oss-security mailing list

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/05

Messages by day:

May 1 (5 messages)

CVE request (sort of): Quagga BGP crasher (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request (sort of): Quagga BGP crasher (Jon Oberheide <jon@...rheide.org>)
CVE Request: clamav-milter on Ubuntu (Jamie Strandboge <jamie@...onical.com>)
Re: CVE request (sort of): Quagga BGP crasher (Florian Weimer <fw@...eb.enyo.de>)
CVE request: file security issue (Vincent Danen <vdanen@...hat.com>)

May 4 (4 messages)

CVE-2009-1184 selinux: skipped node/port send checks in the compat_net=1 case (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: ptrace_attach: fix the usage of ->cred_exec_mutex (Eugene Teo <eugene@...hat.com>)
Re: ipsec-tools 0.7.2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request (sort of): Quagga BGP crasher (Florian Weimer <fw@...eb.enyo.de>)

May 5 (4 messages)

Old cscope buffer overflow (Tomas Hoger <thoger@...hat.com>)
CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) (Vincent Danen <vdanen@...hat.com>)

May 6 (10 messages)

CVE request: moin (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE id request: coccinelle (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: oss-security CNA ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: file security issue ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Old cscope buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: ipsec-tools 0.7.2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: Debian/Ubuntu specific issue in xvfb-run (xorg) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request (sort of): Quagga BGP crasher ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Old cscope buffer overflow (Tomas Hoger <thoger@...hat.com>)
Re: Old cscope buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)

May 7 (1 message)

[oCERT-2009-001] Pango integer overflow in heap allocation size calculations (Will Drewry <redpig@...rt.org>)

May 8 (1 message)

OpenSC 0.11.8 released with security update (Andreas Jellinghaus <aj@...geon.inka.de>)

May 11 (1 message)

[oCERT-2009-004] AjaxTerm session id collision (Andrea Barisani <lcars@...rt.org>)

May 12 (6 messages)

CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution (Hanno Böck <hanno@...eck.de>)
CVE Request -- kdebase4 (konqueror) -- Incomplete SSL Certificate support in KDE4 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: ipsec-tools 0.7.2 (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Squirrelmail < 1.4.18 XSS, session fixation, server-side code execution (Hanno Böck <hanno@...eck.de>)
CVE Request (evolution) (Josh Bressers <bressers@...hat.com>)

May 13 (6 messages)

php mb_ereg_replace() (Sebastian Krahmer <krahmer@...e.de>)
CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission (Eugene Teo <eugene@...hat.com>)
Re: php mb_ereg_replace() (Christian Hoffmann <hoffie@...too.org>)
Re: php mb_ereg_replace() (Oden Eriksson <oeriksson@...driva.com>)
Re: php mb_ereg_replace() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: php mb_ereg_replace() (Christian Hoffmann <hoffie@...too.org>)

May 14 (6 messages)

Update - Re: CVE request? buffer overflow in CIFS in 2.6.* (Eugene Teo <eugene@...hat.com>)
CVE Request: XEN local denial of service (Marcus Meissner <meissner@...e.de>)
Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* (Jeff Layton <jlayton@...hat.com>)
Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* ("Steven M. Christey" <coley@...us.mitre.org>)
utmp reliability? (Marcus Meissner <meissner@...e.de>)
CVE Request for libsndfile (Jamie Strandboge <jamie@...onical.com>)

May 15 (7 messages)

CVE Request for cacti (Henri Salo <henri@...v.fi>)
Re: Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* (Marcus Meissner <meissner@...e.de>)
CVE Request -- Eggdrop (Jan Lieskovsky <jlieskov@...hat.com>)
ptrace race CVE ID? ("Michael K. Johnson" <johnsonm@...th.com>)
Re: ptrace race CVE ID? (dann frazier <dannf@...ian.org>)
Re: ptrace race CVE ID? ("Michael K. Johnson" <johnsonm@...th.com>)
Re: ptrace race CVE ID? ("Steven M. Christey" <coley@...us.mitre.org>)

May 18 (5 messages)

Two OpenSSL DTLS remote DoS (Mark J Cox <mjc@...hat.com>)
CVE id request: slim (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE Request for cacti (Robert Buchholz <rbu@...too.org>)
Re: Two OpenSSL DTLS remote DoS (Mark J Cox <mjc@...hat.com>)
Re: CVE Request for cacti (Henri Salo <henri@...v.fi>)

May 19 (1 message)

CVE id request: nsd (Nico Golde <oss-security+ml@...lde.de>)

May 20 (3 messages)

Re: CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission (Eugene Teo <eugene@...hat.com>)
CVE request: coppermine <= 1.4.22 (Hanno Böck <hanno@...eck.de>)
CVE request: ctorrent (Vincent Danen <vdanen@...hat.com>)

May 21 (9 messages)

CVE request: transmission <1.61 CSRF (Marcus Meissner <meissner@...e.de>)
Re: CVE Request for cacti ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: moin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- kdebase4 (konqueror) -- Incomplete SSL Certificate support in KDE4 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: clamav-milter on Ubuntu ("Steven M. Christey" <coley@...us.mitre.org>)
Linux kernels and security issues? (Hanno Böck <hanno@...eck.de>)
Re: CVE Request -- libmodplug ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- libmodplug ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission ("Steven M. Christey" <coley@...us.mitre.org>)

May 22 (14 messages)

Re: CVE request: ctorrent ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: transmission <1.61 CSRF ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: nsd ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: slim ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: XEN local denial of service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (evolution) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: coccinelle ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: slim (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request: XEN local denial of service (Eugene Teo <eugene@...hat.com>)
5 more messages

May 25 (2 messages)

Re: CVE Request for libsndfile (Robert Buchholz <rbu@...too.org>)
CVE-2009-0161 dupe of CVE-2009-0642 (Nico Golde <oss-security+ml@...lde.de>)

May 26 (2 messages)

Re: CVE-2009-0161 dupe of CVE-2009-0642 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request for libsndfile ("Steven M. Christey" <coley@...us.mitre.org>)

May 27 (1 message)

CVE assignment notification (pam_krb5 CVE-2009-1384) (Jan Lieskovsky <jlieskov@...hat.com>)

May 28 (2 messages)

CVE Request -- ImageMagick -- Integer overflow in XMakeImage() (Jan Lieskovsky <jlieskov@...hat.com>)
CVE id request: drupal (Nico Golde <oss-security+ml@...lde.de>)

May 29 (5 messages)

CVE request: Wireshark ("Stefan Behte" <s.behte@...iel.com>)
CVE request: kernel: splice local denial of service (Marcus Meissner <meissner@...e.de>)
CVE Request (irssi) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: Wireshark ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- Eggdrop ("Steven M. Christey" <coley@...us.mitre.org>)

May 30 (1 message)

Re: CVE request: kernel: splice local denial of service (Jon Oberheide <jon@...rheide.org>)

96 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.