oss-security mailing list - 2012/10

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2012/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 5	³ 10	⁴ 6	⁵ 6	⁶ 4	⁷ 4
⁸ 4	⁹ 4	¹⁰ 12	¹¹ 11	¹² 6	¹³ 1	¹⁴ 2
¹⁵ 1	¹⁶ 4	¹⁷ 15	¹⁸ 19	¹⁹ 4	²⁰ 2	²¹ 7
²² 1	²³ 6	²⁴ 3	²⁵ 2	²⁶ 5	²⁷ 1	²⁸ 3
²⁹ 18	³⁰ 16	³¹ 10

Messages by day:

October 2 (5 messages)

Re: CVE request - mcrypt buffer overflow flaw (Raphael Geissert <geissert@...ian.org>)
Re: CVE request - mcrypt buffer overflow flaw (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-3504: insecure temporary file usage in genkey perl script (Vincent Danen <vdanen@...hat.com>)
CVE Request: Ruby safe level bypasses (Tyler Hicks <tyhicks@...onical.com>)
Re: CVE request - mcrypt buffer overflow flaw (Raphael Geissert <geissert@...ian.org>)

October 3 (10 messages)

CVE Request: QT CRIME vulnerability (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE Request: QT CRIME vulnerability (Kurt Seifried <kseifried@...hat.com>)
CVE Rejection: CVE-2012-5239 - Wireshark DRDA dissector infinite loop (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request (minor) -- mc: Improper sanitization of MC_EXT_SELECTED variable when viewing multiple files (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request (minor) -- mc: Improper sanitization of MC_EXT_SELECTED variable when viewing multiple files (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Ruby safe level bypasses (Kurt Seifried <kseifried@...hat.com>)
Re: cgit: heap buffer overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Ruby safe level bypasses (Tyler Hicks <tyhicks@...onical.com>)
Re: CVE Request: Ruby safe level bypasses (Kurt Seifried <kseifried@...hat.com>)
CVE Request -- kernel: compat: SIOCGSTAMP/SIOCGSTAMPNS incorrect order of arguments to compat_put_time[val|spec] (Petr Matousek <pmatouse@...hat.com>)

October 4 (6 messages)

CVE Request for Drupal Contributed Modules (Joshua Brauer <joshua@...uerranch.com>)
Re: CVE Request -- kernel: compat: SIOCGSTAMP/SIOCGSTAMPNS incorrect order of arguments to compat_put_time[val|spec] (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request for Drupal Contributed Modules (Joshua Brauer <joshua@...uerranch.com>)
Re: CVE Request for Drupal Contributed Modules (Kurt Seifried <kseifried@...hat.com>)
CVE Request for Drupal Contributed Modules (Joshua Brauer <joshua@...uerranch.com>)

October 5 (6 messages)

CVE Request: html2ps (Marc Deslauriers <marc.deslauriers@...onical.com>)
CVE Request -- ruby (1.8.x with patched CVE-2011-1005): Incomplete fix for CVE-2011-1005 for NameError#to_s method when us… (Jan Lieskovsky <jlieskov@...hat.com>)
Security contact for scan-view component of clang (Tim Brown <timb@...-dimension.org.uk>)
Re: CVE Request -- ruby (1.8.x with patched CVE-2011-1005): Incomplete fix for CVE-2011-1005 for NameError#to_s method whe… (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: html2ps (Kurt Seifried <kseifried@...hat.com>)
CVE Request: Python keyring (Marc Deslauriers <marc.deslauriers@...onical.com>)

October 6 (4 messages)

CVE request: LetoDMS, more issues (Raphael Geissert <geissert@...ian.org>)
CVE request: piwigo XSS in password.php (Raphael Geissert <geissert@...ian.org>)
CVE-request for piwigo issues (second request) (Henri Salo <henri@...v.fi>)
password hashing (Solar Designer <solar@...nwall.com>)

October 7 (4 messages)

Re: CVE Request for Drupal Contributed Modules (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: html2ps (Moritz Muehlenhoff <jmm@...ian.org>)
CVE request: Joomla two XSS vulnerabilities fixed in 2.5.7 (Henri Salo <henri@...v.fi>)
Re: CVE request for Ushahidi (Robbie MacKay <robbie@...ahidi.com>)

October 8 (4 messages)

Re: password hashing (Josh Bressers <bressers@...hat.com>)
Re: CVE-request: SMF index.php msg parameter SQL-injection (2005) (Henri Salo <henri@...v.fi>)
[PRE-SA-2012-07] hostapd: Missing EAP-TLS message length validation (Timo Warns <Warns@...-Sense.DE>)
Re: CVE Request: QT CRIME vulnerability (cve-assign@...re.org)

