oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2012/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 1
² 1	³ 4	⁴ 3	⁵ 1	⁶ 11	⁷	⁸ 1
⁹ 4	¹⁰ 19	¹¹ 23	¹² 5	¹³ 5	¹⁴ 2	¹⁵
¹⁶ 6	¹⁷ 14	¹⁸ 1	¹⁹ 6	²⁰ 1	²¹	²²
²³ 2	²⁴ 5	²⁵ 1	²⁶ 6	²⁷ 6	²⁸ 7	²⁹
³⁰ 7	³¹ 8

Messages by day:

July 1 (1 message)

Re: ScriptFu Server Buffer Overflow in GIMP <= 2.6 (mancha@....hush.com)

July 2 (1 message)

CVE #'s for WordPress 3.4.1 release (Kurt Seifried <kseifried@...hat.com>)

July 3 (4 messages)

CVE Request: Stability fixes in UDF Logical Volume Descriptor handling (Marcus Meissner <meissner@...e.de>)
[OSSA 2012-008] Arbitrary file injection/corruption through directory traversal issues (CVE-2012-3360, CVE-2012-3361) (Thierry Carrez <thierry@...nstack.org>)
Re: CVE Request: Stability fixes in UDF Logical Volume Descriptor handling (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Stability fixes in UDF Logical Volume Descriptor handling (Timo Warns <warns@...-sense.de>)

July 4 (3 messages)

CVE Request -- kernel: epoll: can leak file descriptors when returning -ELOOP (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- kernel: epoll: can leak file descriptors when returning -ELOOP (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Stability fixes in UDF Logical Volume Descriptor handling (Kurt Seifried <kseifried@...hat.com>)

July 5 (1 message)

Three CVE requests: at-spi2-atk, as31, naxsi (Moritz Muehlenhoff <jmm@...ian.org>)

July 6 (11 messages)

CVE request: VLC / Asterisk (Moritz Muehlenhoff <jmm@...ian.org>)
Re: CVE request: VLC / Asterisk (Kurt Seifried <kseifried@...hat.com>)
Re: Three CVE requests: at-spi2-atk, as31, naxsi (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Asterisk (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Asterisk (cve-assign@...re.org)
Re: CVE request: Asterisk ("Matthew Jordan" <mjordan@...ium.com>)
CVE Request: sblim-sfcb: insecure LD_LIBRARY_PATH usage (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: sblim-sfcb: insecure LD_LIBRARY_PATH usage (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Stability fixes in UDF Logical Volume Descriptor handling (Marcus Meissner <meissner@...e.de>)
CVE Request: XSS in a Mono System.web error page (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: XSS in a Mono System.web error page (Kurt Seifried <kseifried@...hat.com>)

July 8 (1 message)

Re: CVE #'s for WordPress 3.4.1 release (Kurt Seifried <kseifried@...hat.com>)

July 9 (4 messages)

CVE Request -- dnsmasq: When being run by libvirt open DNS proxy (reachable out-of the virtual network set for the particu… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-2012-3881 RTG and RTG2: 95.php/rtg.php/view.php SQL injection (cve-assign@...re.org)
Re: CVE Request -- dnsmasq: When being run by libvirt open DNS proxy (reachable out-of the virtual network set for the par… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-request: Basilic 1.5.14 diff.php remote code execution vulnerability (Henri Salo <henri@...v.fi>)

July 10 (19 messages)

Re: CVE-request: Basilic 1.5.14 diff.php remote code execution vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Stability fixes in UDF Logical Volume Descriptor handling (Kurt Seifried <kseifried@...hat.com>)
ecryptfs headsup (Sebastian Krahmer <krahmer@...e.de>)
libdbus hardening (Sebastian Krahmer <krahmer@...e.de>)
Re: libdbus hardening (Florian Weimer <fweimer@...hat.com>)
Re: libdbus hardening (Solar Designer <solar@...nwall.com>)
Re: libdbus hardening (Florian Weimer <fweimer@...hat.com>)
Re: libdbus hardening (yersinia <yersinia.spiros@...il.com>)
Re: libdbus hardening (Solar Designer <solar@...nwall.com>)
Re: ecryptfs headsup (Kurt Seifried <kseifried@...hat.com>)
Re: libdbus hardening (Sebastian Krahmer <krahmer@...e.de>)
Re: libdbus hardening (Sebastian Krahmer <krahmer@...e.de>)
Re: ecryptfs headsup (Sebastian Krahmer <krahmer@...e.de>)
Re: libdbus hardening (Solar Designer <solar@...nwall.com>)
Re: ecryptfs headsup (Marcus Meissner <meissner@...e.de>)
Re: libdbus hardening (Sebastian Krahmer <krahmer@...e.de>)
Re: libdbus hardening (Solar Designer <solar@...nwall.com>)
Re: libdbus hardening (Simon McVittie <smcv@...ian.org>)
Re: ecryptfs headsup (Dan Rosenberg <dan.j.rosenberg@...il.com>)

