oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2009/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 2	² 1	³	⁴
⁵ 1	⁶ 1	⁷ 3	⁸ 1	⁹ 3	¹⁰ 1	¹¹
¹² 3	¹³ 6	¹⁴ 7	¹⁵ 13	¹⁶ 11	¹⁷ 2	¹⁸
¹⁹ 4	²⁰	²¹ 4	²² 9	²³ 14	²⁴ 1	²⁵ 5
²⁶ 4	²⁷ 5	²⁸ 7	²⁹ 11	³⁰ 3	³¹

Messages by day:

October 1 (2 messages)

Re: CVE Request -- Xen -- PyGrub ("Steven M. Christey" <coley@...us.mitre.org>)
CVE Request (kernel) (Josh Bressers <bressers@...hat.com>)

October 2 (1 message)

Re: CVE Request (kernel) (Josh Bressers <bressers@...hat.com>)

October 5 (1 message)

[oCERT-2009-014] Android denial-of-service issues (Andrea Barisani <lcars@...rt.org>)

October 6 (1 message)

Kernel ecryptfs CVE id (CVE-2009-2908) (Josh Bressers <bressers@...hat.com>)

October 7 (3 messages)

CVE id request: jetty (Nico Golde <oss-security+ml@...lde.de>)
More kernel CVE info (CVE-2009-2909) (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: jetty ("Steven M. Christey" <coley@...us.mitre.org>)

October 8 (1 message)

CVE request for planet (Vincent Danen <vdanen@...hat.com>)

October 9 (3 messages)

Re: CVE Request (kernel) (Josh Bressers <bressers@...hat.com>)
CVE request: Unbound (Florian Weimer <fw@...eb.enyo.de>)
Re: CVE request: Unbound (Josh Bressers <bressers@...hat.com>)

October 10 (1 message)

CVE id request: django (Raphael Geissert <geissert@...ian.org>)

October 12 (3 messages)

presumptive php sec holes (Oden Eriksson <oeriksson@...driva.com>)
Re: CVE id request: django (Josh Bressers <bressers@...hat.com>)
Re: presumptive php sec holes (Josh Bressers <bressers@...hat.com>)

October 13 (6 messages)

CVE request: local root via setuid VBoxNetAdpCtl (Thomas Biege <thomas@...e.de>)
Re: presumptive php sec holes (yersinia <yersinia.spiros@...il.com>)
Re: CVE request: local root via setuid VBoxNetAdpCtl (Tomas Hoger <thoger@...hat.com>)
Re: Duplicate CVE assignment notification [was: CVE id request: django] (Jan Lieskovsky <jlieskov@...hat.com>)
Re: Duplicate CVE assignment notification [was: CVE id request: django] ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Duplicate CVE assignment notification [was: CVE id request: django] ("Steven M. Christey" <coley@...us.mitre.org>)

October 14 (7 messages)

Re: CVE request: kernel: tc: uninitialised kernel memory leak (Eugene Teo <eugene@...hat.com>)
CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 (Eugene Teo <eugene@...hat.com>)
CVE Request - backintime (Jan Lieskovsky <jlieskov@...hat.com>)
CVE Request -- phpMyAdmin (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- phpMyAdmin (Hanno Böck <hanno@...eck.de>)
Re: CVE Request -- phpMyAdmin (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request - backintime (Josh Bressers <bressers@...hat.com>)

October 15 (13 messages)

Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 (Josh Bressers <bressers@...hat.com>)
Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 (Eugene Teo <eugene@...hat.com>)
Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 (Willy Tarreau <w@....eu>)
CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500 (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500 (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500 (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Julien Tinnes <jt@....org>)
Re: CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Josh Bressers <bressers@...hat.com>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Josh Bressers <bressers@...hat.com>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Julien Tinnes <julien.tinnes@...il.com>)
Re: CVE Request -- phpMyAdmin ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE Request -- PHP 5 - 5.2.11 (Tomas Hoger <thoger@...hat.com>)

October 16 (11 messages)

Re: CVE Request -- PHP 5 - 5.2.11 (Raphael Geissert <geissert@...ian.org>)
Re: CVE request: local root via setuid VBoxNetAdpCtl ("Steven M. Christey" <coley@...us.mitre.org>)
Re: Re: CVE Request -- PHP 5 - 5.2.11 (Tomas Hoger <thoger@...hat.com>)
Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs (Ludwig Nussel <ludwig.nussel@...e.de>)
QEMU VNC use-after-free (Tomas Hoger <thoger@...hat.com>)
CVE Request - aria2 - 1.6.2 (Jan Lieskovsky <jlieskov@...hat.com>)
pidgin security flaw (Josh Bressers <bressers@...hat.com>)
Re: QEMU VNC use-after-free (Josh Bressers <bressers@...hat.com>)
Re: CVE Request - aria2 - 1.6.2 (Josh Bressers <bressers@...hat.com>)
Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs (Josh Bressers <bressers@...hat.com>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (Josh Bressers <bressers@...hat.com>)

October 17 (2 messages)

