oss-security mailing list - 2012/01

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2012/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 6
² 15	³ 20	⁴ 19	⁵ 16	⁶ 8	⁷ 3	⁸ 12
⁹ 10	¹⁰ 12	¹¹ 7	¹² 8	¹³ 10	¹⁴ 3	¹⁵ 12
¹⁶ 2	¹⁷ 16	¹⁸ 13	¹⁹ 27	²⁰ 30	²¹ 6	²² 6
²³ 6	²⁴ 12	²⁵ 3	²⁶ 18	²⁷ 13	²⁸ 4	²⁹
³⁰ 9	³¹ 7

Messages by day:

January 1 (6 messages)

Re: [oCERT-2011-003] multiple implementations denial-of-service via hash algorithm collision (Solar Designer <solar@...nwall.com>)
Re: CVE-request: Elxis CMS two XSS-vulnerabilities (Henri Salo <henri@...v.fi>)
speaking of DoS, openssh and dropbear (CVE-2006-1206) (Nico Golde <nion@...ian.org>)
Re: mpack 1.6 allows eavesdropping on mails sent by other users (Sebastian Pipping <sebastian@...ping.org>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Solar Designer <solar@...nwall.com>)
OpenSSL and *BSD *_Final context struct zeroization (was: weird crypt-sha* in DragonFly BSD) (Solar Designer <solar@...nwall.com>)

January 2 (15 messages)

Re: OpenBSD bcrypt error return (Solar Designer <solar@...nwall.com>)
Re: *BSD's DES-based crypt(3) treats all invalid salt chars as '.' (Solar Designer <solar@...nwall.com>)
Re: *BSD's DES-based crypt(3) treats all invalid salt chars as '.' (Solar Designer <solar@...nwall.com>)
OpenBSD bcrypt 8-bit key_len wraparound (Solar Designer <solar@...nwall.com>)
Re: weird crypt-sha* in DragonFly BSD (Solar Designer <solar@...nwall.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) ("Mike O'Connor" <mjo@...o.mi.org>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Solar Designer <solar@...nwall.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Kurt Seifried <kseifrie@...hat.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Eitan Adler <lists@...anadler.com>)
Re: Disputing CVE-2011-4122 (Oswald Buddenhagen <ossi@....org>)
Re: Disputing CVE-2011-4122 (Solar Designer <solar@...nwall.com>)
Two CVE requests (Moritz Muehlenhoff <jmm@...ian.org>)
CVE request: libfpx "Free_All_Memory()" Double-Free Vulnerability (Agostino Sarubbo <ago@...too.org>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Kurt Seifried <kseifrie@...hat.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Nico Golde <oss-security+ml@...lde.de>)

January 3 (20 messages)

Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Solar Designer <solar@...nwall.com>)
CVE-request: PHP Booking Calendar 10e XSS (Henri Salo <henri@...v.fi>)
Re: CVE-request: PHP Booking Calendar 10e XSS ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE-request: Symphony CMS Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (NS-11-008) (Netsparker Advisories <advisories@...itunasecurity.c…)
Re: CVE-request: PHP Booking Calendar 10e XSS (Henri Salo <henri@...v.fi>)
CVE request: maradns hash table collision cpu dos (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: maradns hash table collision cpu dos (Henri Salo <henri@...v.fi>)
Re: CVE request: maradns hash table collision cpu dos (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request: Security issue in backuppc (Moritz Mühlenhoff <jmm@...til.org>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Solar Designer <solar@...nwall.com>)
Closed list unsubscribe (Josh Bressers <bressers@...hat.com>)
Re: Two CVE requests (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE request: maradns hash table collision cpu dos (Kurt Seifried <kseifrie@...hat.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE Request: Security issue in backuppc (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE request: libfpx "Free_All_Memory()" Double-Free Vulnerability (Kurt Seifried <kseifrie@...hat.com>)
CVE-request: WordPress SQL injection and arbitrary code injection (2003) (Henri Salo <henri@...v.fi>)
CVE-request: Multiple e107 vulnerabilities (Henri Salo <henri@...v.fi>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Nico Golde <oss-security+ml@...lde.de>)
CVE request: XSS in wordpress 3.3 (Hanno Böck <hanno@...eck.de>)

