oss-security mailing list - 2009/06

Follow us on Twitter or via RSS feeds with tweets or complete announcement texts or excerpts

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/06

Messages by day:

June 2 (4 messages)

Re: Two OpenSSL DTLS remote DoS (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: kernel: splice local denial of service (Miklos Szeredi <mszeredi@...e.cz>)
CVE request: two denial of service bugs in strongswan (Thomas Biege <thomas@...e.de>)
CVE Request - Ghostscript -- Multiple NULL ptr dereference flaws in JBIG2 decoder proved by PoC for CVE-2009-0658 (Jan Lieskovsky <jlieskov@...hat.com>)

June 3 (9 messages)

Re: CVE request: kernel: splice local denial of service (Eugene Teo <eugene@...hat.com>)
CVE-2009-1385 kernel: e1000_clean_rx_irq() denial of service (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: sparc64: Fix crash with /proc/iomem (Eugene Teo <eugene@...hat.com>)
CVE request: "billion laughs" attack against Apache APR (Joe Orton <jorton@...hat.com>)
CVE Request: ModSecurity / apache2 mod_security 2.5.9 (Marcus Meissner <meissner@...e.de>)
CVE Request: PDF XSS in ModSecurity / apache2 mod_security 2.5.8 (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: PDF XSS in ModSecurity / apache2 mod_security 2.5.8 (Tomas Hoger <thoger@...hat.com>)
Re: CVE Request: PDF XSS in ModSecurity / apache2 mod_security 2.5.8 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: ModSecurity / apache2 mod_security 2.5.9 ("Steven M. Christey" <coley@...us.mitre.org>)

June 4 (2 messages)

CVE id request: dokuwiki (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (gstreamer-plugins-good) (Josh Bressers <bressers@...hat.com>)

June 6 (13 messages)

CVE Request (apr-util) (Josh Bressers <bressers@...hat.com>)
Re: CVE request: "billion laughs" attack against Apache APR (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage() ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (gstreamer-plugins-good) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: drupal ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (apr-util) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id rquest: xfig insecure tmp files ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: splice local denial of service ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: two denial of service bugs in strongswan ("Steven M. Christey" <coley@...us.mitre.org>)
4 more messages

June 7 (1 message)

Re: Re: CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame size (Willy Tarreau <w@....eu>)

June 8 (2 messages)

Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage() (Thomas Biege <thomas@...e.de>)
xfig-3.2.5 diff (CVE-2009-1962) (Sebastian Krahmer <krahmer@...e.de>)

June 9 (1 message)

Predictable Math.random() in browsers (Florian Weimer <fw@...eb.enyo.de>)

June 10 (3 messages)

CVE-2009-1389 kernel: r8169: fix crash when large packets are received (Eugene Teo <eugene@...hat.com>)
Mutt 1.5.19 SSL chain verification flaw (Tomas Hoger <thoger@...hat.com>)
Re: xfig-3.2.5 diff (CVE-2009-1962) (Tomas Hoger <thoger@...hat.com>)

June 11 (1 message)

Re: CVE request: "billion laughs" attack against Apache APR (Joe Orton <jorton@...che.org>)

June 12 (3 messages)

Git daemon infinite loop (Tomas Hoger <thoger@...hat.com>)
Re: xfig-3.2.5 diff (CVE-2009-1962) (Nico Golde <oss-security+ml@...lde.de>)
Re: xfig-3.2.5 diff (CVE-2009-1962) (Tomas Hoger <thoger@...hat.com>)

June 15 (1 message)

CVE request for old Apache 2.2 issue (Stefan Fritsch <sf@...itsch.de>)

June 17 (3 messages)

clamav CVE ids? (Marcus Meissner <meissner@...e.de>)
Re: clamav CVE ids? (Tavis Ormandy <taviso@....lonestar.org>)
Re: clamav CVE ids? (Hanno Böck <hanno@...eck.de>)

June 19 (2 messages)

libpng-1.2.37 fixes a security issue ("Patrick J. Volkerding" <security@...ckware.com>)
Re: libpng-1.2.37 fixes a security issue ("Michael S. Gilbert" <michael.s.gilbert@...il.com>)

June 21 (1 message)

CVE id request: strongswan (Nico Golde <oss-security+ml@...lde.de>)

June 22 (3 messages)

libtiff buffer underflow in LZWDecodeCompat (Kees Cook <kees@...ntu.com>)
incorrect upstream fix for CVE-2009-0840 (mapserver) (Nico Golde <oss-security+ml@...lde.de>)
Re: incorrect upstream fix for CVE-2009-0840 (mapserver) (Nico Golde <oss-security+ml@...lde.de>)

June 23 (1 message)

Re: libtiff buffer underflow in LZWDecodeCompat (Vincent Danen <vdanen@...hat.com>)

June 24 (1 message)

Re: CVE id request: strongswan ("Steven M. Christey" <coley@...us.mitre.org>)

June 25 (1 message)

Re: incorrect upstream fix for CVE-2009-0840 (mapserver) (Alan Boudreault <aboudreault@...gears.com>)

June 29 (5 messages)

nagios: remote code execution (Tomas Hoger <thoger@...hat.com>)
CVE id request: compface (Nico Golde <oss-security+ml@...lde.de>)
CVE id request: nagios (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: compface (Tomas Hoger <thoger@...hat.com>)
CVE Request -- libtiff [was: Re: libtiff buffer underflow in LZWDecodeCompat] (Jan Lieskovsky <jlieskov@...hat.com>)

June 30 (2 messages)

CVE Request: kernel: kvm: failure to validate cr3 after KVM_SET_SREGS (Eugene Teo <eugene@...hat.com>)
CVE assignment notification -- CVE-2009-1889 Pidgin: DoS (OOM, crash) via specially-crafted ICQWebMessage (Jan Lieskovsky <jlieskov@...hat.com>)

59 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