oss-security mailing list - 2009/01

Follow us on Twitter or via RSS feeds with tweets or complete announcement texts or excerpts

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/01

Messages by day:

January 3 (1 message)

Re: CVE id request: audiofile (Nico Golde <oss-security+ml@...lde.de>)

January 5 (1 message)

CVE request: kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID ("Eugene Teo" <eugeneteo@...nel.sg>)

January 6 (1 message)

Fwd: Using xdg-open in /etc/mailcap causes hole in Firefox (Demonstration/Exploit included) (Josh Bressers <bressers@...hat.com>)

January 7 (12 messages)

Re: Fwd: Using xdg-open in /etc/mailcap causes hole in Firefox (Demonstration/Exploit included) ("Bernhard R. Link" <brlink@...ian.org>)
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses ("Will Drewry" <redpig@...rt.org>)
CFP: COLSEC 2009 (Patrice CLEMENTE <patrice.clemente@...i-bourges.fr>)
CFPs on this list (was: CFP: COLSEC 2009) (Solar Designer <solar@...nwall.com>)
clarification on CVE-2008-5687 (mediawiki) (Nico Golde <oss-security+ml@...lde.de>)
Re: clarification on CVE-2008-5687 (mediawiki) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: audiofile ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CFPs on this list (was: CFP: COLSEC 2009) (Josh Bressers <bressers@...hat.com>)
3 more messages

January 8 (1 message)

CVE request: ktorrent (Moritz Muehlenhoff <jmm@...til.org>)

January 9 (1 message)

libpng non issue (Josh Bressers <bressers@...hat.com>)

January 12 (4 messages)

CVE-2009-0024 kernel: local privilege escalation in sys_remap_file_pages ("Eugene Teo" <eugeneteo@...nel.sg>)
SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei ("organiser@...can.org" <organiser@...can.org>)
CVE request: xrdp (Thomas Biege <thomas@...e.de>)
CVE Request -- tsqllib, slurm-llnl, libnasl, libcrypt-openssl-dsa-perl, erlang, boinc-client, m2crypto (Jan Lieskovsky <jlieskov@...hat.com>)

January 13 (3 messages)

CVE-2008-4307 kernel: local denial of service in locks_remove_flock ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE Request -- libmikmod (Jan Lieskovsky <jlieskov@...hat.com>)
update on CVE-2008-5718 (Nico Golde <oss-security+ml@...lde.de>)

January 14 (3 messages)

Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
CVE Request -- amarok (Jan Lieskovsky <jlieskov@...hat.com>)
Re: update on CVE-2008-5718 (Nico Golde <oss-security+ml@...lde.de>)

January 15 (3 messages)

Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
CVE request -- git (Florian Weimer <fw@...eb.enyo.de>)
CVE request - ganglia (Tomas Hoger <thoger@...hat.com>)

January 18 (2 messages)

Re: libpng non issue (Nico Golde <oss-security+ml@...lde.de>)
CVE request: WebSVN (Florian Weimer <fw@...eb.enyo.de>)

January 19 (5 messages)

Re: CVE Request -- amarok (Marcus Meissner <meissner@...e.de>)
Re: CVE Request -- amarok (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- amarok (Marcus Meissner <meissner@...e.de>)
CVE-2009-0031 kernel: local denial of service in keyctl_join_session_keyring (Mark J Cox <mjc@...hat.com>)
Re: CVE request -- git (Florian Weimer <fw@...eb.enyo.de>)

January 20 (6 messages)

Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- git (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- git (Sebastian Krahmer <krahmer@...e.de>)
CVE request - horde XSS (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- amarok ("Steven M. Christey" <coley@...us.mitre.org>)

January 21 (10 messages)

Re: CVE request -- git ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - horde XSS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: WebSVN ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - ganglia ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: xrdp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- tsqllib, slurm-llnl, libnasl, libcrypt-openssl-dsa-perl, erlang, boinc-client, m2crypto ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
COLSEC 2009 CFP: **Update** (COLSEC Organizers <patrice.clemente@...i-bourges.fr>)
CVE Request -- openoffice.org (CVE-2008-4841) (Jan Lieskovsky <jlieskov@...hat.com>)
mod-auth-mysql: SQL injection (Steffen Joeris <steffen.joeris@...lelinux.de>)

January 22 (5 messages)

CVE id request: typo3 SA-2009-001 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: typo3 SA-2009-001 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- git ("Steven M. Christey" <coley@...us.mitre.org>)
Re: mod-auth-mysql: SQL injection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- openoffice.org (CVE-2008-4841) ("Steven M. Christey" <coley@...us.mitre.org>)

January 23 (4 messages)

CVE Request -- gstreamer-plugins-good (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
CVE request: Tor <0.2.0.33 Heap corruption (Robert Buchholz <rbu@...too.org>)
Re: CVE id request: typo3 SA-2009-001 (Nico Golde <oss-security+ml@...lde.de>)

January 26 (3 messages)

Re: CVE request - ganglia (Tomas Hoger <thoger@...hat.com>)
CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request -- Linux kernel irda driver buffer overflow (Miklos Vajna <vmiklos@...galware.org>)

January 27 (4 messages)

Re: CVE request -- Linux kernel irda driver buffer overflow (Mark J Cox <mjc@...hat.com>)
Re: CVE request -- Linux kernel irda driver buffer overflow (Miklos Vajna <vmiklos@...galware.org>)
CVE Request: winetricks symlink problem (Marcus Meissner <meissner@...e.de>)
CVE Request: MoinMoin (Jamie Strandboge <jamie@...onical.com>)

January 28 (13 messages)

Re: CVE Request: MoinMoin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, G… ("Steven M. Christey" <coley@...us.mitre…)
Re: CVE Request: winetricks symlink problem ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request - horde, imp (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric) (Robert Buchholz <rbu@...too.org>)
Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
Re: update on CVE-2008-5718 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
Re: update on CVE-2008-5718 ("Steven M. Christey" <coley@...us.mitre.org>)
4 more messages

January 29 (5 messages)

Re: Re: CVE id request: php5 (Joe Orton <jorton@...hat.com>)
CVE Request -- (sor of urgent) gstreamer-plugins, gstreamer-plugins-good (repost) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- (sort of urgent) gstreamer-plugins-good (repost) (more details about affected versions -- final version) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE id request: php5 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE Request (trickle) (Josh Bressers <bressers@...hat.com>)

January 30 (2 messages)

CVE Request - php (PHP BZ#27421) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnu… (Jan Lieskovsky <jlieskov@...hat.com>)

89 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