January 4 (19 messages)

Re: CVE request: XSS in wordpress 3.3 (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE request: XSS in wordpress 3.3 (cve-assign@...re.org)
Re: CVE-request: Multiple e107 vulnerabilities (Kurt Seifried <kseifrie@...hat.com>)
CVE-2011-4858 confusion (Sebastian Krahmer <krahmer@...e.de>)
CVE request: ghostscript: system initialization file uncontrolled search path element (Ramon de C Valle <rcvalle@...hat.com>)
Re: CVE-2011-4858 confusion (cve-assign@...re.org)
Re: CVE request: ghostscript: system initialization file uncontrolled search path element (Kurt Seifried <kseifrie@...hat.com>)
CVE request: Pidgin (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE Request: Security issue in backuppc (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE Request: Security issue in backuppc ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: Re: CVE-2011-4858 confusion (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request: Security issue in backuppc (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE request: Pidgin (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE request: Pidgin ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE Request: Security issue in backuppc (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE-request: WordPress SQL injection and arbitrary code injection (2003) (Kurt Seifried <kseifrie@...hat.com>)
CVE Request -- kernel: futex: clear robust_list on execve (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- kernel: futex: clear robust_list on execve (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE Request -- kernel: futex: clear robust_list on execve (Greg KH <greg@...ah.com>)

January 5 (16 messages)

CVE request: TORQUE Munge Authentication Security Bypass (Agostino Sarubbo <ago@...too.org>)
Re: Re: CVE-2011-4858 confusion (Mark Thomas <markt@...che.org>)
CVE-request: WordPress plugin Adminimize XSS (Henri Salo <henri@...v.fi>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (David Hicks <d@...id.au>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (The Fungi <fungi@...goth.org>)
Re: CVE Request -- kernel: futex: clear robust_list on execve (akuster <akuster@...sta.com>)
Re: CVE Request -- kernel: futex: clear robust_list on execve (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- kernel: futex: clear robust_list on execve (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request: TORQUE Munge Authentication Security Bypass (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE-request: WordPress plugin Adminimize XSS (Kurt Seifried <kseifrie@...hat.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Kurt Seifried <kseifrie@...hat.com>)
CVE Requests for FFmpeg 0.9.1 (Michael Niedermayer <michaelni@....at>)
Re: CVE Requests for FFmpeg 0.9.1 (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE Requests for FFmpeg 0.9.1 ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE Requests for FFmpeg 0.9.1 (Michael Niedermayer <michaelni@....at>)
Re: CVE Requests for FFmpeg 0.9.1 (Michael Niedermayer <michaelni@....at>)

January 6 (8 messages)

Re: CVE Requests for FFmpeg 0.9.1 (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE-request: WordPress SQL injection and arbitrary code injection (2003) (Henri Salo <henri@...v.fi>)
Re: CVE-request: WordPress SQL injection and arbitrary code injection (2003) (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE-2011-4858 confusion (cve-assign@...re.org)
CVE request: redmine issues (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE request: wordpress plugin timthumb before 2.0 remote code execution (Hanno Böck <hanno@...eck.de>)
Re: CVE request: redmine issues (Kurt Seifried <kseifrie@...hat.com>)
CVE Request for spamdyke "STARTTLS" Plaintext Injection Vulnerability (Michael Harrison <n0idx80@...il.com>)

January 7 (3 messages)

Re: CVE Request for spamdyke "STARTTLS" Plaintext Injection Vulnerability (Kurt Seifried <kseifrie@...hat.com>)
CVE request for OpenTTD (Rubidium <rubidium@...nttd.org>)
Malicious devices & vulnerabilties (Xi Wang <xi.wang@...il.com>)

January 8 (12 messages)

