oss-security mailing list - 2011/05

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2011/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 2
² 20	³ 4	⁴	⁵ 6	⁶ 4	⁷	⁸ 2
⁹ 12	¹⁰ 7	¹¹ 4	¹²	¹³	¹⁴	¹⁵
¹⁶ 11	¹⁷ 15	¹⁸ 13	¹⁹ 11	²⁰ 4	²¹ 1	²² 1
²³ 1	²⁴ 11	²⁵ 2	²⁶ 4	²⁷	²⁸ 1	²⁹ 1
³⁰ 2	³¹ 20

Messages by day:

May 1 (2 messages)

Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (William Cohen <wcohen@...hat.com>)
Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (William Cohen <wcohen@...hat.com>)

May 2 (20 messages)

CVE request: libmodplugin stack-buffer overflow (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request -- gnome-desktop3: Switching users dialog does not lock the screen for the original user account (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request -- WordPress v3.1.2 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: [security-vendor] Re: Closed list (Mark Hatle <mark.hatle@...driver.com>)
Re: [security-vendor] Re: Closed list (Mark Hatle <mark.hatle@...driver.com>)
Re: Re: [security-vendor] Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Closed list (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel (ARM): heap corruption in OABI semtimedop (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- fail2ban -- Use of insecure default temporary file when unbanning an IP (tmpfile = /tmp/fail2ban-mail.t… (Josh Bressers <bressers@...hat.com>)
Re: CVE request: libmodplugin stack-buffer overflow (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- WordPress v3.1.2 (Josh Bressers <bressers@...hat.com>)

May 3 (4 messages)

Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by … (Huzaifa Sidhpurwala <huzaifas@...hat.co…)
Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (Stephane Chauveau <stephane.chauveau@ca…)
Re: Closed list (Mark J Cox <mjc@...hat.com>)
CVE request: openssh (Vincent Danen <vdanen@...hat.com>)

May 5 (6 messages)

CVE request: mediawiki (Kurt Seifried <kurt@...fried.org>)
Symlinks and filesystem recursion vulnerabilities: Action needed or ignore? (halfdog <me@...fdog.net>)
Re: CVE requests - kernel network vulns (Eugene Teo <eugene@...hat.com>)
Re: Symlinks and filesystem recursion vulnerabilities: Action needed or ignore? ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: mediawiki (Josh Bressers <bressers@...hat.com>)
Re: CVE requests - kernel network vulns (Josh Bressers <bressers@...hat.com>)

May 6 (4 messages)

CVE request: libarchive, multiple overflows (Thomas Biege <thomas@...e.de>)
CVE request: tigervnc (Vincent Danen <vdanen@...hat.com>)
Re: Symlinks and filesystem recursion vulnerabilities: Action needed or ignore? (halfdog <me@...fdog.net>)
CVE request -- virt-v2v: vnc password protection is missing after vm conversion (Petr Matousek <pmatouse@...hat.com>)

May 8 (2 messages)

CVE request: kernel: DCCP invalid options (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace. (Filip Palian <s3810@...stk.edu.pl>)

May 9 (12 messages)

Re: CVE request: kernel: DCCP invalid options (Eugene Teo <eugene@...hat.com>)
CVE-2011-1771 kernel: cifs oops when creating file with O_DIRECT set (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: validate size of EFI GUID partition entries (Eugene Teo <eugene@...hat.com>)
CVE request : client-side file creation via XSLT in Webkit (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: CVE request -- virt-v2v: vnc password protection is missing after vm conversion (Josh Bressers <bressers@...hat.com>)
Re: CVE request : client-side file creation via XSLT in Webkit (Josh Bressers <bressers@...hat.com>)
Re: CVE request: tigervnc (Josh Bressers <bressers@...hat.com>)
Re: CVE request : client-side file creation via XSLT in Webkit ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: kernel: validate size of EFI GUID partition entries (Josh Bressers <bressers@...hat.com>)
Re: CVE request : client-side file creation via XSLT in Webkit (Deb Mazurek <dmazurek@...urityfocus.com>)
Re: CVE request : client-side file creation via XSLT in Webkit ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: libarchive, multiple overflows (Josh Bressers <bressers@...hat.com>)

May 10 (7 messages)

Re: CVE request: kernel: validate size of EFI GUID partition entries (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE request: kernel: validate size of EFI GUID partition entries (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: validate size of EFI GUID partition entries (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE request: kernel: validate size of EFI GUID partition entries (Timo Warns <warns@...-sense.de>)
CVE request: keepalived pid file permissions issue (Yves-Alexis Perez <corsac@...ian.org>)
Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (William Cohen <wcohen@...hat.com>)
Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo (William Cohen <wcohen@...hat.com>)

May 11 (4 messages)

Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by … (Huzaifa Sidhpurwala <huzaifas@...hat.co…)
Re: CVE request : client-side file creation via XSLT in Webkit (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
[security-vendor] Re: Closed list ("Zhao, Zhenfeng" <Zhenfeng.Zhao@...driver.com>)

May 16 (11 messages)

Multiple libraries privilege checking (Sebastian Krahmer <krahmer@...e.de>)
CVE Request -- pmake -- Use of insecure temporary file for 'depend' target (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Closed list (Jan Lieskovsky <jlieskov@...hat.com>)
CVE requests; issues fixed in MySQL 5.1.52 (Vincent Danen <vdanen@...hat.com>)
Re: Closed list (Solar Designer <solar@...nwall.com>)
Re: Multiple libraries privilege checking (Solar Designer <solar@...nwall.com>)
Re: CVE request: keepalived pid file permissions issue (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- pmake -- Use of insecure temporary file for 'depend' target (Josh Bressers <bressers@...hat.com>)
CVE request: polarssl (Vincent Danen <vdanen@...hat.com>)
CVE request: DoS in tor (Vincent Danen <vdanen@...hat.com>)
Re: Multiple libraries privilege checking ("Dmitry V. Levin" <ldv@...linux.org>)

May 17 (15 messages)

CVE request: nbd-server ("Thijs Kinkhorst" <thijs@...ian.org>)
CVE Request -- Cyrus-IMAP STARTTLS issue -- [was: Re: pure-ftpd STARTTLS command injection / new CVE?] (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Closed list (Tomas Hoger <thoger@...hat.com>)
Re: Closed list (Tomas Hoger <thoger@...hat.com>)
Re: Multiple libraries privilege checking (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE request : client-side file creation via XSLT in Webkit (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: CVE request: nbd-server (Vincent Danen <vdanen@...hat.com>)
Re: Closed list (Oracle Security Alerts <secalert_us@...cle.com>)
Re: CVE request: nbd-server (Wouter Verhelst <w@...r.be>)
Re: CVE requests; issues fixed in MySQL 5.1.52 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: nbd-server (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: polarssl (Josh Bressers <bressers@...hat.com>)
Re: CVE request: DoS in tor (Josh Bressers <bressers@...hat.com>)
Re: CVE request: nbd-server (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Cyrus-IMAP STARTTLS issue -- [was: Re: pure-ftpd STARTTLS command injection / new CVE?] (Josh Bressers <bressers@...hat.com>)

May 18 (13 messages)

CVE request: kernel: net: ip_expire() must revalidate route (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: net: ip_expire() must revalidate route (Josh Bressers <bressers@...hat.com>)
Re: Multiple libraries privilege checking (yersinia <yersinia.spiros@...il.com>)
Dovecot releases (Henri Salo <henri@...v.fi>)
Re: Multiple libraries privilege checking (Solar Designer <solar@...nwall.com>)
CVE requests: ffmpeg/widelands/jifty::db/lilo/libpcap (Moritz Muehlenhoff <jmm@...ian.org>)
[klibc] CVE request: klibc: ipconfig sh script with unescaped DHCP options (maximilian attems <max@...o.at>)
Re: [klibc] CVE request: klibc: ipconfig sh script with unescaped DHCP options (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: [klibc] CVE request: klibc: ipconfig sh script with unescaped DHCP options (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Multiple libraries privilege checking (Solar Designer <solar@...nwall.com>)
Re: [klibc] CVE request: klibc: ipconfig sh script with unescaped DHCP options (maximilian attems <max@...o.at>)
CVE request: Several Moodle issues (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE request: Several Moodle issues (Josh Bressers <bressers@...hat.com>)

May 19 (11 messages)

CVE Request: viewvc DoS (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE-2011-1751 qemu: acpi_piix4: missing hotplug check during device removal (Petr Matousek <pmatouse@...hat.com>)
Re: Dovecot releases (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE requests; issues fixed in MySQL 5.1.52 (Henri Salo <henri@...v.fi>)
CVE request: DoS in apr due to CVE-2011-0419 fix (Vincent Danen <vdanen@...hat.com>)
Re: Dovecot releases (Josh Bressers <bressers@...hat.com>)
Re: [klibc] CVE request: klibc: ipconfig sh script with unescaped DHCP options (Josh Bressers <bressers@...hat.com>)
Re: Dovecot releases (Henri Salo <henri@...v.fi>)
Re: CVE Request: viewvc DoS (Josh Bressers <bressers@...hat.com>)
Re: CVE request: DoS in apr due to CVE-2011-0419 fix (Vincent Danen <vdanen@...hat.com>)
Re: CVE requests: ffmpeg/widelands/jifty::db/lilo/libpcap (Josh Bressers <bressers@...hat.com>)

May 20 (4 messages)

