oss-security mailing list

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/10

Messages by day:

October 1 (2 messages)

CVE id request: sabre (Gerfried Fuchs <rhonda@....at>)
Re: CVE req: phpmyadmin < 2.11.9.2 xss (Hanno Böck <hanno@...eck.de>)

October 2 (5 messages)

CVE-2008-3832 kernel: null pointer dereference in utrace_control (Eugene Teo <eteo@...hat.com>)
Re: CVE id request: proftpd (Miklos Vajna <vmiklos@...galware.org>)
CVE request: XSS in mediawiki 1.13.1 and 1.12.0 (Hanno Böck <hanno@...eck.de>)
libxml2 "ampproblem" DoS (Robert Buchholz <rbu@...too.org>)
blosxom XSS issue (CVE-2008-2236) (Gerfried Fuchs <rhonda@....at>)

October 3 (14 messages)

CVE-2008-3833 kernel: remove SUID when splicing into an inode (Eugene Teo <eteo@...hat.com>)
Re: libxml2 "ampproblem" DoS (Daniel Veillard <veillard@...hat.com>)
CVE request: kernel: x86: Fix broken LDT access in VMI (Eugene Teo <eteo@...hat.com>)
Re: Re: libxml2 "ampproblem" DoS (Robert Buchholz <rbu@...too.org>)
Re: CVE Request (xen) (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: proftpd (Thomas BlÃ¤sing <thomasbl@...l.math.tu-berlin.de>)
regarding CVE-2008-4382 & CVE-2008-4381 (Nico Golde <nico@...lde.de>)
Re: regarding CVE-2008-4382 & CVE-2008-4381 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: regarding CVE-2008-4382 & CVE-2008-4381 (Nico Golde <oss-security+ml@...lde.de>)
5 more messages

October 4 (4 messages)

duplicates: CVE-2008-4406 and CVE-2008-4407 [sabre insecure temp file] (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE id request: mon (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE Request (xen) ("Daniel P. Berrange" <berrange@...hat.com>)
Re: amarok temp file vuln (Robert Buchholz <rbu@...too.org>)

October 6 (7 messages)

CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter (Eugene Teo <eteo@...hat.com>)
Re: Re: libxml2 "ampproblem" DoS (Tomas Hoger <thoger@...hat.com>)
Re: Re: libxml2 "ampproblem" DoS (Robert Buchholz <rbu@...too.org>)
CVE request - (vim : netrw plugin - ftp user credentials disclosure) (Jan Lieskovsky <jlieskov@...hat.com>)
data-destroiny malfunction: is that a "security" issue (Hanno Böck <hanno@...eck.de>)
Re: data-destroiny malfunction: is that a "security" issue (Nico Golde <oss-security+ml@...lde.de>)
dbus DoS (CVE-2008-3834) (Josh Bressers <bressers@...hat.com>)

October 7 (7 messages)

CVE request: crashers / potential security risks in mplayer (Hanno Böck <hanno@...eck.de>)
Mozilla CVE duplicate (Moritz Muehlenhoff <jmm@...til.org>)
Re: Re: libxml2 "ampproblem" DoS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: duplicates: CVE-2008-4406 and CVE-2008-4407 [sabre insecure temp file] ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: mon ("Steven M. Christey" <coley@...us.mitre.org>)
Re: amarok temp file vuln ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Mozilla CVE duplicate ("Steven M. Christey" <coley@...us.mitre.org>)

October 8 (5 messages)

CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH (Eugene Teo <eteo@...hat.com>)
Re: Mozilla CVE duplicate (Josh Bressers <bressers@...hat.com>)
Re: Mozilla CVE duplicate (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2008-4324 ("lists@...uarter.de" <lists@...uarter.de>)
Re: data-destroiny malfunction: is that a "security" issue ("Steven M. Christey" <coley@...us.mitre.org>)

October 9 (2 messages)

CVE request: xss in phpmyid 0.9 (Hanno Böck <hanno@...eck.de>)
lynx lynxcgi handler flaw (Josh Bressers <bressers@...hat.com>)

October 10 (1 message)

CVE Request (Josh Bressers <bressers@...hat.com>)

October 13 (4 messages)

CVE request: kernel: don't allow splice() to files opened with O_APPEND (Eugene Teo <eteo@...hat.com>)
CVE id request: qemu (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE Request (Tomas Hoger <thoger@...hat.com>)
CVE Request (nfs-utils) (Josh Bressers <bressers@...hat.com>)

October 14 (7 messages)

CVE request: strongswam denial-of-service (Thomas Biege <thomas@...e.de>)
Re: CVE Request (nfs-utils) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: strongswam denial-of-service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: qemu ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: don't allow splice() to files opened with O_APPEND ("Steven M. Christey" <coley@...us.mitre.org>)
CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)