October 9 (4 messages)

Claws-mail security issue in message processing (Jérôme Benoit <jerome.benoit@...nouille.com>)
Re: password hashing (Solar Designer <solar@...nwall.com>)
CVE Request -- claws-mail -- NULL pointer derefence while processing email content. (Jérôme Benoit <jerome.benoit@...nouille.com>)
Linux kernel stack memory content leak via UNAME26 (Kees Cook <keescook@...omium.org>)

October 10 (12 messages)

CVE Request: gitolite path traversal vulnerability (Eitan Adler <lists@...anadler.com>)
Re: CVE Request: gitolite path traversal vulnerability (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- claws-mail -- NULL pointer derefence while processing email content. (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Joomla two XSS vulnerabilities fixed in 2.5.7 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Joomla two XSS vulnerabilities fixed in 2.5.7 (Henri Salo <henri@...v.fi>)
CVE request: sSMTP doesn't validate server certificates (Laurent Bigonville <bigon@...ian.org>)
Re: password hashing (Josh Bressers <bressers@...hat.com>)
Fwd: IPv6 DOS vulnerabilities (Marc Heuse <mh@...sec.de>)
Re: Fwd: IPv6 DOS vulnerabilities (Solar Designer <solar@...nwall.com>)
CVE request: libsocialweb untrusted connection to flickr (Vincent Danen <vdanen@...hat.com>)
Pre-advisory for Konqueror 4.7.3 (other versions may be affected) (Tim Brown <timb@...-dimension.org.uk>)
Re: Fwd: IPv6 DOS vulnerabilities (cve-assign@...re.org)

October 11 (11 messages)

Re: CVE request: libsocialweb untrusted connection to flickr (Kurt Seifried <kseifried@...hat.com>)
Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected) (Kurt Seifried <kseifried@...hat.com>)
CVE-2012-5377 through CVE-2012-5383: Windows PATH issues affecting some open-source products (cve-assign@...re.org)
CVE request: Zenphoto admin-news-articles.php date parameter XSS (Henri Salo <henri@...v.fi>)
Re: CVE request: sSMTP doesn't validate server certificates (Vincent Danen <vdanen@...hat.com>)
CVE Request -- librdmacm (one issue) / ibacm (two issues) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: sSMTP doesn't validate server certificates (Kurt Seifried <kseifried@...hat.com>)
Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request -- librdmacm (one issue) / ibacm (two issues) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Zenphoto admin-news-articles.php date parameter XSS (Kurt Seifried <kseifried@...hat.com>)
Re: Pre-advisory for Konqueror 4.7.3 (other versions may be affected) (Kurt Seifried <kseifried@...hat.com>)

October 12 (6 messages)

libproxy PAC downloading buffer overflows (Tomas Hoger <thoger@...hat.com>)
Security flaw in cups-pk-helper (CVE-2012-4510) (Vincent Untz <vuntz@...e.com>)
Re: libproxy PAC downloading buffer overflows (Kurt Seifried <kseifried@...hat.com>)
Re: libproxy PAC downloading buffer overflows (Matthias Weckbecker <mweckbecker@...e.de>)
Re: libproxy PAC downloading buffer overflows (Kurt Seifried <kseifried@...hat.com>)
CVE request: ruby file creation due in insertion of illegal NUL character (Vincent Danen <vdanen@...hat.com>)

October 13 (1 message)

Re: CVE request: ruby file creation due in insertion of illegal NUL character (Kurt Seifried <kseifried@...hat.com>)

October 14 (2 messages)

SilverStripe CMS 2.4.7 <= Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
SilverStripe CMS 2.4.7 <= Persistent Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)

October 15 (1 message)

CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Raphael Geissert <geissert@...ian.org>)

October 16 (4 messages)

Re: CVE request: ruby file creation due in insertion of illegal NUL character ("U.Nakamura" <usa@...bagecollect.jp>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Matthias Weckbecker <mweckbecker@...e.de>)
Re: libproxy PAC downloading buffer overflows (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Daniel Kahn Gillmor <dkg@...thhorseman.net>)

October 17 (15 messages)