July 11 (23 messages)

Openjpeg: heap-buffer overflow when processing JPEG2000 image files (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: ecryptfs headsup (Tyler Hicks <tyhicks@...onical.com>)
Re: ecryptfs headsup (Tyler Hicks <tyhicks@...onical.com>)
Re: libdbus hardening (Sebastian Krahmer <krahmer@...e.de>)
CVE request: glibc formatted printing vulnerabilities (Stefan Cornelius <scorneli@...hat.com>)
CVE-request: plow buffer overflow vulnerability (Henri Salo <henri@...v.fi>)
Re: libdbus hardening (Florian Weimer <fweimer@...hat.com>)
Re: libdbus hardening (Solar Designer <solar@...nwall.com>)
Re: ecryptfs headsup (Dustin Kirkland <dustin.kirkland@...zang.com>)
Re: libdbus hardening (yersinia <yersinia.spiros@...il.com>)
CVE Request: Overflow fix in bash 4.2 patch 33 (Marcus Meissner <meissner@...e.de>)
Re: CVE Request for Drupal contributed modules (Greg Knaddison <greg.knaddison@...uia.com>)
[OSSA 2012-009] Scheduler denial of service through scheduler_hints (CVE-2012-3371) (Thierry Carrez <thierry@...nstack.org>)
Re: Fwd: New Security Vulnerabilities in Puppet (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Overflow fix in bash 4.2 patch 33 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: plow buffer overflow vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: glibc formatted printing vulnerabilities (Kurt Seifried <kseifried@...hat.com>)
Re: ecryptfs headsup (Kurt Seifried <kseifried@...hat.com>)
Re: Re: ecryptfs headsup (Tyler Hicks <tyhicks@...onical.com>)
Re: CVE request: glibc formatted printing vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Re: Fwd: New Security Vulnerabilities in Puppet (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Overflow fix in bash 4.2 patch 33 (Henri Salo <henri@...v.fi>)
Re: Re: ecryptfs headsup (Kurt Seifried <kseifried@...hat.com>)

July 12 (5 messages)

Re: Re: ecryptfs headsup (Tyler Hicks <tyhicks@...onical.com>)
Re: CVE request: glibc formatted printing vulnerabilities (Stefan Cornelius <scorneli@...hat.com>)
Re: CVE Request: Overflow fix in bash 4.2 patch 33 (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: Overflow fix in bash 4.2 patch 33 (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE Request -- dnsmasq: When being run by libvirt open DNS proxy (reachable out-of the virtual network set for the… (Kurt Seifried <kseifried@...hat.com>)

July 13 (5 messages)

GLPI 0.83.2 CVE-2012-4002 CSRF and CVE-2012-4003 XSS (cve-assign@...re.org)
[dan@...eharvesters.com: [Libexif-devel] libexif project security advisory July 12, 2012] (Marcus Meissner <meissner@...e.de>)
CVE Request: KDE Pim (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE Request: KDE Pim (Kurt Seifried <kseifried@...hat.com>)
Re: Re: ecryptfs headsup (Dustin Kirkland <dustin.kirkland@...zang.com>)

July 14 (2 messages)

Re: Re: ecryptfs headsup ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: Re: ecryptfs headsup ("Jason A. Donenfeld" <Jason@...c4.com>)

July 16 (6 messages)

Re: Re: ecryptfs headsup (Sebastian Krahmer <krahmer@...e.de>)
Re: Re: ecryptfs headsup (Justin Ossevoort <justin@...ernetionals.nl>)
Re: CVE Request: KDE Pim (Vincent Danen <vdanen@...hat.com>)
CVE id request: libjs-swfupload (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: libjs-swfupload (Kurt Seifried <kseifried@...hat.com>)
Re: CVE id request: libjs-swfupload (Nico Golde <oss-security+ml@...lde.de>)

July 17 (14 messages)

Moodle security notifications public (Michael de Raadt <michaeld@...dle.com>)
Re: CVE id request: libjs-swfupload (Kurt Seifried <kseifried@...hat.com>)
libjpeg-turbo: Heap-based buffer overflow when decompressing corrupt JPEG images (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request: KDE Pim (laurent Montel <montel@....org>)
Re: CVE id request: libjs-swfupload (Nico Golde <oss-security+ml@...lde.de>)
Re: libdbus hardening (Solar Designer <solar@...nwall.com>)
Re: libdbus hardening (Florian Weimer <fweimer@...hat.com>)
Re: CVE Request: KDE Pim (David Faure <faure@....org>)
Re: CVE Request: KDE Pim (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request: KDE Pim (Vincent Danen <vdanen@...hat.com>)
Re: CVE Request: KDE Pim (Kurt Seifried <kseifried@...hat.com>)
Re: CVE id request: libjs-swfupload (Kurt Seifried <kseifried@...hat.com>)
Re: CVE id request: libjs-swfupload (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request: KDE Pim (David Faure <faure@....org>)

