oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2008/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 2	² 1
³ 6	⁴ 4	⁵ 5	⁶ 2	⁷ 1	⁸	⁹
¹⁰ 14	¹¹ 12	¹² 3	¹³ 3	¹⁴ 3	¹⁵ 1	¹⁶
¹⁷ 6	¹⁸ 3	¹⁹ 4	²⁰ 7	²¹ 22	²² 2	²³
²⁴ 4	²⁵ 4	²⁶ 4	²⁷ 2	²⁸ 10	²⁹ 1	³⁰ 2

Messages by day:

November 1 (2 messages)

CVE-2008-4796: snoopy triage (Steffen Joeris <steffen.joeris@...lelinux.de>)
CVE request (Fwd: MyBB 1.4.2: Multiple Vulnerabilties) (Hanno Böck <hanno@...eck.de>)

November 2 (1 message)

CVE id request: htop (Nico Golde <oss-security+ml@...lde.de>)

November 3 (6 messages)

Re: CVE-2008-4619 / milw0rm6775 (Tomas Hoger <thoger@...hat.com>)
CVE requests: kernel: hfsplus-related bugs (Eugene Teo <eteo@...hat.com>)
CVE request - uw-imap (Tomas Hoger <thoger@...hat.com>)
Re: CVE request - uw-imap (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request - uw-imap (Nico Golde <oss-security+ml@...lde.de>)
CVE Request (libsamplerate) (Pınar Yanardağ <pinar@...dus.org.tr>)

November 4 (4 messages)

Re: CVE-2008-4796: snoopy triage ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Regarding SA32329 (Smarty "_expand_quoted_text()" Security Bypass) (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: Regarding SA32329 (Smarty "_expand_quoted_text()" Security Bypass) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (dovecot) (Nico Golde <oss-security+ml@...lde.de>)

November 5 (5 messages)

CVE request: libcdaudio (Thomas Biege <thomas@...e.de>)
CVE Request - Python string expandtabs (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request - Python string expandtabs ("Chris Evans" <scarybeasts@...il.com>)
VideoLAN security advisory 0810 (Rémi Denis-Courmont <rem@...eolan.org>)
CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)

November 6 (2 messages)

CVE request: kernel: Unix sockets kernel panic ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: Nagios (two issues) (Andreas Ericsson <ae@....se>)

November 7 (1 message)

Re: CVE request: libcdaudio (Tomas Hoger <thoger@...hat.com>)

November 10 (14 messages)

Re: CVE requests: kernel: hfsplus-related bugs (Eugene Teo <eteo@...hat.com>)
Re: CVE requests: kernel: hfsplus-related bugs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requests: kernel: hfsplus-related bugs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request - Python string expandtabs ("Will Drewry" <redpig@...rt.org>)
Re: CVE request: libcdaudio ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requests: kernel: hfsplus-related bugs ("Eugene Teo" <eugeneteo@...nel.sg>)
Re: CVE requests: kernel: hfsplus-related bugs ("Steven M. Christey" <coley@...us.mitre.org>)
GeSHi: Clarification about the recent security (non-)issues (SA32559) (Christian Hoffmann <hoffie@...too.org>)
Re: CVE Request - Python string expandtabs ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: Unix sockets kernel panic ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: Nagios (two issues) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: vlc (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)

November 11 (12 messages)

Re: CVE requests: kernel: hfsplus-related bugs (Eugene Teo <eteo@...hat.com>)
CVE request: kernel: libertas: fix buffer overrun ("Eugene Teo" <eugeneteo@...nel.sg>)
Re: CVE id request: vlc (Rémi Denis-Courmont <rem@...eolan.org>)
Re: CVE request: libcdaudio (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: libcdaudio (Thomas Biege <thomas@...e.de>)
Re: CVE request: libcdaudio (Thomas Biege <thomas@...e.de>)
Re: CVE request: kernel: Unix sockets kernel panic (Eugene Teo <eteo@...hat.com>)
Re: GeSHi: Clarification about the recent security (non-)issues (SA32559) (Tomas Hoger <thoger@...hat.com>)
Re: CVE request: Nagios (two issues) (Andreas Ericsson <ae@....se>)
Re: CVE id request: vlc ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requests: kernel: hfsplus-related bugs (Greg KH <greg@...ah.com>)
Re: CVE requests: kernel: hfsplus-related bugs (Greg KH <greg@...ah.com>)