CVE request: Fwd: [Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (Matthias Weckbecker <mweckbecker@...e.de>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Fabian Keil <freebsd-listen@...iankeil.de>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Matthias Weckbecker <mweckbecker@...e.de>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Simon McVittie <smcv@...ian.org>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Eitan Adler <lists@...anadler.com>)
CVE request: radsecproxy incorrect x.509 certificate validation (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Tim <tim-security@...tinelchicken.org>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Simon McVittie <smcv@...ian.org>)
CVE id request: xlockmore vulnerability: local access (Ignatios Souvatzis <is@...bsd.org>)
Re: CVE request: radsecproxy incorrect x.509 certificate validation (Kurt Seifried <kseifried@...hat.com>)
Re: CVE id request: xlockmore vulnerability: local access (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Michael Gilbert <mgilbert@...ian.org>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Kurt Seifried <kseifried@...hat.com>)

October 18 (19 messages)

Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Michael Gilbert <mgilbert@...ian.org>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: piwigo XSS in password.php (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-request for piwigo issues (second request) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Fwd: [Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Fwd: [Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Matthias Weckbecker <mweckbecker@...e.de>)
CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: ruby file creation due in insertion of illegal NUL character (Simon McVittie <smcv@...ian.org>)
Re: Re: CVE for Virtualbox 0x8 DoS? (halfdog <me@...fdog.net>)
Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Fwd: [Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (Breno Silva <breno.silva@...il.com>)
Re: CVE request: Fwd: [Full-disclosure] SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Michael Gilbert <mgilbert@...ian.org>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Kurt Seifried <kseifried@...hat.com>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Michael Gilbert <mgilbert@...ian.org>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Henri Salo <henri@...v.fi>)
Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Moritz Muehlenhoff <jmm@...ian.org>)

October 19 (4 messages)

Re: CVE Request -- mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names (Raphael Geissert <geissert@...ian.org>)
CVE Request -- kernel stack disclosure in binfmt_script load_script() (P J P <ppandit@...hat.com>)
Re: CVE Request -- kernel stack disclosure in binfmt_script load_script() (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Joomla two XSS vulnerabilities fixed in 2.5.7 (Kurt Seifried <kseifried@...hat.com>)

October 20 (2 messages)

F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
Re: CVE Request -- kernel stack disclosure in binfmt_script load_script() (P J P <ppandit@...hat.com>)

October 21 (7 messages)

Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH (Tim Brown <tmb@...35.com>)
CVE Request: viewvc 1.1.5 lib/viewvc.py XSS (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: viewvc 1.1.5 lib/viewvc.py XSS (Kurt Seifried <kseifried@...hat.com>)
Re: [Full-disclosure] F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (Gary Driggs <gdriggs@...il.com>)
Re: F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (Tim Brown <tmb@...35.com>)
Re: F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (Solar Designer <solar@...nwall.com>)
CVE request: XSS in piwik before 1.9 (Hanno Böck <hanno@...eck.de>)

October 22 (1 message)

Re: CVE request: XSS in piwik before 1.9 (Kurt Seifried <kseifried@...hat.com>)

October 23 (6 messages)

Re: CVE request: XSS in piwik before 1.9 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: XSS in piwik before 1.9 (Matthieu Aubry <matthieu.aubry@...il.com>)
Re: Re: CVE request: XSS in piwik before 1.9 (Kurt Seifried <services@...ik.org>)
Re: CVE request: XSS in piwik before 1.9 (Solar Designer <solar@...nwall.com>)
Wrong affected version in the CVE-2012-4511 (Agostino Sarubbo <ago@...too.org>)
Re: CVE request: XSS in piwik before 1.9 (Matthieu Aubry <matthieu.aubry@...il.com>)

October 24 (3 messages)

Re: CVE request: XSS in piwik before 1.9 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: XSS in piwik before 1.9 (Stuart Henderson <stu@...cehopper.org>)
VLC 2.0.3 libpng_plugin CVE-2012-5470 (cve-assign@...re.org)

October 25 (2 messages)

CVE-2012-4508 -- kernel: ext4: AIO vs fallocate stale data exposure (Petr Matousek <pmatouse@...hat.com>)
CVE request: awstats before 7.1 awredir.pl vulnerability (Hanno Böck <hanno@...eck.de>)

October 26 (5 messages)

Re: CVE request: awstats before 7.1 awredir.pl vulnerability (Kurt Seifried <kseifried@...hat.com>)
Medium severity flaw with Perl 5 (Tim Brown <timb@...-dimension.org.uk>)
Xen Security Advisory 25 (CVE-2012-4544) - Xen domain builder Out-of-memory due to malicious kernel/ramdisk (Xen.org security team <security@....org>)
Strange CVE situation (at least one ID should come of this) (Josh Bressers <bressers@...hat.com>)
CVE-2012-5671: Exim <= 4.80 DKIM heap-based buffer overflow (Solar Designer <solar@...nwall.com>)

