oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 6	² 6	³ 3	⁴ 2	⁵
⁶ 2	⁷ 1	⁸	⁹	¹⁰	¹¹	¹²
¹³ 3	¹⁴ 3	¹⁵ 3	¹⁶ 4	¹⁷ 1	¹⁸ 1	¹⁹ 1
²⁰ 11	²¹ 5	²² 5	²³	²⁴ 5	²⁵ 3	²⁶ 3
²⁷ 4	²⁸ 8	²⁹ 4	³⁰	³¹

Messages by day:

July 1 (6 messages)

Re: incorrect upstream fix for CVE-2009-0840 (mapserver) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- libtiff [was: Re: libtiff buffer underflow in LZWDecodeCompat] ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: compface ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: kernel: kvm: failure to validate cr3 after KVM_SET_SREGS ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: nagios ("Steven M. Christey" <coley@...us.mitre.org>)
Re: incorrect upstream fix for CVE-2009-0840 (mapserver) (Nico Golde <oss-security+ml@...lde.de>)

July 2 (6 messages)

CVE id request: drupal (Nico Golde <oss-security+ml@...lde.de>)
CVE request: ruby on rails authenticate_with_http_digest bypass (Thomas Biege <thomas@...e.de>)
CVE-2009-1388 kernel: do_coredump() vs ptrace_start() deadlock (Eugene Teo <eugene@...hat.com>)
[oCERT-2009-009] CamlImages integer overflows (Andrea Barisani <lcars@...rt.org>)
Re: [oCERT-2009-009] CamlImages integer overflows (Robert Buchholz <rbu@...too.org>)
Re: [oCERT-2009-009] CamlImages integer overflows (Andrea Barisani <lcars@...rt.org>)

July 3 (3 messages)

Re: CVE id request: compface (Alex Legler <a3li@...too.org>)
[oCERT-2009-007] FCKeditor input sanitization errors (Andrea Barisani <lcars@...rt.org>)
[oCERT-2009-008] Dillo integer overflow (Andrea Barisani <lcars@...rt.org>)

July 4 (2 messages)

Re: [oCERT-2009-009] CamlImages integer overflows (Robert Buchholz <rbu@...too.org>)
Re: [oCERT-2009-009] CamlImages integer overflows (Andrea Barisani <lcars@...rt.org>)

July 6 (2 messages)

CVE id request: xcftools (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: CVE id request: xcftools (Steffen Joeris <steffen.joeris@...lelinux.de>)

July 7 (1 message)

Re: nagios: remote code execution ("Steven M. Christey" <coley@...us.mitre.org>)

July 13 (3 messages)

CVE Request - MySQL <= 5.0.45 (Jan Lieskovsky <jlieskov@...hat.com>)
[oCERT-2009-012] libtiff tools integer overflows (Andrea Barisani <lcars@...rt.org>)
[oCERT-2009-010] mimeTeX and mathTeX buffer overflows and command injection (Andrea Barisani <lcars@...rt.org>)

July 14 (3 messages)

CVE: Request Firefox 3.5 (Stefan Behte <Stefan.Behte@....net>)
Re: CVE Request (syslog-ng) (Solar Designer <solar@...nwall.com>)
Fixing the XML signature HMAC truncation authentication bypass (Florian Weimer <fw@...eb.enyo.de>)

July 15 (3 messages)

Re: Fixing the XML signature HMAC truncation authentication bypass (Robert Buchholz <rbu@...too.org>)
Re: Fixing the XML signature HMAC truncation authentication bypass (Robert Buchholz <rbu@...too.org>)
Re: Fixing the XML signature HMAC truncation authentication bypass (Robert Buchholz <rbu@...too.org>)

July 16 (4 messages)

CVE-2009-1895 kernel: personality: fix PER_CLEAR_ON_SETID (Eugene Teo <eugene@...hat.com>)
CVE request: XEmacs Multiple Integer Overflows (Alex Legler <a3li@...too.org>)
Re: CVE-2009-1895 kernel: personality: fix PER_CLEAR_ON_SETID (Marcus Meissner <meissner@...e.de>)
[oCERT-2009-011] Android improper camera and audio permission verification (Andrea Barisani <lcars@...rt.org>)

July 17 (1 message)

Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (yersinia <yersinia.spiros@...il.com>)

July 18 (1 message)

CVE Request -- HTMLDOC (Jan Lieskovsky <jlieskov@...hat.com>)