Re: Malicious devices & vulnerabilties (Florian Weimer <fw@...eb.enyo.de>)
CVE request: znc (Moritz Muehlenhoff <jmm@...ian.org>)
New Intrusion Detection Evaluation Dataset (Hadi Shiravi <hadishiravi@...il.com>)
Re: Malicious devices & vulnerabilties (Greg KH <greg@...ah.com>)
Re: Malicious devices & vulnerabilties (Eitan Adler <lists@...anadler.com>)
Re: Malicious devices & vulnerabilties (Eugene Teo <eugene@...hat.com>)
Re: Malicious devices & vulnerabilties (Xi Wang <xi.wang@...il.com>)
Re: Malicious devices & vulnerabilties (Eitan Adler <lists@...anadler.com>)
Re: Malicious devices & vulnerabilties (Xi Wang <xi.wang@...il.com>)
Re: Malicious devices & vulnerabilties (Hanno Böck <hanno@...eck.de>)
Re: Malicious devices & vulnerabilties (Xi Wang <xi.wang@...il.com>)
Re: Malicious devices & vulnerabilties (Alistair Crooks <agc@...bsd.org>)

January 9 (10 messages)

Re: Malicious devices & vulnerabilties (Eugene Teo <eugene@...hat.com>)
Re: Malicious devices & vulnerabilties (Kurt Seifried <kseifrie@...hat.com>)
Re: CVE request: znc (Henri Salo <henri@...v.fi>)
Re: CVE request: znc (Henri Salo <henri@...v.fi>)
Re: Malicious devices & vulnerabilties (Vasiliy Kulikov <segoon@...nwall.com>)
Re: Malicious devices & vulnerabilties (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request for OpenTTD (Kurt Seifried <kseifried@...hat.com>)
Re: Malicious devices & vulnerabilties (Florian Weimer <fw@...eb.enyo.de>)
Re: Malicious devices & vulnerabilties (Kurt Seifried <kseifried@...hat.com>)
Re: Malicious devices & vulnerabilties (Alistair Crooks <agc@...src.org>)

January 10 (12 messages)

Re: CVE request: znc (Kurt Seifried <kseifried@...hat.com>)
CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability (Chong Yidong <cyd@....org>)
Re: Re: CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Eugene Teo <eugene@...hat.com>)
Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Kurt Seifried <kseifried@...hat.com>)
CVE request: kernel: xfs heap overflow (Xi Wang <xi.wang@...il.com>)
Re: CVE request: kernel: xfs heap overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: kernel: xfs heap overflow (Kurt Seifried <kseifried@...hat.com>)
glib2 hash dos oCert-2011-003 (Kurt Seifried <kseifried@...hat.com>)

January 11 (7 messages)

CVE request: simpleSAMLphp 1.8.2 cross site scripting (Thijs Kinkhorst <thijs@...ian.org>)
CVE request - kernel: drm: integer overflow in drm_mode_dirtyfb_ioctl() (Eugene Teo <eugene@...hat.com>)
CVE request: Wireshark multiple vulnerabilities (Agostino Sarubbo <ago@...too.org>)
CVE request -- kernel: kvm: syscall instruction induced guest panic (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability (David Engster <deng@...domsample.de>)
Re: CVE request: simpleSAMLphp 1.8.2 cross site scripting (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Wireshark multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)

January 12 (8 messages)

Re: CVE request - kernel: drm: integer overflow in drm_mode_dirtyfb_ioctl() (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request -- kernel: kvm: syscall instruction induced guest panic (Kurt Seifried <kseifried@...hat.com>)
Re: speaking of DoS, openssh and dropbear (CVE-2006-1206) (Solar Designer <solar@...nwall.com>)
Re: CVE request: Wireshark multiple vulnerabilities ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: Wireshark multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
CVE request: Mediawiki (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE request: Wireshark multiple vulnerabilities ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: Mediawiki (Kurt Seifried <kseifried@...hat.com>)

January 13 (10 messages)

details about Tahoe-LAFS security problem #1654 ("Zooko Wilcox-O'Hearn" <zooko@...ko.com>)
Re: CVE request: Wireshark multiple vulnerabilities (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Secunia looking for Linux Vulnerability Specialist (Henri Salo <henri@...v.fi>)
CVE affected for PHP 5.3.9 ? (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: CVE affected for PHP 5.3.9 ? (Kurt Seifried <kseifried@...hat.com>)
Re: CVE affected for PHP 5.3.9 ? (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: CVE affected for PHP 5.3.9 ? (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for OpenTTD (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for OpenTTD - use CVE-2012-0049! (Kurt Seifried <kseifried@...hat.com>)
Re: CVE affected for PHP 5.3.9 ? (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)

