oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2014/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 7	² 4	³ 12	⁴ 22	⁵ 23	⁶ 18	⁷ 14
⁸ 10	⁹ 30	¹⁰ 15	¹¹ 12	¹² 9	¹³ 2	¹⁴ 2
¹⁵ 8	¹⁶ 12	¹⁷ 13	¹⁸ 23	¹⁹ 5	²⁰ 6	²¹ 6
²² 13	²³ 2	²⁴ 5	²⁵ 5	²⁶ 5	²⁷ 3	²⁸ 3
²⁹ 11	³⁰ 7	³¹ 11

Messages by day:

December 1 (7 messages)

December 2 (4 messages)

December 3 (12 messages)

December 4 (22 messages)

December 5 (23 messages)

December 6 (18 messages)

December 7 (14 messages)

December 8 (10 messages)

December 9 (30 messages)

CVE Request (David Cramer <david@...sentry.com>)
Re: Offset2lib: bypassing full ASLR on 64bit Linux (Mike Hommey <mh@...ndium.org>)
Re: CVE Request (Solar Designer <solar@...nwall.com>)
Re: Running Java across a privilege boundry (Solar Designer <solar@...nwall.com>)
Re: CVE Request (David Cramer <david@...sentry.com>)
CVE question: Return of POODLE (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
CVE Request for illumos distributions (Dan McDonald <danmcd@...iti.com>)
Re: PowerDNS Security Advisory 2014-02 (Peter van Dijk <peter.van.dijk@...herlabs.nl>)
Re: PowerDNS Security Advisory 2014-02 (Peter van Dijk <peter.van.dijk@...herlabs.nl>)
PIE bypass using VDSO ASLR weakness (Reno Robert <renorobert@...il.com>)
Re: PowerDNS Security Advisory 2014-02 (Hanno Böck <hanno@...eck.de>)
Re: PowerDNS Security Advisory 2014-02 (Peter van Dijk <peter.van.dijk@...herlabs.nl>)
Re: PIE bypass using VDSO ASLR weakness (Daniel Micay <danielmicay@...il.com>)
Two rpm flaws (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Re: Two rpm flaws (Yves-Alexis Perez <corsac@...ian.org>)
Re: Re: CVE Request: Graphviz format string vuln (Joshua Rogers <oss@...ernot.info>)
Re: PIE bypass using VDSO ASLR weakness (Reno Robert <renorobert@...il.com>)
Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X servers (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Bug#772008: CVE request: mpfr: buffer overflow in mpfr_strtofr (Vincent Lefevre <vincent@...c17.net>)
Re: Offset2lib: bypassing full ASLR on 64bit Linux (Steve Grubb <sgrubb@...hat.com>)
Re: PIE bypass using VDSO ASLR weakness (Martino Dell'Ambrogio <tillo@...lo.ch>)
Re: Two rpm flaws (Florian Weimer <fweimer@...hat.com>)
[OSSA 2014-040] Horizon denial of service attack through login page (CVE-2014-8124) (Tristan Cacqueray <tristan.cacqueray@...vance.com>)
Re: PIE bypass using VDSO ASLR weakness (Mathias Krause <minipli@...glemail.com>)
Re: Offset2lib: bypassing full ASLR on 64bit Linux (Daniel Micay <danielmicay@...il.com>)
CVE Request: MiniUPnPd: several issues (Salvatore Bonaccorso <carnil@...ian.org>)
Re: CVE question: Return of POODLE ("Steven M. Christey" <coley@...re.org>)
Re: PIE bypass using VDSO ASLR weakness (Daniel Micay <danielmicay@...il.com>)
Re: Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X servers (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues in X servers (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 10 (15 messages)

December 11 (12 messages)

December 12 (9 messages)

December 13 (2 messages)

December 14 (2 messages)

December 15 (8 messages)

December 16 (12 messages)

December 17 (13 messages)

December 18 (23 messages)

December 19 (5 messages)

December 20 (6 messages)

can we talk about secure time? (Hanno Böck <hanno@...eck.de>)
Re: request for CVEs for git clients (Julien Cristau <jcristau@...ian.org>)
Re: can we talk about secure time? (Stuart Henderson <stu@...cehopper.org>)
Re: can we talk about secure time? (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: can we talk about secure time? ("ncl@...k.li" <ncl@...k.li>)
Re: can we talk about secure time? (Daniel Micay <danielmicay@...il.com>)

December 21 (6 messages)

December 22 (13 messages)

December 23 (2 messages)

December 24 (5 messages)

Imagemagick fuzzing bug (Bastien ROUCARIES <roucaries.bastien@...il.com>)
Re: Imagemagick fuzzing bug (Hanno Böck <hanno@...eck.de>)
libsndfile DoS/divide-by-zero (Joshua Rogers <honey@...ernot.info>)
Re: Imagemagick fuzzing bug (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: Imagemagick fuzzing bug (Alexander Cherepanov <cherepan@...me.ru>)

December 25 (5 messages)

December 26 (5 messages)

December 27 (3 messages)

CVE request: XSS issues in Koha (Chris Cormack <chris@...ballofwax.co.nz>)
libbfd / bfd (Joshua Rogers <oss@...ernot.info>)
Re: libbfd / bfd (Alexander Cherepanov <cherepan@...me.ru>)

December 28 (3 messages)

December 29 (11 messages)

Re: parse_datetime() bug in coreutils (Moritz Mühlenhoff <jmm@...til.org>)
CVE request: dir traversal in elfutils (Alexander Cherepanov <cherepan@...me.ru>)
OpenBSD signify and "fingerprint" (Florian Weimer <fw@...eb.enyo.de>)
CVE Request: Double Free in PHP (Joshua Rogers <oss@...ernot.info>)
Re: OpenBSD signify and "fingerprint" (Ted Unangst <tedu@...unangst.com>)
Re: CVE Request: Double Free in PHP (cve-assign@...re.org)
Re: Re: CVE Request: Double Free in PHP (Joshua Rogers <oss@...ernot.info>)
CVE Request(s): GnuPG 2/GPG2 (Joshua Rogers <honey@...ernot.info>)
CVE Request(s): libgcrypt (Joshua Rogers <honey@...ernot.info>)
Re: CVE Request(s): libgcrypt (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE Request(s): libgcrypt (Joshua Rogers <oss@...ernot.info>)

December 30 (7 messages)

December 31 (11 messages)

318 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.