July 19 (1 message)

Re: CVE: Request Firefox 3.5 (Reed Loden <reed@...dloden.com>)

July 20 (11 messages)

Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Marcus Meissner <meissner@...e.de>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Solar Designer <solar@...nwall.com>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Marcus Meissner <meissner@...e.de>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Solar Designer <solar@...nwall.com>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (yersinia <yersinia.spiros@...il.com>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Solar Designer <solar@...nwall.com>)
Re: [Dailydave] Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (spender@...ecurity.net (Brad Spengler))
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Solar Designer <solar@...nwall.com>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Greg KH <greg@...ah.com>)
squid DoS in external auth header parser (Vincent Danen <vdanen@...hat.com>)
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Julien Tinnes <jt@....org>)

July 21 (5 messages)

CVE Request -- WordPress (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: Wireshark <1.2.1 Multiple DoS (Alex Legler <a3li@...too.org>)
CVE Request -- RubyGems (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- RubyGems (Alex Legler <a3li@...too.org>)
CVE Request -- znc (Reed Loden <reed@...dloden.com>)

July 22 (5 messages)

Coverity / kernel issues (Marcus Meissner <meissner@...e.de>)
Re: CVE request: Wireshark <1.2.1 Multiple DoS (Jan Lieskovsky <jlieskov@...hat.com>)
PHP security fix in 5.2.10 (Tomas Hoger <thoger@...hat.com>)
Re: [Dailydave] Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (Todd Sabin <tsabin@...online.net>)
Re: Re: [Dailydave] Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable (yersinia <yersinia.spiros@...il.com>)

July 24 (5 messages)

md raid null ptr dereference (when sysfs is writable) (Marcus Meissner <meissner@...e.de>)
CVE duplicate notification (CVE-2009-2580 to be duplicate of CVE-2009-1862) (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- Ocsinventory-Agent (Jan Lieskovsky <jlieskov@...hat.com>)
nilfs-utils privilege escalation (Tomas Hoger <thoger@...hat.com>)
CVE Request -- Drupal 6 Date / Calendar XSS vulnerability (Jan Lieskovsky <jlieskov@...hat.com>)

July 25 (3 messages)

Re: CVE Request -- Ocsinventory-Agent (Nico Golde <oss-security+ml@...lde.de>)
camlimages: Integer overflows in GIF and JPEG readers (Robert Buchholz <rbu@...too.org>)
Re: CVE Request -- HTMLDOC (Nico Golde <oss-security+ml@...lde.de>)

July 26 (3 messages)

Re: md raid null ptr dereference (when sysfs is writable) (Eugene Teo <eugene@...hat.com>)
Re: CVE Request -- HTMLDOC (Alex Legler <a3li@...too.org>)
CVE id request: mediawiki (Nico Golde <oss-security+ml@...lde.de>)

July 27 (4 messages)

CVE id request: strongswan (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: CVE request: Wireshark <1.2.1 Multiple DoS (Jan Lieskovsky <jlieskov@...hat.com>)
squid 3.x vulnerabilities (Vincent Danen <vdanen@...hat.com>)
CVE id request: mplayer and vlc (Nico Golde <oss-security+ml@...lde.de>)

July 28 (8 messages)

Apache 2.2 HTTP Basic Auth bypass (Solar Designer <solar@...nwall.com>)
Re: Apache 2.2 HTTP Basic Auth bypass (ithilgore <ithilgore.ryu.l@...il.com>)
Re: Apache 2.2 HTTP Basic Auth bypass (Solar Designer <solar@...nwall.com>)
Re: squid 3.x vulnerabilities ("Steven M. Christey" <coley@...us.mitre.org>)
debian bug report on bind9 DoS (Vincent Danen <vdanen@...hat.com>)
Re: debian bug report on bind9 DoS (Thijs Kinkhorst <thijs@...ian.org>)
Re: debian bug report on bind9 DoS (Vincent Danen <vdanen@...hat.com>)
Re: debian bug report on bind9 DoS (Robert Buchholz <rbu@...too.org>)

July 29 (4 messages)

Re: debian bug report on bind9 DoS (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (django) (Josh Bressers <bressers@...hat.com>)
Re: debian bug report on bind9 DoS (Solar Designer <solar@...nwall.com>)
Re: debian bug report on bind9 DoS (Solar Designer <solar@...nwall.com>)

84 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.