oss-security mailing list

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2010/02

Messages by day:

February 1 (8 messages)

CVE request - kernel: DoS on x86_64 (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389 (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- Squid -- SQUID-2010_1.txt (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- OCSNG_UNIX_SERVER-1.02.2 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request - kernel: DoS on x86_64 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- Squid -- SQUID-2010_1.txt (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- OCSNG_UNIX_SERVER-1.02.2 (Josh Bressers <bressers@...hat.com>)
lighttpd: slow request dos/oom attack [CVE-2010-0295] (Stefan Bühler <lighttpd@...uehler.de>)

February 2 (4 messages)

CVE request - kvm: cat /dev/port in the guest can cause host DoS (Eugene Teo <eugeneteo@...nel.sg>)
KVM possible security issues fixed (Thomas Biege <thomas@...e.de>)
Re: KVM possible security issues fixed (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS (Josh Bressers <bressers@...hat.com>)

February 3 (4 messages)

CVE request: kernel OOM/crash in drivers/connector (Marcus Meissner <meissner@...e.de>)
CVE Request -- GMime-2.4.15 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: kernel OOM/crash in drivers/connector (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- GMime-2.4.15 (Josh Bressers <bressers@...hat.com>)

February 4 (9 messages)

Re: CVE request - kernel: DoS on x86_64 (dann frazier <dannf@...ian.org>)
Re: CVE request - kernel: DoS on x86_64 (Eugene Teo <eugene@...hat.com>)
Re: KVM possible security issues fixed (Eren Türkay <eren@...dus.org.tr>)
CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) (Matthias Andree <matthias.andree@....de>)
Re: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) (Nico Golde <oss-security+ml@...lde.de>)
Re: KVM possible security issues fixed (Josh Bressers <bressers@...hat.com>)
CVE-2009-3297 clarification needed - samba/fuse/ncpfs symlinks ("Steven M. Christey" <coley@...us.mitre.org>)
systemtap DoS issue (CVE-2010-0411) (Vincent Danen <vdanen@...hat.com>)
Re: CVE request - kernel: DoS on x86_64 (dann frazier <dannf@...nf.org>)

February 5 (4 messages)

Samba symlink 0day flaw (Josh Bressers <bressers@...hat.com>)
Re: Samba symlink 0day flaw (Nico Golde <oss-security+ml@...lde.de>)
Re: Samba symlink 0day flaw (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: Samba symlink 0day flaw (Simo Sorce <ssorce@...hat.com>)

February 6 (3 messages)

Re: Samba symlink 0day flaw (Eren Türkay <eren@...dus.org.tr>)
Re: Samba symlink 0day flaw (Nico Golde <oss-security+ml@...lde.de>)
Re: Samba symlink 0day flaw (Yves-Alexis Perez <corsac@...ian.org>)

February 7 (3 messages)

CVE request: information leak / potential crash in sys_move_pages (Marcus Meissner <meissner@...e.de>)
Re: CVE request: information leak / potential crash in sys_move_pages (Eugene Teo <eugeneteo@...nel.sg>)
Re: Samba symlink 0day flaw (Nico Golde <oss-security+ml@...lde.de>)

February 8 (3 messages)

CVE request - kernel: ima: fix null pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request: information leak / potential crash in sys_move_pages (Marcus Meissner <meissner@...e.de>)
gnome-screensaver vulnerability (CVE-2010-0414) (Vincent Danen <vdanen@...hat.com>)

February 9 (11 messages)

CVE request - kernel: race in ptrace (Eugene Teo <eugeneteo@...nel.sg>)
CVE request - kernel: futex: Handle user space corruption gracefully (Eugene Teo <eugeneteo@...nel.sg>)
Fwd: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) ("Matthias Andree" <matthias.andree@....de>)
Re: CVE request - fetchmail 6.3.11-.13 heap overflow in verbose X.509 cert display (only printable chars) (Tomas Hoger <thoger@...hat.com>)
CVE Request -- cURL/libCURL 7.20.0 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Greg KH <greg@...ah.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Mark J Cox <mjc@...hat.com>)
Re: CVE request - kernel: ima: fix null pointer dereference (Eugene Teo <eugene@...hat.com>)
2 more messages

February 10 (3 messages)

CVE request - coppermine gallery <1.4.26 code execution vulnerability (Hanno Böck <hanno@...eck.de>)
CVE Request -- ModSecurity - v2.5.12 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request - kernel: race in ptrace (Eugene Teo <eugene@...hat.com>)

