oss-security mailing list

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/04

Messages by day:

April 1 (12 messages)

Re: CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: < tikiwiki 2.3: XSS ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: KVM: VMX: Dont allow uninhibited access to EFER on i386 (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: udp: Wrong locking code in udp seq_file infrastructure (Eugene Teo <eugene@...hat.com>)
CVE Request: Wireshark DoS (Pinar Yanardag <pinar@...dus.org.tr>)
CVE id rquest: xfig insecure tmp files (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request -- bibtex, pam_ssh (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: PHP 5.2.9 (Tomas Hoger <thoger@...hat.com>)
3 more messages

April 2 (3 messages)

Re: CVE request -- ghostscript (Robert Buchholz <rbu@...too.org>)
Re: CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen (Tomas Hoger <thoger@...hat.com>)
Re: CVE request -- ghostscript (Jan Lieskovsky <jlieskov@...hat.com>)

April 3 (1 message)

Re: CVE request -- Linux kernel irda driver buffer (security curmudgeon <jericho@...rition.org>)

April 4 (1 message)

CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)

April 6 (2 messages)

CVE request: kernel: NFS: Fix an Oops in encode_lookup() (Eugene Teo <eugene@...hat.com>)
CVE Request (xine-lib) (Josh Bressers <bressers@...hat.com>)

April 7 (7 messages)

CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)
CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Thomas Biege <thomas@...e.de>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Steven French <sfrench@...ibm.com>)

April 8 (11 messages)

Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Nico Golde <oss-security+ml@...lde.de>)
CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Eugene Teo <eugene@...hat.com>)
Re: (Sort of urgent) CVE request -- ghostscript (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Willy Tarreau <w@....eu>)
Re: (Sort of urgent) CVE request -- ghostscript ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (xine-lib) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request -- bibtex, pam_ssh ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: PHP 5.2.9 ("Steven M. Christey" <coley@...us.mitre.org>)
2 more messages

April 9 (5 messages)

Re: CVE request: PHP 5.2.9 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Hanno Böck <hanno@...eck.de>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Marcus Meissner <meissner@...e.de>)
Solaris/OpenSolaris xscreensaver issue (CVE-2009-1276) (Vincent Danen <vdanen@...hat.com>)

April 11 (1 message)

CVE request: mpg123 Signedness Vulnerability (Alex Legler <a3li@...too.org>)

April 13 (2 messages)

CVE request: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow (Hanno Böck <hanno@...eck.de>)
CVE request: silverstripe - two sql injections (Hanno Böck <hanno@...eck.de>)

April 14 (2 messages)

Re: CVE request: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: PHP 5.2.9 (Christian Hoffmann <hoffie@...too.org>)

April 15 (7 messages)

Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))

April 16 (13 messages)

Re: Re: Some fun with tcp_wrappers ("Steven M. Christey" <coley@...us.mitre.org>)
CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (Eugene Teo <eugene@...hat.com>)
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
CVE request: phpmyadmin < 3.1.3.2 (Hanno Böck <hanno@...eck.de>)
Re: CVE request: phpmyadmin < 3.1.3.2 (Hanno Böck <hanno@...eck.de>)
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (wietse@...cupine.org (Wietse Venema))
Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)
4 more messages

April 17 (5 messages)

Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: NFS: Fix an Oops in encode_lookup() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: apt (Jamie Strandboge <jamie@...onical.com>)

April 20 (2 messages)

CVE request: kernel: cifs: fix unicode string area word alignment in session setup (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: ipv6: null pointer dereference in __inet6_check_established() (Eugene Teo <eugene@...hat.com>)

April 21 (6 messages)

Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)
CVE Request -- libmodplug (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE request: apt ("Steven M. Christey" <coley@...us.mitre.org>)

April 22 (3 messages)

CVE id request: amule (Nico Golde <oss-security+ml@...lde.de>)
CVE-2009-1192 kernel: agp: zero pages before sending to userspace (Eugene Teo <eugene@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive (Marcus Meissner <meissner@...e.de>)

April 23 (10 messages)

Re: CVE request: kernel: ipv6: null pointer dereference in __inet6_check_established() (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: missing capabilities in fs_mask (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel: missing capabilities in fs_mask (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Willy Tarreau <w@....eu>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Eugene Teo <eugene@...hat.com>)
Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Marcus Meissner <meissner@...e.de>)
CVE-2009-1191: mod_proxy_ajp information disclosure vulnerability (Vincent Danen <vdanen@...hat.com>)
Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive ("Steven M. Christey" <coley@...us.mitre.org>)

April 24 (6 messages)

Re: CVE request: kernel: missing capabilities in fs_mask ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: ipv6: null pointer dereference in __inet6_check_established() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: mpg123 Signedness Vulnerability ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: PHP 5.2.9 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: Some fun with tcp_wrappers ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request? buffer overflow in CIFS in 2.6.* ("Steven M. Christey" <coley@...us.mitre.org>)

April 25 (4 messages)

Re: CVE request: kernel: missing capabilities in fs_mask (Eugene Teo <eugene@...hat.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
VDBs (was Re: CVE request: kernel: missing capabilities in fs_mask) (security curmudgeon <jericho@...rition.org>)
CVE-2008-5619 update (Raphael Geissert <atomo64+debian@...il.com>)

April 27 (3 messages)

Re: CVE request? buffer overflow in CIFS in 2.6.* (Mark J Cox <mjc@...hat.com>)
Re: CVE Request -- libmodplug (Jan Lieskovsky <jlieskov@...hat.com>)
Re: oss-security CNA (Josh Bressers <bressers@...hat.com>)

April 28 (1 message)

Re: Re: Some fun with tcp_wrappers (Tomas Hoger <thoger@...hat.com>)

April 29 (7 messages)

Re: CVE request? buffer overflow in CIFS in 2.6.* (dann frazier <dannf@...ian.org>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Steven French <sfrench@...ibm.com>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (dann frazier <dannf@...ian.org>)
Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
Re: CVE Request -- libmodplug (Jan Lieskovsky <jlieskov@...hat.com>)
ipsec-tools 0.7.2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check (Greg KH <greg@...ah.com>)

114 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.