November 12 (3 messages)

CVE Request -- OptiPNG (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request - Zope 2 - PythonScripts local DoS (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: Nagios (two issues) ("Steven M. Christey" <coley@...us.mitre.org>)

November 13 (3 messages)

CVE request: clamav get_unicode_name() off-by-one buffer overflow (Thomas Biege <thomas@...e.de>)
Re: CVE request: Nagios (two issues) (Andreas Ericsson <ae@....se>)
Re: CVE request: clamav get_unicode_name() off-by-one buffer overflow (Tomas Hoger <thoger@...hat.com>)

November 14 (3 messages)

CVE request: wordpress can be subject of delayed attacks via cookies (Raphael Geissert <atomo64+debian@...il.com>)
Re: CVE id request: htop (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE id request: htop ("Steven M. Christey" <coley@...us.mitre.org>)

November 15 (1 message)

Re: CVE id request: htop (Nico Golde <oss-security+ml@...lde.de>)

November 17 (6 messages)

Notes about CVE-2008-5033 ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE Request (syslog-ng) (Josh Bressers <bressers@...hat.com>)
Re: CVE Request (syslog-ng) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (syslog-ng) (Andreas Ericsson <ae@....se>)
Re: CVE Request (syslog-ng) (Solar Designer <solar@...nwall.com>)

November 18 (3 messages)

Re: CVE Request (syslog-ng) (Andreas Ericsson <ae@....se>)
CVE Request - ecryptfs-utils (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request (ssh) (Josh Bressers <bressers@...hat.com>)

November 19 (4 messages)

Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array (Eugene Teo <eteo@...hat.com>)
CVE Request: ruby on rails header injection (Ludwig Nussel <ludwig.nussel@...e.de>)
CVE request: CUPS DoS via RSS subscriptions (Kees Cook <kees@...ntu.com>)
Re: CVE request: CUPS DoS via RSS subscriptions (Josh Bressers <bressers@...hat.com>)

November 20 (7 messages)

Re: CVE request: CUPS DoS via RSS subscriptions (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE request: CUPS DoS via RSS subscriptions (Michael Sweet <mike@...ysw.com>)
Re: CVE request: CUPS DoS via RSS subscriptions (Eygene Ryabinkin <rea-sec@...elabs.ru>)
CVE id request: another geshi issue (was: GeSHi: Clarification about the recent security (non-)issues (SA32559)) (Nico Golde <oss-security+ml@...lde.de>)
CVE Request: imlib2 (Pınar Yanardağ <pinar@...dus.org.tr>)
Re: CVE Request: imlib2 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE request: CUPS DoS via RSS subscriptions (Michael R Sweet <mike@...ysw.com>)

November 21 (22 messages)

Re: CVE request: CUPS DoS via RSS subscriptions ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: clamav get_unicode_name() off-by-one buffer overflow ("Steven M. Christey" <coley@...us.mitre.org>)
Re: GeSHi: Clarification about the recent security (non-)issues (SA32559) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE id request: another geshi issue (was: GeSHi: Clarification about the recent security (non-)issues (SA32559)) ("Steven M. Christey" <coley@...us.mitre.…)
Re: CVE Request: imlib2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: imlib2 ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request - ecryptfs-utils ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request: ruby on rails header injection ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request (ssh) ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: wordpress can be subject of delayed attacks via cookies ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- OptiPNG ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: libertas: fix buffer overrun ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array ("Eugene Teo" <eugeneteo@...nel.sg>)
CVE request: no-ip DUC buffer overflow (Raphael Geissert <atomo64+debian@...il.com>)
CVE id request: chm2pdf insecure temporary files usage (Raphael Geissert <atomo64+debian@...il.com>)
Re: CVE request: CUPS DoS via RSS subscriptions (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request: imlib2 (Pınar Yanardağ <pinar@...dus.org.tr>)
Re: CVE Request - ecryptfs-utils (Marcus Meissner <meissner@...e.de>)
Re: CVE Request (ssh) (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE request: CUPS DoS via RSS subscriptions (Michael Sweet <mike@...ysw.com>)
Re: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array (Mauro Carvalho Chehab <mchehab@...hat.com>)