January 14 (3 messages)

Re: CVE affected for PHP 5.3.9 ? (Kurt Seifried <kseifried@...hat.com>)
Re: CVE affected for PHP 5.3.9 ? (Ignacio Espinosa <osu@...dvis.net>)
Re: CVE affected for PHP 5.3.9 ? (Kurt Seifried <kseifried@...hat.com>)

January 15 (12 messages)

Re: CVE affected for PHP 5.3.9 ? (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: CVE affected for PHP 5.3.9 ? (Kurt Seifried <kseifried@...hat.com>)
CVE-request: WordPress 3.1.1 (Henri Salo <henri@...v.fi>)
Re: CVE-request: WordPress 3.1.1 (Hanno Böck <hanno@...eck.de>)
Re: CVE-request: WordPress 3.1.1 (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE-request: WordPress 3.1.1 (Henri Salo <henri@...v.fi>)
CVE Request for spamdyke "STARTTLS" Plaintext (Agostino Sarubbo <ago@...too.org>)
ANNOUNCING Tahoe, the Least-Authority File System, v1.9.1 ("Zooko Wilcox-O'Hearn" <zooko@...ko.com>)
CVE-request: NGS00109 remote code execution in ImpressPages CMS (Henri Salo <henri@...v.fi>)
Re: CVE affected for PHP 5.3.9 ? (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: details about Tahoe-LAFS security problem #1654 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Wireshark multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)

January 16 (2 messages)

CVE request: Jenkins (Moritz Muehlenhoff <jmm@...ian.org>)
Re: weird crypt-sha* in DragonFly BSD (Solar Designer <solar@...nwall.com>)

January 17 (16 messages)

Re: CVE request: Wireshark multiple vulnerabilities (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
gpw password generator giving short password at low rate (Yves-Alexis Perez <corsac@...ian.org>)
Re: gpw password generator giving short password at low rate (Henri Salo <henri@...v.fi>)
Re: gpw password generator giving short password at low rate (Yves-Alexis Perez <corsac@...ian.org>)
pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
CVE Request: overlayfs (Marc Deslauriers <marc.deslauriers@...onical.com>)
CVE-request: golismero symlink vulnerability (Henri Salo <henri@...v.fi>)
Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
Re: Re: pwgen: non-uniform distribution of passwords (Henri Salo <henri@...v.fi>)
Re: CVE-request: golismero symlink vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: overlayfs (Kurt Seifried <kseifried@...hat.com>)
Re: Re: pwgen: non-uniform distribution of passwords (Kurt Seifried <kseifried@...hat.com>)
Re: gpw password generator giving short password at low rate (Kurt Seifried <kseifried@...hat.com>)
Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
Re: Re: pwgen: non-uniform distribution of passwords ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: gpw password generator giving short password at low rate ("Steven M. Christey" <coley@...-smtp.mitre.org>)

January 18 (13 messages)

CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Kurt Seifried <kseifried@...hat.com>)
Re: CVE affected for PHP 5.3.9 ? (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-0207 kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: Unused iocbs in a batch should not be accounted as active (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: Unused iocbs in a batch should not be accounted as active (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Wireshark multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php (Ronald van den Blink <oss-security@...urityview.nl>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Kees Cook <kees@...ntu.com>)
Re: CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: NGS00109 remote code execution in ImpressPages CMS (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: WordPress 3.1.1 (Kurt Seifried <kseifried@...hat.com>)

January 19 (27 messages)