February 11 (2 messages)

CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: futex: Handle user space corruption gracefully ("Steven M. Christey" <coley@...us.mitre.org>)

February 12 (5 messages)

CVE Request: gnome-screensaver termination by pressing "Enter" (Marcus Meissner <meissner@...e.de>)
CVE Request: KDE screensaver unlock issue similar to GNOME one (Marcus Meissner <meissner@...e.de>)
Re: CVE Request: KDE screensaver unlock issue similar to GNOME one (Jeff Mitchell <mitchell@....org>)
Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one (Jeff Mitchell <mitchell@....org>)
Re: gnome-screensaver vulnerability (CVE-2010-0414) (Vincent Danen <vdanen@...hat.com>)

February 15 (5 messages)

Re: CVE request - kernel: race in ptrace (Eugene Teo <eugene@...hat.com>)
CVE Request -- MoinMoin -- 1.8.7 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- MoinMoin -- 1.8.7 (Thomas Waldmann <tw-public@....de>)
Re: CVE Request -- MoinMoin -- 1.8.7 (Thomas Waldmann <tw-public@....de>)
CouchDB: Don't use a RESTful API from the browser, please (Florian Weimer <fw@...eb.enyo.de>)

February 17 (3 messages)

CVE request: kernel information leak via userspace USB interface (Marcus Meissner <meissner@...e.de>)
additional memory leak in USB userspace handling (Marcus Meissner <meissner@...e.de>)
Re: Re: CVE Request: KDE screensaver unlock issue similar to GNOME one (Jeff Mitchell <mitchell@....org>)

February 18 (7 messages)

Re: CVE request: kernel information leak via userspace USB interface (Eugene Teo <eugene@...hat.com>)
Re: CVE request - kernel: DoS on x86_64 (Eugene Teo <eugene@...hat.com>)
CVE requests - kernel network vulns (Eugene Teo <eugene@...hat.com>)
Re: additional memory leak in USB userspace handling (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kernel information leak via userspace USB interface (Marcus Meissner <meissner@...e.de>)
Re: CVE request: kernel information leak via userspace USB interface ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel information leak via userspace USB interface ("Bernhard R. Link" <brlink@...ian.org>)

February 19 (1 message)

Re: CVE request: kernel information leak via userspace USB interface (Eugene Teo <eugene@...hat.com>)

February 21 (2 messages)

Re: CVE Request -- MoinMoin -- 1.8.7 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- MoinMoin -- 1.8.7 ("Steven M. Christey" <coley@...us.mitre.org>)

February 22 (7 messages)

lwn: 2.6.32.9 Release notes (Eugene Teo <eugene@...hat.com>)
CVE request: kernel: ALSA: hda-intel: Avoid divide by zero crash (Eugene Teo <eugeneteo@...nel.sg>)
CVE-2005-4886 assigned to old remote oops (Mark J Cox <mjc@...hat.com>)
WANTED: mikmod patches (Thomas Biege <thomas@...e.de>)
Re: CVE request - coppermine gallery <1.4.26 code execution vulnerability (Henri Salo <henri@...v.fi>)
CVE request: wordpress < 2.9.2 information leak (Hanno Böck <hanno@...eck.de>)
Re: CVE request: wordpress < 2.9.2 information leak ("Steven M. Christey" <coley@...us.mitre.org>)

February 23 (4 messages)

CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check ("Todd C. Miller" <Todd.Miller@...rtesan.com>)
CVE request: typo3 below 4.3.2 and 4.2.12 Authentication bypass, 2x XSS, Information disclosure (Hanno Böck <hanno@...eck.de>)
CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jan Lieskovsky <jlieskov@...hat.com>)

February 24 (5 messages)

kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only) (Eugene Teo <eugeneteo@...nel.sg>)
kernel: RTO (Retransmission Timeouts) Remote DoS (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: NFS DoS related to "automount" symlinks (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jamie Strandboge <jamie@...onical.com>)
Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jan Lieskovsky <jlieskov@...hat.com>)

February 25 (3 messages)

incorrect description for CVE-2010-0412 systemtap flaw (Vincent Danen <vdanen@...hat.com>)
Re: Re: CVE assignment notification -- CVE-2010-0426 -- sudo improper pseudocommands file path check (Jamie Strandboge <jamie@...onical.com>)
Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set (Jamie Strandboge <jamie@...onical.com>)

96 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.