Re: CVE requests: ffmpeg/widelands/jifty::db/lilo/libpcap (Ludwig Nussel <ludwig.nussel@...e.de>)
systemtap divide-by-zero issues (CVE-2011-1769, CVE-2011-1781) (Tomas Hoger <thoger@...hat.com>)
CVE Request: exim STARTTLS fix (Marcus Meissner <meissner@...e.de>)
CVE Request: GeoIP Directory traversal weakness in geoipupdate (Anthon Pang <anthon.pang@...il.com>)

May 21 (1 message)

Re: CVE requests: ffmpeg/widelands/jifty::db/lilo/libpcap (Moritz Muehlenhoff <jmm@...ian.org>)

May 22 (1 message)

CVE Request: Webmin Local Privilege Escalation Vulnerability (Javier Bassi <javierbassi@...il.com>)

May 23 (1 message)

Re: Multiple libraries privilege checking (Sebastian Krahmer <krahmer@...e.de>)

May 24 (11 messages)

CVE request: PHP socket_connect() - stack buffer overflow (Felipe Pena <felipensp@...il.com>)
CVE Request -- Zend Framework -- SQL injection when using PDO_MySql (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request : client-side file creation via XSLT in Webkit (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
CVE Request -- phpMyAdmin -- PMASA-2011-3 & PMASA-2011-4 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request: exim STARTTLS fix (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: exim STARTTLS fix (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: Webmin Local Privilege Escalation Vulnerability (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: exim STARTTLS fix (Michael Tokarev <mjt@....msk.ru>)
Re: CVE request: PHP socket_connect() - stack buffer overflow (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Zend Framework -- SQL injection when using PDO_MySql (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- phpMyAdmin -- PMASA-2011-3 & PMASA-2011-4 (Josh Bressers <bressers@...hat.com>)

May 25 (2 messages)

CVE Request: Post Revolution multiple security vulnerabilities (Javier Bassi <javierbassi@...il.com>)
list archive (Solar Designer <solar@...nwall.com>)

May 26 (4 messages)

CVE Request -- syslog-ng -- Possible DoS (Szalay Attila <sasa@...abit.hu>)
Re: Closed list (akuster <akuster@...sta.com>)
Re: Closed list (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Closed list (akuster <akuster@...sta.com>)

May 28 (1 message)

Re: Closed list (Miklos Vajna <vmiklos@...galware.org>)

May 29 (1 message)

CVE request: movabletype-opensource (Steffen Joeris <steffen.joeris@...lelinux.de>)

May 30 (2 messages)

CVE request for fetchmail STARTTLS hang (Denial of Service) (Matthias Andree <matthias.andree@....de>)
CVE request: libgnomesu privilege escalation (Sebastian Krahmer <krahmer@...e.de>)

May 31 (20 messages)

CVE-2011-1763 kernel: xen: improper upper boundary check in get_free_port() function (Eugene Teo <eugene@...hat.com>)
CVE request: multiple libraries getenv() misuse (Sebastian Krahmer <krahmer@...e.de>)
CVE request: openssl timing attack (Thomas Biege <thomas@...e.de>)
CVE request: firefox doesn't (re)validate certificates when loading HTTPS page (Thomas Biege <thomas@...e.de>)
CVE request: libxml vulnerability and interesting integer issues (Thomas Biege <thomas@...e.de>)
CVE request: NetworkManager-openvpn logs cert password (Thomas Biege <thomas@...e.de>)
Re: CVE request: NetworkManager-openvpn logs cert password (Josh Bressers <bressers@...hat.com>)
Re: CVE request: libxml vulnerability and interesting integer issues (Josh Bressers <bressers@...hat.com>)
Re: CVE request: firefox doesn't (re)validate certificates when loading HTTPS page (Josh Bressers <bressers@...hat.com>)
Re: CVE request: openssl timing attack (Josh Bressers <bressers@...hat.com>)
Re: CVE request: libgnomesu privilege escalation (Josh Bressers <bressers@...hat.com>)
Re: CVE request for fetchmail STARTTLS hang (Denial of Service) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: movabletype-opensource (Josh Bressers <bressers@...hat.com>)
Re: CVE request: firefox doesn't (re)validate certificates when loading HTTPS page (Reed Loden <reed@...dloden.com>)
Re: CVE Request -- syslog-ng -- Possible DoS (Josh Bressers <bressers@...hat.com>)
Re: CVE Request: Post Revolution multiple security vulnerabilities (Josh Bressers <bressers@...hat.com>)
Re: CVE request for fetchmail STARTTLS hang (Denial of Service) (Matthias Andree <matthias.andree@....de>)
Re: CVE request: firefox doesn't (re)validate certificates when loading HTTPS page (Reed Loden <reed@...dloden.com>)
CVE request for Wireshark 1.4.5 TCP DoS issue (Kurt Seifried <kurt@...fried.org>)
CVE request for Wireshark 1.4.6/1.2.16 Multiple DoS issues (Kurt Seifried <kurt@...fried.org>)

159 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.