Screen locking programs on Xorg 1.11 (Gu1 <gu1@...sortium-of-pwners.net>)
Re: Screen locking programs on Xorg 1.11 (Michael Gilbert <michael.s.gilbert@...il.com>)
CVE request: tucan insecure plugin update mechanism (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Eugene Teo <eugene@...hat.com>)
Re: CVE request: tucan insecure plugin update mechanism (Kurt Seifried <kseifried@...hat.com>)
Re: Screen locking programs on Xorg 1.11 (Kurt Seifried <kseifried@...hat.com>)
Re: Screen locking programs on Xorg 1.11 (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: mpack 1.6 allows eavesdropping on mails sent by other users (Sebastian Pipping <sebastian@...ping.org>)
Re: CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php (Ronald van den Blink <oss-security@...urityview.nl>)
Re: Screen locking programs on Xorg 1.11 (Sebastian Pipping <sebastian@...ping.org>)
Re: CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php (Ronald van den Blink <oss-security@...urityview.nl>)
Re: Screen locking programs on Xorg 1.11 (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE-request: WordPress 3.1.1 (Yves-Alexis Perez <corsac@...ian.org>)
Re: weird crypt-sha* in DragonFly BSD (Solar Designer <solar@...nwall.com>)
Re: CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php (Henri Salo <henri@...v.fi>)
CVE-2011-4924 assignment notification -- Zope2, Zope3: Incomplete upstream fix for CVE-2010-1104 issue (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE-2011-4924 assignment notification -- Zope2, Zope3: Incomplete upstream fix for CVE-2010-1104 issue (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE-2011-4924 assignment notification -- Zope2, Zope3: Incomplete upstream fix for CVE-2010-1104 issue (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE-2011-4924 assignment notification -- Zope2, Zope3: Incomplete upstream fix for CVE-2010-1104 issue (Jan-Wijbrand Kolman <janwijbrand@...il.com>)
Request for linux-distros@...openwall.org membership (John Johansen <john.johansen@...onical.com>)
Re: Request for linux-distros@...openwall.org membership (Jamie Strandboge <jamie@...onical.com>)
R: pwgen: non-uniform distribution of passwords (<valentino.angeletti@...l.com>)
Re: Screen locking programs on Xorg 1.11 (Florian Weimer <fw@...eb.enyo.de>)
Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
CVE request: usbmuxd 1.0.7 "receive_packet()" Buffer Overflow Vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: usbmuxd 1.0.7 "receive_packet()" Buffer Overflow Vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: Screen locking programs on Xorg 1.11 (Tim Zingelman <tez@...bsd.org>)

January 20 (30 messages)

Re: Screen locking programs on Xorg 1.11 (Gu1 <gu1@...sortium-of-pwners.net>)
Re: CVE request: Wireshark multiple vulnerabilities (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Potential security issues fixed in PHP 5.3.9 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Wireshark multiple vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: Re: pwgen: non-uniform distribution of passwords (Michael Niedermayer <michaelni@....at>)
Re: CVE request - Batavi 1.2.1 Fixes Blind SQL Injection vulnerability in boxToReload parameter of ajax.php (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for spamdyke "STARTTLS" Plaintext (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Jenkins (Kurt Seifried <kseifried@...hat.com>)
pdf attacks vectors (Alexander Pletnev <pletnev.rusalex@...il.com>)
CVE request: spamdyke buffer overflow vulnerability (Agostino Sarubbo <ago@...too.org>)
Re: Request for linux-distros@...openwall.org membership (Solar Designer <solar@...nwall.com>)
distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
Re: Potential security issues fixed in PHP 5.3.9 (Pierre Joye <pierre.php@...il.com>)
Re: weird crypt-sha* in DragonFly BSD (Solar Designer <solar@...nwall.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Eugene Teo <eugene@...hat.com>)
CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing RTP (Jan Lieskovsky <jlieskov@...hat.com>)
Re: distros & linux-distros embargo period and message format (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing R… ("Steven M. Christey" <coley@...-smtp.mi…)
Re: CVE Request -- Asterisk AST-2012-001 / Remote DoS while processing crypto line for media stream with non-existing RTP (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: simpleSAMLphp 1.8.2 cross site scripting ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: distros & linux-distros embargo period and message format (Solar Designer <solar@...nwall.com>)
CVE request: moodle 2.2.1, 2.1.4, 2.0.7, 1.9.16 vulnerabilities (Vincent Danen <vdanen@...hat.com>)
Re: weird crypt-sha* in DragonFly BSD ("Samuel J. Greear" <sjg@...sjg.com>)
Re: pdf attacks vectors (Solar Designer <solar@...nwall.com>)
Re: weird crypt-sha* in DragonFly BSD ("Samuel J. Greear" <sjg@...sjg.com>)
Re: weird crypt-sha* in DragonFly BSD (Solar Designer <solar@...nwall.com>)
Re: pdf attacks vectors (Alexander Pletnev <pletnev.rusalex@...il.com>)
Re: pdf attacks vectors (Solar Designer <solar@...nwall.com>)
CVE request: smokeping XSS (Vincent Danen <vdanen@...hat.com>)
Re: Potential security issues fixed in PHP 5.3.9 (Kurt Seifried <kseifried@...hat.com>)