November 22 (2 messages)

Re: CVE request: kernel: Unix sockets kernel panic (dann frazier <dannf@...ian.org>)
xine-lib and ocert-2008-008 (Thomas Viehmann <tv@...mnet.de>)

November 24 (4 messages)

CVE Request -- wireshark (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request: VirtualBox tmp file issue (Ludwig Nussel <ludwig.nussel@...e.de>)
Re: xine-lib and ocert-2008-008 (Matthias Hopf <mhopf@...e.de>)
Re: CVE Request: VirtualBox tmp file issue (Moritz Muehlenhoff <jmm@...til.org>)

November 25 (4 messages)

Re: CVE Request -- wireshark (Pinar Yanardag <pinar@...dus.org.tr>)
Re: CVE request: cups - potential integer overflow in PNG image reader [was: CUPS DoS via RSS subscriptions] (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE request: cups - potential integer overflow in PNG image reader [was: CUPS DoS via RSS subscriptions] (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE request: cups - potential integer overflow in PNG image reader [was: CUPS DoS via RSS subscriptions] (Tomas Hoger <thoger@...hat.com>)

November 26 (4 messages)

Re: xine-lib and ocert-2008-008 ("Steven M. Christey" <coley@...us.mitre.org>)
CVE requset: WordPress XSS vulnerability in RSS Feed Generator (Jeremias Reith <jr@...ss.org>)
Re: xine-lib and ocert-2008-008 (Andrea Barisani <lcars@...rt.org>)
Re: CVE request: jhead (Robert Buchholz <rbu@...too.org>)

November 27 (2 messages)

Re: Bug#498243: xine-lib and ocert-2008-008 (Darren Salt <linux@...mustbejoking.demon.co.uk>)
CVE request: kernel: fix soft lockups/OOM issues with unix garbage collector ("Eugene Teo" <eugeneteo@...nel.sg>)

November 28 (10 messages)

CVE Request - cups, dovecot-managesieve, perl, wireshark (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request - cups, dovecot-managesieve, perl, wireshark (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: lcms (old issues) (Tomas Hoger <thoger@...hat.com>)
Re: CVE requset: WordPress XSS vulnerability in RSS Feed Generator ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requset: WordPress XSS vulnerability in RSS Feed Generator (Steffen Joeris <steffen.joeris@...lelinux.de>)
Re: xine-lib and ocert-2008-008 (Nico Golde <oss-security+ml@...lde.de>)
Re: xine-lib and ocert-2008-008 (Nico Golde <oss-security+ml@...lde.de>)
Re: CVE requset: WordPress XSS vulnerability in RSS Feed Generator (Jeremias Reith <jr@...ss.org>)
Re: CVE requset: WordPress XSS vulnerability in RSS Feed Generator ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE requset: WordPress XSS vulnerability in RSS Feed Generator (Steffen Joeris <steffen.joeris@...lelinux.de>)

November 29 (1 message)

CVE id request/update: mailscanner: many scripts allow local users to overwrite arbitrary files via symlink attacks (Raphael Geissert <atomo64+debian@...il.com…)

November 30 (2 messages)

Re: CVE Request - cups, dovecot-managesieve, perl, wireshark (Eygene Ryabinkin <rea-sec@...elabs.ru>)
Re: CVE Request - cups, dovecot-managesieve, perl, wireshark (Eygene Ryabinkin <rea-sec@...elabs.ru>)

128 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.