oss-security mailing list - 2008/09

Follow us on Twitter or via RSS feeds with tweets or complete announcement texts or excerpts

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/09

Messages by day:

September 1 (5 messages)

Re: CVE Request (gpicview) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: GNU ed heap overflow (Tavis Ormandy <taviso@....lonestar.org>)
Re: GNU ed heap overflow (Florian Weimer <fw@...eb.enyo.de>)
CVE id request: newsbeuter (Nico Golde <oss-security+ml@...lde.de>)
[oCERT-2008-014] WordNet stack and heap overflows (Rob Holland <rob@...rt.org>)

September 2 (1 message)

Re: CVE id request: newsbeuter (Nico Golde <oss-security+ml@...lde.de>)

September 3 (5 messages)

Re: CVE Request (gpicview) (Robert Buchholz <rbu@...too.org>)
request for CVE: clamav 0.94 release (Marcus Meissner <meissner@...e.de>)
CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) (Jan Lieskovsky <jlieskov@...hat.com>)
django CSRF vuln (Vincent Danen <vdanen@...sec.ca>)
CVE id request: dns2tcp (Nico Golde <oss-security+ml@...lde.de>)

September 4 (24 messages)

CVE request: kernel: dio: zero struct dio with kzalloc instead of manually (Eugene Teo <eteo@...hat.com>)
CVE request: kernel: sunrpc: fix possible overrun on read of /proc/sys/sunrpc/transports (Eugene Teo <eteo@...hat.com>)
Re: request for CVE: clamav 0.94 release (Hanno Böck <hanno@...eck.de>)
CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl (Eugene Teo <eteo@...hat.com>)
Re: OpenSSH key blacklisting (Tim Brown <tmb@...35.com>)
Re: CVE Request (gpicview) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request (gpicview) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request (gpicview) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) ("Steven M. Christey" <coley@...us.mitre.org>)
15 more messages

September 5 (2 messages)

CVE request: kernel: local keyboard DoS through LED switching (Eugene Teo <eteo@...hat.com>)
Re: opensc 0.11.6 with fixed security update (Ludwig Nussel <ludwig.nussel@...e.de>)

September 6 (3 messages)

CVE request: pam_mount: conf: re-add luserconf security checks (Eugene Teo <eteo@...hat.com>)
CVE id requests: gmanedit (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request: pam_mount < 0.47 missing security checks (Hanno Böck <hanno@...eck.de>)

September 8 (1 message)

Re: CVE request for bitlbee (Tomas Hoger <thoger@...hat.com>)

September 9 (20 messages)

CVE request: mybb < 1.4.1 (Hanno Böck <hanno@...eck.de>)
cve request: punbb < 1.2.20 xss (Hanno Böck <hanno@...eck.de>)
CVE request (libpng) (Pınar Yanardağ <pinar@...dus.org.tr>)
CVE request: MySQL empty bit-string literal server crash (Robert Buchholz <rbu@...too.org>)
ssmtp =2.62 unitialized memory disclosure (Robert Buchholz <rbu@...too.org>)
Re: ssmtp =2.62 unitialized memory disclosure ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: MySQL empty bit-string literal server crash ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request (libpng) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mybb < 1.4.1 ("Steven M. Christey" <coley@...us.mitre.org>)
11 more messages

September 10 (1 message)

[oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS) (Will Drewry <redpig@...rt.org>)

September 11 (7 messages)

Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) (Tomas Hoger <thoger@...hat.com>)
Re: ssmtp =2.62 unitialized memory disclosure (Robert Buchholz <rbu@...too.org>)
[oss-list] CVE request (vim) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: [oss-list] CVE request (vim) (Pınar Yanardağ <pinar@...dus.org.tr>)
CVE request: joomla < 1.5.7 (Hanno Böck <hanno@...eck.de>)
CVE request: wordpress < 2.6.2 (Hanno Böck <hanno@...eck.de>)
Re: [oss-list] CVE request (vim) ("Jan Minář" <rdancer@...ncer.org>)

September 12 (1 message)

CVE request for Joomla multiple vuln. (Emanuele Gentili <emgent@...ntu.com>)

