: CVE request: kernel: multiple issues in ROSE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: CVE requests: Three Linux kernel issues (Eugene Teo <eugene@...hat.com>)
Re: CVE requests: Three Linux kernel issues (Eugene Teo <eugene@...hat.com>)
RE: [security-vendor] Closed list ("Zhao, Zhenfeng" <Zhenfeng.Zhao@...driver.com>)
Re: CVE requests: Three Linux kernel issues (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables (Timo Warns <warns@...-sense.de>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Onur Küçük <onur@...dus.org.tr>)
Re: Closed list (Petr Matousek <pmatouse@...hat.com>)
libtiff CVE assignments (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (akuster <akuster@...sta.com>)
CVE Request: kernel: fs/partitions: Corrupted GUID partition tables can cause kernel oops (Timo Warns <warns@...-sense.de>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)

April 13 (20 messages)

Re: CVE Request: kernel: fs/partitions: Corrupted GUID partition tables can cause kernel oops (Eugene Teo <eugene@...hat.com>)
CVE request: mediawiki 1.16.3 (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: mediawiki 1.16.3 (Kurt Seifried <kurt@...fried.org>)
CVE request - kernel: bonding: Incorrect TX queue offset (Eugene Teo <eugene@...hat.com>)
Re: CVE request: mediawiki 1.16.3 (Eugene Teo <eugene@...hat.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
CVE id request: mahara / HTML Purifier (Joey Schulze <joey@...odrom.org>)
Re: Closed list (Ronald van den Blink <oss-security@...urityview.nl>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Vincent Danen <vdanen@...hat.com>)
Re: CVE id request: vlc (Josh Bressers <bressers@...hat.com>)
Re: CVE request: mediawiki 1.16.3 (Josh Bressers <bressers@...hat.com>)
Re: CVE request - kernel: bonding: Incorrect TX queue offset (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: Closed list (Ronald van den Blink <oss-security@...urityview.nl>)
CVE request: dotclear before 2.2.3 (Hanno Böck <hanno@...eck.de>)
Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)

April 14 (14 messages)

CVE request for SAP issues (Kurt Seifried <kurt@...fried.org>)
Re: CVE request for SAP issues (Solar Designer <solar@...nwall.com>)
Re: CVE request for SAP issues (Kurt Seifried <kurt@...fried.org>)
Re: Closed list (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Tomas Hoger <thoger@...hat.com>)
Re: RE: [security-vendor] Closed list (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: CVE request: dotclear before 2.2.3 (Franck Paul <carnet.franck.paul@...il.com>)
[security-vendor] Re: Closed list ("Zhao, Zhenfeng" <Zhenfeng.Zhao@...driver.com>)
Re: Re: Closed list (Meltem Parmaksız <meltem@...dus.org.tr>)
CVE request: mediawiki 1.16.4, incomplete fix of CVE-2011-1578 (Vincent Danen <vdanen@...hat.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list ("Patrick J. Volkerding" <security@...ckware.com>)

April 15 (12 messages)

CVE Request: cifs session reuse (Ludwig Nussel <ludwig.nussel@...e.de>)
[security-vendor] Re: Closed list ("Zhao, Zhenfeng" <Zhenfeng.Zhao@...driver.com>)
CVE Request: incomplete fix for CVE-2010-1000 in KDE network (Jamie Strandboge <jamie@...onical.com>)
CVE request for Thunar (format string errors) (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE request for Thunar (format string errors) (Tomas Hoger <thoger@...hat.com>)
Re: CVE request for Thunar (format string errors) (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE request: dotclear before 2.2.3 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: cifs session reuse (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: incomplete fix for CVE-2010-1000 in KDE network (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: a collection of world-writable debugfs bugs (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE request: dotclear before 2.2.3 (JcDenis <jcdenis@...d.com>)
Re: CVE request: kernel: a collection of world-writable debugfs bugs (akuster <akuster@...sta.com>)

April 17 (1 message)

CVE request: Mojolicious directory traversal vulnerability (Vincent Danen <vdanen@...hat.com>)

April 18 (8 messages)

Re: CVE request: kernel: a collection of world-writable debugfs bugs (Eugene Teo <eugene@...hat.com>)
Wireshark 1.2.16 / 1.4.5 (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE request: Mojolicious (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE id request: mahara / HTML Purifier (Josh Bressers <bressers@...hat.com>)
Re: CVE request: mediawiki 1.16.4, incomplete fix of CVE-2011-1578 (Josh Bressers <bressers@...hat.com>)
Re: CVE request for Thunar (format string errors) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Mojolicious directory traversal vulnerability (Josh Bressers <bressers@...hat.com>)
Re: Wireshark 1.2.16 / 1.4.5 (Josh Bressers <bressers@...hat.com>)