October 15 (10 messages)

Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: graphviz buffer overflow while parsinf DOT file (Thomas Biege <thomas@...e.de>)
Re: CVE request: graphviz buffer overflow while parsinf DOT file (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH (Marcus Meissner <meissner@...e.de>)
CVE request: jhead (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request ("Steven M. Christey" <coley@...us.mitre.org>)

October 16 (3 messages)

Re: CVE Request (Tomas Hoger <thoger@...hat.com>)
CVE request - Vim netrw.plugin (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: jhead ("John Dong" <jdong@...ntu.com>)

October 19 (2 messages)

CVE request: mantisbt < 1.1.4: RCE (Christian Hoffmann <hoffie@...too.org>)
CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)

October 20 (3 messages)

Re: CVE request: mantisbt < 1.1.4: RCE (Tomas Hoger <thoger@...hat.com>)
CVE request (vim) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: crashers / potential security risks in mplayer ("Steven M. Christey" <coley@...us.mitre.org>)

October 21 (7 messages)

Re: CVE-2008-3528 Linux kernel ext[234] directory corruption DoS (Eugene Teo <eteo@...hat.com>)
Re: CVE-2008-3528 Linux kernel ext[234] directory corruption DoS (Eugene Teo <eteo@...hat.com>)
Re: CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter (Eugene Teo <eteo@...hat.com>)
Re: CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter (Eugene Teo <eteo@...hat.com>)
CVE Request: Opera 9.60 with security fixes (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: Opera 9.60 with security fixes (Marcus Meissner <meissner@...e.de>)
CVE req: drupal < 5.11/6.5 (Hanno Böck <hanno@...eck.de>)

October 22 (7 messages)

Re: CVE request: mantisbt < 1.1.4: RCE ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: jhead ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: Fix kernel panic while process protocol violation parameter ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: Opera 9.60 with security fixes ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (netpbm) (Josh Bressers <bressers@...hat.com>)

October 23 (3 messages)

CVE req: another drupal one (<5.12/6.6) (Hanno Böck <hanno@...eck.de>)
Re: CVE Request (netpbm) (Josh Bressers <bressers@...hat.com>)
CVE request for ecryptfs (Jamie Strandboge <jamie@...onical.com>)

October 25 (3 messages)

Not a security issue: htpdate "buffer overflow" (Robert Buchholz <rbu@...too.org>)
Regarding SA32329 (Smarty "_expand_quoted_text()" Security Bypass) (Robert Buchholz <rbu@...too.org>)
CVE request: lynx (old) .mailcap handling flaw (Tomas Hoger <thoger@...hat.com>)

October 27 (6 messages)

CVE id request: blender (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request -- Python imageop#3 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: lynx (old) .mailcap handling flaw ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tavis Ormandy <taviso@....lonestar.org>)
CVE request phpmyadmin (Fwd: XSS in phpMyadmin) (Hanno Böck <hanno@...eck.de>)
XSS in HTML Tidy plugin used in WYSIWYG HTML editors ("Steven M. Christey" <coley@...us.mitre.org>)

October 28 (7 messages)

Re: XSS in HTML Tidy plugin used in WYSIWYG HTML editors ("Steven M. Christey" <coley@...us.mitre.org>)
CVE-2008-4619 / milw0rm6775 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) ("Thijs Kinkhorst" <thijs@...ian.org>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) (Hanno Böck <hanno@...eck.de>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tomas Hoger <thoger@...hat.com>)
CVE request - libgadu (Tomas Hoger <thoger@...hat.com>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) ("Steven M. Christey" <coley@...us.mitre.org>)

October 29 (10 messages)

Re: CVE-2008-4619 / milw0rm6775 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request - libgadu (Tomas Hoger <thoger@...hat.com>)
CVE Request - Python imageop (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request for ecryptfs (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tavis Ormandy <taviso@....lonestar.org>)
Fwd: [Full-disclosure] [PLSA 2008-36] Ffmpeg: Multiple vulnerabilities (Vincent Danen <vdanen@...sec.ca>)
Re: CVE request for ecryptfs (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request phpmyadmin (Fwd: XSS in phpMyadmin) (Hanno Böck <hanno@...eck.de>)
Re: CVE request: lynx (old) .mailcap handling flaw (Tomas Hoger <thoger@...hat.com>)
CVE Request (dovecot) (Josh Bressers <bressers@...hat.com>)

October 30 (2 messages)

CVE Request / Question (Craig <craig@...uarter.de>)
CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire (Robert Buchholz <rbu@...too.org>)

October 31 (2 messages)

New net-snmp DoS (Josh Bressers <bressers@...hat.com>)
Re: CVE-2008-4619 / milw0rm6775 ("Steven M. Christey" <coley@...us.mitre.org>)

123 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.