January 21 (6 messages)

Re: CVE request: smokeping XSS (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: spamdyke buffer overflow vulnerability (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- Horde IMP -- Multiple XSS flaws fixed in v5.0.18 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: pdf attacks vectors (Henri Salo <henri@...v.fi>)
Re: weird crypt-sha* in DragonFly BSD (Solar Designer <solar@...nwall.com>)
Re: CVE Request -- Horde IMP -- Multiple XSS flaws fixed in v5.0.18 (Kurt Seifried <kseifried@...hat.com>)

January 22 (6 messages)

Re: CVE request: moodle 2.2.1, 2.1.4, 2.0.7, 1.9.16 vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- Horde IMP -- Multiple XSS flaws fixed in v5.0.18 ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Solar Designer <solar@...nwall.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Solar Designer <solar@...nwall.com>)
Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)

January 23 (6 messages)

Re: distros & linux-distros embargo period and message format (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Eugene Teo <eugene@...hat.com>)
CVE id assignment dates (Solar Designer <solar@...nwall.com>)
Re: CVE id assignment dates ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE request: spamdyke buffer overflow vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: spamdyke buffer overflow vulnerability (Michael Harrison <n0idx80@...il.com>)

January 24 (12 messages)

Re: CVE id assignment dates (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling (Eugene Teo <eugene@...hat.com>)
Re: CVE id assignment dates (Kurt Seifried <kseifried@...hat.com>)
CVE request: bip buffer overflow (Luciano Bello <luciano@...ian.org>)
Re: CVE id assignment dates ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: CVE id assignment dates (Henri Salo <henri@...v.fi>)
CVE requests: Suhosin extension / as31 (Moritz Muehlenhoff <jmm@...ian.org>)
XSLT issue in MoinMoin (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: XSLT issue in MoinMoin (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: bip buffer overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE requests: Suhosin extension / as31 (Kurt Seifried <kseifried@...hat.com>)
Re: XSLT issue in MoinMoin (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)

January 25 (3 messages)

Fwd Joomla! Security News 2012-01 (Henri Salo <henri@...v.fi>)
Re: Fwd Joomla! Security News 2012-01 (Henri Salo <henri@...v.fi>)
TWSL2012-002: Multiple Vulnerabilities in WordPress (Henri Salo <henri@...v.fi>)

January 26 (18 messages)

Re: TWSL2012-002: Multiple Vulnerabilities in WordPress (Kurt Seifried <kseifried@...hat.com>)
Re: Fwd Joomla! Security News 2012-01 (Kurt Seifried <kseifried@...hat.com>)
Re: TWSL2012-002: Multiple Vulnerabilities in WordPress (Henri Salo <henri@...v.fi>)
Re: Fwd Joomla! Security News 2012-01 (Henri Salo <henri@...v.fi>)
CVE request: PostfixAdmin SQL injections and XSS (Christian Boltz <oss-securrity@...ltz.de>)
Request for CVE for Vulnerability in Tahoe-LAFS 1.9.0 (Patrick R McDonald <marlowe@...agonism.org>)
Re: Request for CVE for Vulnerability in Tahoe-LAFS 1.9.0 (Christian Hoffmann <christian@...fie.info>)
Re: Request for CVE for Vulnerability in Tahoe-LAFS 1.9.0 (Patrick R McDonald <marlowe@...agonism.org>)
Re: Request for CVE for Vulnerability in Tahoe-LAFS 1.9.0 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: PostfixAdmin SQL injections and XSS (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: PostfixAdmin SQL injections and XSS (Christian Boltz <oss-securrity@...ltz.de>)
Re: CVE request: PostfixAdmin SQL injections and XSS (Kurt Seifried <kseifried@...hat.com>)
CVE request: wicd writes sensitive information in log files (password, passphrase...) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: wicd writes sensitive information in log files (password, passphrase...) (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Kurt Seifried <kseifried@...hat.com>)
Re: Fwd Joomla! Security News 2012-01 (Kurt Seifried <kseifried@...hat.com>)
Re: XSLT issue in MoinMoin (Kurt Seifried <kseifried@...hat.com>)