October 27 (1 message)

Re: Medium severity flaw with Perl 5 (Eitan Adler <lists@...anadler.com>)

October 28 (3 messages)

CVE Request: cgit command injection ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE Request: cgit command injection (Kurt Seifried <kseifried@...hat.com>)
CVE request: use-after-free in libunity-webapps (Chris Coulson <chris.coulson@...onical.com>)

October 29 (18 messages)

CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Andres Gomez <agomez@...idsignal.com>)
Re: CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: use-after-free in libunity-webapps (Kurt Seifried <kseifried@...hat.com>)
CVE request: Drupal SA-CORE-2012-003 (Moritz Muehlenhoff <jmm@...ian.org>)
VideoLAN TiVo Demuxer Duplicate CVEs (CVE-2011-5231 and CVE-2012-0023) (Sean Amoss <ackle@...too.org>)
Re: CVE request: Drupal SA-CORE-2012-003 (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: awstats before 7.1 awredir.pl vulnerability (Vincent Danen <vdanen@...hat.com>)
CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Andrés Gómez Ramírez <andresgomezram7@...il.com>)
Re: CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Drupal SA-CORE-2012-003 (Angie Byron <angela.byron@...uia.com>)
Re: CVE request: Drupal SA-CORE-2012-003 (Angie Byron <angela.byron@...uia.com>)
Re: CVE request: Drupal SA-CORE-2012-003 (Greg Knaddison <greg.knaddison@...il.com>)
Re: Strange CVE situation (at least one ID should come of this) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Vincent Danen <vdanen@...hat.com>)
Re: Strange CVE situation (at least one ID should come of this) (Seth Arnold <seth.arnold@...onical.com>)
CVE Request: Django (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE Request: Django (Moritz Mühlenhoff <jmm@...til.org>)
Re: CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Andrés Gómez Ramírez <andresgomezram7@...il.com>)

October 30 (16 messages)

CVE request: XSS is Google Web Toolkit (GWT) (David Jorm <djorm@...hat.com>)
Re: Strange CVE situation (at least one ID should come of this) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: XSS is Google Web Toolkit (GWT) (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Django (Kurt Seifried <kseifried@...hat.com>)
Re: CVE request: Drupal SA-CORE-2012-003 (Kurt Seifried <kseifried@...hat.com>)
Medium risk security flaws in Konqueror (Tim Brown <timb@...-dimension.org.uk>)
Re: Strange CVE situation (at least one ID should come of this) ("Steven M. Christey" <coley@...-smtp.mitre.org>)
Re: Strange CVE situation (at least one ID should come of this) (Henri Salo <henri@...v.fi>)
RE: VideoLAN TiVo Demuxer Duplicate CVEs (CVE-2011-5231 and CVE-2012-0023) ("Christey, Steven M." <coley@...re.org>)
Re: Strange CVE situation (at least one ID should come of this) (Raphael Geissert <geissert@...ian.org>)
Re: CVE Request: Python keyring (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: LetoDMS, more issues (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: radsecproxy incorrect x.509 certificate validation (Raphael Geissert <geissert@...ian.org>)
Re: Strange CVE situation (at least one ID should come of this) (Kurt Seifried <kseifried@...hat.com>)
Re: Strange CVE situation (at least one ID should come of this) (Kurt Seifried <kseifried@...hat.com>)
libfpx Duplicate CVEs (CVE-2011-5232 and CVE-2012-0025) (Sean Amoss <ackle@...too.org>)

October 31 (10 messages)

Re: CVE request: XSS is Google Web Toolkit (GWT) (Kurt Seifried <kseifried@...hat.com>)
Re: [security] Strange CVE situation (at least one ID should come of this) (Greg Knaddison <greg.knaddison@...il.com>)
Re: Strange CVE situation (at least one ID should come of this) ("Steven M. Christey" <coley@...-smtp.mitre.org>)
CVE Request -- kernel: net: divide by zero in tcp algorithm illinois (Petr Matousek <pmatouse@...hat.com>)
Re: CVE Request -- kernel: net: divide by zero in tcp algorithm illinois (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE request: radsecproxy incorrect x.509 certificate validation (Kurt Seifried <kseifried@...hat.com>)
Re: Re: CVE request: LetoDMS, more issues (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: Python keyring (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: PLIB 1.8.5 ssg/ssgParser.cxx Buffer Overflow (Vincent Danen <vdanen@...hat.com>)
Re: Re: CVE request: LetoDMS, more issues (Raphael Geissert <geissert@...ian.org>)

192 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.