September 13 (2 messages)

Re: CVE Request (gpicview) (Robert Buchholz <rbu@...too.org>)
CVE request: Ruby on Rails <2.1.1 :limit and :offset SQL injection (Robert Buchholz <rbu@...too.org>)

September 15 (2 messages)

CVE Request (python) (Jan Lieskovsky <jlieskov@...hat.com>)
phpMyAdmin code execution (CVE request) (Thijs Kinkhorst <thijs@...ian.org>)

September 16 (10 messages)

Re: CVE request: Ruby on Rails <2.1.1 :limit and :offset SQL injection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: phpMyAdmin code execution (CVE request) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: MySQL incomplete fix for CVE-2008-2079 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ruby -- DNS spoofing vulnerability in resolv.rb) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: [oss-list] CVE request (vim) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: [oss-list] CVE request (vim) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: joomla < 1.5.7 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: wordpress < 2.6.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (python) ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: splice: fix bad unlock_page() in error case (Eugene Teo <eteo@...hat.com>)

September 18 (4 messages)

CVE Request (mercurial) (Josh Bressers <bressers@...hat.com>)
CVE-2008-3528 Linux kernel ext[234] directory corruption DoS (Eugene Teo <eteo@...hat.com>)
CVE Request (openswan, emacspeak, cman) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request (gallery2) (Josh Bressers <bressers@...hat.com>)

September 19 (4 messages)

Re: CVE Request (gallery2) (Hanno Böck <hanno@...eck.de>)
CVE request: Opera < 9.52 multiple vulnerabilities ("Pierre-Yves Rofes" <py@...too.org>)
CVE request: pdnsd <1.2.7 Denial of Service (Robert Buchholz <rbu@...too.org>)
viewvc security flaw? (Josh Bressers <bressers@...hat.com>)

September 20 (1 message)

Re: viewvc security flaw? (Robert Buchholz <rbu@...too.org>)

September 22 (2 messages)

CVE id request: proftpd (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE req: phpmyadmin < 2.11.9.2 xss (Hanno Böck <hanno@...eck.de>)

September 23 (1 message)

CVE id request: fraud2 (Steffen Joeris <steffen.joeris@...lelinux.de>)

September 24 (9 messages)

Re: CVE Request (gallery2) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (openswan, emacspeak, cman) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: pdnsd <1.2.7 Denial of Service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Opera < 9.52 multiple vulnerabilities ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: open() call allows setgid bit when user is not in new file's group (Eugene Teo <eteo@...hat.com>)
Re: CVE id request: fraud2 (Robert Buchholz <rbu@...too.org>)
Re: CVE id request: fraud2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: open() call allows setgid bit when user is not in new file's group ("Steven M. Christey" <coley@...us.mitre.org>)
CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)

September 26 (6 messages)

CVE id request: faad2 (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: faad2 (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: faad2 (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE-2008-4182 clarification (Josh Bressers <bressers@...hat.com>)
CVE Request (lighttpd) (Josh Bressers <bressers@...hat.com>)
Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option ("Steven M. Christey" <coley@...us.mitre.org>)

September 27 (2 messages)

Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)
Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)

September 29 (7 messages)

CVE id request: ftpd (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: ftpd (Robert Buchholz <rbu@...too.org>)
Re: CVE Request (mercurial) (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE-2008-4113 update: kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option (Eugene Teo <eteo@...hat.com>)
Re: CVE Request (mercurial) (Robert Buchholz <rbu@...too.org>)
Re: CVE Request (mercurial) (Christian Hoffmann <hoffie@...too.org>)
[oCERT-2008-013] MPlayer Real demuxer heap overflow (Andrea Barisani <lcars@...rt.org>)

September 30 (7 messages)

Re: CVE request: lighttpd issues (Christian Hoffmann <hoffie@...too.org>)
Re: CVE request: lighttpd issues (Christian Hoffmann <hoffie@...too.org>)
Re: Re: CVE request: lighttpd issues ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: ftpd ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: ftpd (Josh Bressers <bressers@...hat.com>)
CVE Request (xen) (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: ftpd ("Steven M. Christey" <coley@...us.mitre.org>)

127 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