January 27 (13 messages)

Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Marc Deslauriers <marc.deslauriers@...onica…)
testing pwqgen (Solar Designer <solar@...nwall.com>)
Subscribe to linux-distros (Ramon de C Valle <rcvalle@...hat.com>)
Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Yves-Alexis Perez <corsac@...ian.org>)
Re: CVE request: PostfixAdmin SQL injections and XSS (Christian Boltz <oss-securrity@...ltz.de>)
Re: Subscribe to linux-distros (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Yves-Alexis Perez <corsac@...ian.org>)
Re: Subscribe to linux-distros (Solar Designer <solar@...nwall.com>)
Re: Subscribe to linux-distros (Ramon de C Valle <rcvalle@...hat.com>)
Re: non-Linux advance notification list (Solar Designer <solar@...nwall.com>)
Re: non-Linux advance notification list (Solar Designer <solar@...nwall.com>)
Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Kurt Seifried <kseifried@...hat.com>)

January 28 (4 messages)

Re: non-Linux advance notification list (Stuart Henderson <sthen@...nbsd.org>)
Re: non-Linux advance notification list (Solar Designer <solar@...nwall.com>)
Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients (Kurt Seifried <kseifried@...hat.com>)
(maybe) CVE request: libvpx before 1.0 crasher (Hanno Böck <hanno@...eck.de>)

January 30 (9 messages)

Re: Fwd Joomla! Security News 2012-01 (Kurt Seifried <kseifried@...hat.com>)
Re: (maybe) CVE request: libvpx before 1.0 crasher (Kurt Seifried <kseifried@...hat.com>)
Re: Yubiserver package ships with pre-filled identities (Jonathan Wiltshire <jmw@...ian.org>)
Re: Re: Yubiserver package ships with pre-filled identities (Kurt Seifried <kseifried@...hat.com>)
Sudo format string vulnerability (CVE 2012-0809) (nicolas vigier <boklm@...s-attacks.org>)
Re: Yubiserver package ships with pre-filled identities ("Nanakos V. Chrysostomos" <nanakos@...ed-net.gr>)
Re: Re: Yubiserver package ships with pre-filled identities (Nanakos Chrysostomos <nanakos@...ed-net.gr>)
Re: Re: Yubiserver package ships with pre-filled identities (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Yubiserver package ships with pre-filled identities (Nanakos Chrysostomos <nanakos@...ed-net.gr>)

January 31 (7 messages)

Re: Re: Yubiserver package ships with pre-filled identities (Kurt Seifried <kseifried@...hat.com>)
gnusound 0.7.5 file name handling format string issue (Kurt Seifried <kseifried@...hat.com>)
Re: gnusound 0.7.5 file name handling format string issue (Kurt Seifried <kseifried@...hat.com>)
Re: Re: Yubiserver package ships with pre-filled identities (Nanakos Chrysostomos <nanakos@...ed-net.gr>)
Re: Re: Yubiserver package ships with pre-filled identities (Gian Piero Carrubba <gpiero@...rf.it>)
Mibew messenger multiple XSS (Henri Salo <henri@...v.fi>)
Re: Re: Yubiserver package ships with pre-filled identities ("Steven M. Christey" <coley@...-smtp.mitre.org>)

333 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.