July 18 (1 message)

Re: CVE id request: libjs-swfupload (Kurt Seifried <kseifried@...hat.com>)

July 19 (6 messages)

tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request: quota: incorrect use of tcp_wrappers (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer (Henri Salo <henri@...v.fi>)
Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: CVE Request: quota: incorrect use of tcp_wrappers (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-4024 and CVE-2012-4025: Squashfs overflows (cve-assign@...re.org)

July 20 (1 message)

CVE for JBOSS EAP 5.0(twiddle and jmx invocations) ? (yersinia <yersinia.spiros@...il.com>)

July 23 (2 messages)

Re: CVE for JBOSS EAP 5.0(twiddle and jmx invocations) ? (David Jorm <djorm@...hat.com>)
Re: CVE for JBOSS EAP 5.0(twiddle and jmx invocations) ? (Kurt Seifried <kseifried@...hat.com>)

July 24 (5 messages)

Wireshark before 1.8.1 (etc.) CVE-2012-4048 CVE-2012-4049 (cve-assign@...re.org)
Re: Wireshark before 1.8.1 (etc.) CVE-2012-4048 CVE-2012-4049 (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015) (Henri Salo <henri@...v.fi>)
Re: CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images (Kurt Seifried <kseifried@...hat.com>)

July 25 (1 message)

Re: libdbus hardening (Florian Weimer <fweimer@...hat.com>)

July 26 (6 messages)

Re: libdbus hardening (Simon McVittie <smcv@...ian.org>)
Re: libdbus hardening (yersinia <yersinia.spiros@...il.com>)
CVE Request -- kernel: recv{from,msg}() on an rds socket can leak kernel memory (Petr Matousek <pmatouse@...hat.com>)
Xen Security Advisory 10 - HVM guest user mode MMIO emulation DoS (Xen.org security team <security@....org>)
Re: CVE Request -- kernel: recv{from,msg}() on an rds socket can leak kernel memory (Kurt Seifried <kseifried@...hat.com>)
Ruby on Rails DoS Vulnerability in authenticate_or_request_with_http_digest (CVE-2012-3424) (Aaron Patterson <tenderlove@...y-lang.org>)

July 27 (6 messages)

Re: Xen Security Advisory 10 - HVM guest user mode MMIO emulation DoS (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015) (Kurt Seifried <kseifried@...hat.com>)
Xen Security Advisory 10 (CVE-2012-3432) - HVM user mode MMIO emul DoS (Xen.org security team <security@....org>)
[OSSA 2012-010] Various Keystone token expiration issues (CVE-2012-3426) (Thierry Carrez <thierry@...nstack.org>)
CVE request for OpenTTD (frosch <frosch@...nttd.org>)
Zabbix SQL injection flaw (CVE request) (Vincent Danen <vdanen@...hat.com>)

July 28 (7 messages)

Quick question regarding CVEs (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for OpenTTD (Kurt Seifried <kseifried@...hat.com>)
Re: Zabbix SQL injection flaw (CVE request) (Kurt Seifried <kseifried@...hat.com>)
Re: Quick question regarding CVEs (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request for OpenTTD (frosch <frosch@...nttd.org>)
ocPortal 7.1.5 <= | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: CVE request for OpenTTD (Kurt Seifried <kseifried@...hat.com>)

July 30 (7 messages)

ImageMagick Magick_png_malloc() / GraphicsMagick png_IM_malloc() size issue (Kurt Seifried <kseifried@...hat.com>)
Re: libdbus hardening (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: libdbus hardening (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: libdbus hardening (Florian Weimer <fweimer@...hat.com>)
Re: libdbus hardening (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE Request: icinga sample db creation scripts (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: icinga sample db creation scripts (Kurt Seifried <kseifried@...hat.com>)

July 31 (8 messages)

CVE Request: Django 1.3.1 and 1.4.0 security issues (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Django 1.3.1 and 1.4.0 security issues (Kurt Seifried <kseifried@...hat.com>)
CVE request for Ushahidi (Robbie MacKay <robbie@...ahidi.com>)
CVE Request -- libvirt: crash in virTypedParameterArrayClear (Petr Matousek <pmatouse@...hat.com>)
Re: CVE request for OpenTTD (frosch <frosch@...nttd.org>)
Re: CVE request for Ushahidi (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- libvirt: crash in virTypedParameterArrayClear (Kurt Seifried <kseifried@...hat.com>)
RSGallery2 before 2.3.0 (etc.) CVE-2012-3554 CVE-2012-4071 (cve-assign@...re.org)

150 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.