April 19 (5 messages)

CVE request -- kernel: proc: signedness issue in next_pidmap() (Petr Matousek <pmatouse@...hat.com>)
CVE Request -- atop: Symlink attacks via process accounting file (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- atop: Symlink attacks via process accounting file (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- gnome-desktop3: Switching users dialog does not lock the screen for the original user account (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- OpenVAS Manager v2.0.3 (Jan Lieskovsky <jlieskov@...hat.com>)

April 20 (7 messages)

Re: CVE request -- kernel: proc: signedness issue in next_pidmap() (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: missing socket check in can/bcm release (Eugene Teo <eugene@...hat.com>)
rdesktop CVE - CVE-2011-1595 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- gnome-desktop3: Switching users dialog does not lock the screen for the original user account (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- OpenVAS Manager v2.0.3 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: missing socket check in can/bcm release (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: missing socket check in can/bcm release (Eugene Teo <eugene@...hat.com>)

April 21 (7 messages)

Re: CVE request: kernel: missing socket check in can/bcm release (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: missing socket check in can/bcm release (Eugene Teo <eugene@...hat.com>)
Re: Closed list (Drew Yao <ayao@...le.com>)
CVE request: kernel: buffer overflow and DoS issues in agp (Vasiliy Kulikov <segoon@...nwall.com>)
CVE Request -- Asterisk Security Vulnerability (Matthew Nicholson <mnicholson@...ium.com>)
CVE request: CVE-2011-1089-like flaw in mount.nfs (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: kernel: missing socket check in can/bcm release (akuster <akuster@...sta.com>)

April 22 (11 messages)

Re: RE: [security-vendor] Closed list ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE request: kernel: missing socket check in can/bcm release (Eugene Teo <eugene@...hat.com>)
CVE request -- qemu-kvm: virtio-blk: heap buffer overflow caused by unaligned requests (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- Asterisk Security Vulnerability (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Asterisk Security Vulnerability ("Matthew Nicholson" <mnicholson@...ium.com>)
Re: CVE Request -- Asterisk Security Vulnerability (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: kernel: buffer overflow and DoS issues in agp (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request: kernel: buffer overflow and DoS issues in agp (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE request: kernel: buffer overflow and DoS issues in agp (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request: kernel: buffer overflow and DoS issues in agp (Vasiliy Kulikov <segoon@...nwall.com>)
Re: CVE request: kernel: buffer overflow and DoS issues in agp (akuster <akuster@...sta.com>)

April 24 (6 messages)

Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)

April 25 (6 messages)

Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: missing socket check in can/bcm release (Josh Bressers <bressers@...hat.com>)
Re: CVE request: CVE-2011-1089-like flaw in mount.nfs (Josh Bressers <bressers@...hat.com>)
Re: CVE request -- qemu-kvm: virtio-blk: heap buffer overflow caused by unaligned requests (Josh Bressers <bressers@...hat.com>)

April 26 (3 messages)

Re: Closed list (Vincent Danen <vdanen@...hat.com>)
Re: Closed list (Jeff Mitchell <mitchell@....org>)
Re: Closed list (Oracle Security Alerts <secalert_us@...cle.com>)

April 27 (6 messages)

Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (Tomas Hoger <thoger@...hat.com>)
Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (Tomas Hoger <thoger@...hat.com>)
Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Michael Gilbert <michael.s.gilbert@...il.com>)

April 28 (2 messages)

Re: Closed list (Hui Zhu <hui.zhu@...driver.com>)
Re: Closed list ("Mike O'Connor" <mjo@...o.mi.org>)

April 29 (4 messages)

CVE Request -- fail2ban -- Use of insecure default temporary file when unbanning an IP (tmpfile = /tmp/fail2ban-mail.txt) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: kernel (ARM): heap corruption in OABI semtimedop (Dan Rosenberg <dan.j.rosenberg@...il.com>)
CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (Jan Lieskovsky <jlieskov@...hat.com>)
vulnerability in sssd 1.5.0+ (CVE-2011-1758) (Vincent Danen <vdanen@...hat.com>)

April 30 (6 messages)

Re: Closed list (Jeff Mitchell <mitchell@....org>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Jeff Mitchell <mitchell@....org>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)

354 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.