oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	²	³ 1	⁴
⁵ 1	⁶ 1	⁷ 12	⁸ 1	⁹ 1	¹⁰	¹¹
¹² 4	¹³ 3	¹⁴ 3	¹⁵ 3	¹⁶	¹⁷	¹⁸ 2
¹⁹ 5	²⁰ 6	²¹ 10	²² 5	²³ 4	²⁴	²⁵
²⁶ 3	²⁷ 4	²⁸ 13	²⁹ 5	³⁰ 2	³¹

Messages by day:

January 3 (1 message)

Re: CVE id request: audiofile (Nico Golde <oss-security+ml@...lde.de>)

January 5 (1 message)

CVE request: kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID ("Eugene Teo" <eugeneteo@...nel.sg>)

January 6 (1 message)

Fwd: Using xdg-open in /etc/mailcap causes hole in Firefox (Demonstration/Exploit included) (Josh Bressers <bressers@...hat.com>)

January 7 (12 messages)

Re: Fwd: Using xdg-open in /etc/mailcap causes hole in Firefox (Demonstration/Exploit included) ("Bernhard R. Link" <brlink@...ian.org>)
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses ("Will Drewry" <redpig@...rt.org>)
CFP: COLSEC 2009 (Patrice CLEMENTE <patrice.clemente@...i-bourges.fr>)
CFPs on this list (was: CFP: COLSEC 2009) (Solar Designer <solar@...nwall.com>)
clarification on CVE-2008-5687 (mediawiki) (Nico Golde <oss-security+ml@...lde.de>)
Re: clarification on CVE-2008-5687 (mediawiki) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: audiofile ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: sctp: memory overflow when FWD-TSN chunk is received with bad stream ID ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CFPs on this list (was: CFP: COLSEC 2009) (Josh Bressers <bressers@...hat.com>)
Re: Fwd: Using xdg-open in /etc/mailcap causes hole in Firefox (Demonstration/Exploit included) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - pdfjam ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CFPs on this list (was: CFP: COLSEC 2009) (Nico Golde <oss-security+ml@...lde.de>)

January 8 (1 message)

CVE request: ktorrent (Moritz Muehlenhoff <jmm@...til.org>)

January 9 (1 message)

libpng non issue (Josh Bressers <bressers@...hat.com>)

January 12 (4 messages)

CVE-2009-0024 kernel: local privilege escalation in sys_remap_file_pages ("Eugene Teo" <eugeneteo@...nel.sg>)
SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei ("organiser@...can.org" <organiser@...can.org>)
CVE request: xrdp (Thomas Biege <thomas@...e.de>)
CVE Request -- tsqllib, slurm-llnl, libnasl, libcrypt-openssl-dsa-perl, erlang, boinc-client, m2crypto (Jan Lieskovsky <jlieskov@...hat.com>)

January 13 (3 messages)

CVE-2008-4307 kernel: local denial of service in locks_remove_flock ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE Request -- libmikmod (Jan Lieskovsky <jlieskov@...hat.com>)
update on CVE-2008-5718 (Nico Golde <oss-security+ml@...lde.de>)

January 14 (3 messages)

Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
CVE Request -- amarok (Jan Lieskovsky <jlieskov@...hat.com>)
Re: update on CVE-2008-5718 (Nico Golde <oss-security+ml@...lde.de>)

January 15 (3 messages)

Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
CVE request -- git (Florian Weimer <fw@...eb.enyo.de>)
CVE request - ganglia (Tomas Hoger <thoger@...hat.com>)

January 18 (2 messages)

Re: libpng non issue (Nico Golde <oss-security+ml@...lde.de>)
CVE request: WebSVN (Florian Weimer <fw@...eb.enyo.de>)

January 19 (5 messages)

Re: CVE Request -- amarok (Marcus Meissner <meissner@...e.de>)
Re: CVE Request -- amarok (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- amarok (Marcus Meissner <meissner@...e.de>)
CVE-2009-0031 kernel: local denial of service in keyctl_join_session_keyring (Mark J Cox <mjc@...hat.com>)
Re: CVE request -- git (Florian Weimer <fw@...eb.enyo.de>)

January 20 (6 messages)

Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- git (Sebastian Krahmer <krahmer@...e.de>)
Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- git (Sebastian Krahmer <krahmer@...e.de>)
CVE request - horde XSS (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request -- amarok ("Steven M. Christey" <coley@...us.mitre.org>)

January 21 (10 messages)

Re: CVE request -- git ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - horde XSS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: WebSVN ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - ganglia ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: xrdp ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- tsqllib, slurm-llnl, libnasl, libcrypt-openssl-dsa-perl, erlang, boinc-client, m2crypto ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
COLSEC 2009 CFP: **Update** (COLSEC Organizers <patrice.clemente@...i-bourges.fr>)
CVE Request -- openoffice.org (CVE-2008-4841) (Jan Lieskovsky <jlieskov@...hat.com>)
mod-auth-mysql: SQL injection (Steffen Joeris <steffen.joeris@...lelinux.de>)

January 22 (5 messages)

CVE id request: typo3 SA-2009-001 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: typo3 SA-2009-001 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- git ("Steven M. Christey" <coley@...us.mitre.org>)
Re: mod-auth-mysql: SQL injection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- openoffice.org (CVE-2008-4841) ("Steven M. Christey" <coley@...us.mitre.org>)

January 23 (4 messages)

CVE Request -- gstreamer-plugins-good (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request -- git (Tomas Hoger <thoger@...hat.com>)
CVE request: Tor <0.2.0.33 Heap corruption (Robert Buchholz <rbu@...too.org>)
Re: CVE id request: typo3 SA-2009-001 (Nico Golde <oss-security+ml@...lde.de>)

January 26 (3 messages)

Re: CVE request - ganglia (Tomas Hoger <thoger@...hat.com>)
CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric… (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request -- Linux kernel irda driver buffer overflow (Miklos Vajna <vmiklos@...galware.org>)

January 27 (4 messages)

Re: CVE request -- Linux kernel irda driver buffer overflow (Mark J Cox <mjc@...hat.com>)
Re: CVE request -- Linux kernel irda driver buffer overflow (Miklos Vajna <vmiklos@...galware.org>)
CVE Request: winetricks symlink problem (Marcus Meissner <meissner@...e.de>)
CVE Request: MoinMoin (Jamie Strandboge <jamie@...onical.com>)

January 28 (13 messages)

Re: CVE Request: MoinMoin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, G… ("Steven M. Christey" <coley@...us.mitre…)
Re: CVE Request: winetricks symlink problem ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request - horde, imp (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric) (Robert Buchholz <rbu@...too.org>)
Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
Re: update on CVE-2008-5718 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: update on CVE-2008-5718 (Thomas Biege <thomas@...e.de>)
Re: update on CVE-2008-5718 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: update on CVE-2008-5718 (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: php5 (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: php5 (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: php5 (Raphael Geissert <atomo64+debian@...il.com>)

January 29 (5 messages)

Re: Re: CVE id request: php5 (Joe Orton <jorton@...hat.com>)
CVE Request -- (sor of urgent) gstreamer-plugins, gstreamer-plugins-good (repost) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- (sort of urgent) gstreamer-plugins-good (repost) (more details about affected versions -- final version) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Re: CVE id request: php5 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE Request (trickle) (Josh Bressers <bressers@...hat.com>)

January 30 (2 messages)

CVE Request - php (PHP BZ#27421) (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnu… (Jan Lieskovsky <jlieskov@...hat.com>)

89 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.