Re: CVE request: oping allows the disclosure of arbitrary file contents ("Steven M. Christey" <coley@...us.mitre.org>)
Re: CVE request: oping allows the disclosure of arbitrary file contents (yersinia <yersinia.spiros@...il.com>)

October 19 (4 messages)

CVE request: kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE request: kernel: r128 IOCTL NULL pointer dereferences when CCE state is uninitialised (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket (Josh Bressers <bressers@...hat.com>)

October 21 (4 messages)

CVE assignment notification -- CVE-2009-2911 - Three SystemTap-1.0 DoS issues (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: Wordpress Trackback DoS (Hanno Böck <hanno@...eck.de>)
Re: CVE request: Wordpress Trackback DoS (Josh Bressers <bressers@...hat.com>)
[oCERT-2009-016] Poppler, xpdf integer overflow during heap allocation (Will Drewry <redpig@...rt.org>)

October 22 (9 messages)

CVE request: kernel: nfsd4: fix null dereference creating nfsv4 callback client (Eugene Teo <eugeneteo@...nel.sg>)
CVE request: kernel: get_instantiation_keyring() should inc the keyring refcount in all cases (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- Sahana (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Sahana (Jan Lieskovsky <jlieskov@...hat.com>)
Regarding expat bug 1990430 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE Request -- Sahana (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: nfsd4: fix null dereference creating nfsv4 callback client (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kernel: get_instantiation_keyring() should inc the keyring refcount in all cases (Josh Bressers <bressers@...hat.com>)
Re: Regarding expat bug 1990430 (Marc Schoenefeld <mschoene@...hat.com>)

October 23 (14 messages)

CVE id request: typo3 (Nico Golde <oss-security+ml@...lde.de>)
Re: Re: Regarding expat bug 1990430 (Michael Gilbert <michael.s.gilbert@...il.com>)
CVE request: kvm: update_cr8_intercept() NULL pointer dereference when running without an apic (Eugene Teo <eugeneteo@...nel.sg>)
CVE Request -- alienarena - 7.31 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE request: kvm: integer overflow in kvm_dev_ioctl_get_supported_cpuid() (Eugene Teo <eugeneteo@...nel.sg>)
Re: CVE Request -- expat [was: Re: Regarding expat bug 1990430] (Jan Lieskovsky <jlieskov@...hat.com>)
proftpd - mod_tls - Improper SSL/TLS certificate subjectAltName verification (Oden Eriksson <oeriksson@...driva.com>)
CVE-2009-3626 assigment notification - Perl - perl-5.10.1 (Jan Lieskovsky <jlieskov@...hat.com>)
CVE-2009-3627 assignment notification - HTML-Parser-3.63 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE id request: typo3 (Josh Bressers <bressers@...hat.com>)
Re: CVE Request -- alienarena - 7.31 (Josh Bressers <bressers@...hat.com>)
Re: CVE request: kvm: integer overflow in kvm_dev_ioctl_get_supported_cpuid() (Josh Bressers <bressers@...hat.com>)
Re: proftpd - mod_tls - Improper SSL/TLS certificate subjectAltName verification (Josh Bressers <bressers@...hat.com>)
Re: CVE id request: typo3 ("Steven M. Christey" <coley@...us.mitre.org>)

October 24 (1 message)

Re: CVE request: kvm: update_cr8_intercept() NULL pointer dereference when running without an apic (Josh Bressers <bressers@...hat.com>)

October 25 (5 messages)

CVE-2009-3239 is a duplicate of CVE-2009-2139 and CVE-2009-2140 (Raphael Geissert <geissert@...ian.org>)
Re: CVE-2009-3239 is a duplicate of CVE-2009-2139 and CVE-2009-2140 (security curmudgeon <jericho@...rition.org>)
CVE Request -- Snort - 2.8.5.1 (Jan Lieskovsky <jlieskov@...hat.com>)
Re: CVE-2009-3239 is a duplicate of CVE-2009-2139 and CVE-2009-2140 (Tomas Hoger <thoger@...hat.com>)
SANS: Security Thought LeadersRe: CVE Request -- Snort - 2.8.5.1 (Mark J Cox <mjc@...hat.com>)

October 26 (4 messages)

Re: More CVE-2009-2408 like issues (Tomas Hoger <thoger@...hat.com>)
Re: CVE-2009-3239 is a duplicate of CVE-2009-2139 and CVE-2009-2140 (Michael Gilbert <michael.s.gilbert@...il.com>)
Re: CVE Request -- expat [was: Re: Regarding expat bug 1990430] (CERT-FI Vulnerability Co-ordination <vulncoord@...ora.fi>)
ghostscript CVE for multiple NULL dereferences in JBIG2 decoder (Vincent Danen <vdanen@...hat.com>)

October 27 (5 messages)

Re: Re: CVE Request -- PHP 5 - 5.2.11 (Raphael Geissert <geissert@...ian.org>)
Re: CVE-2009-3239 is a duplicate of CVE-2009-2139 and CVE-2009-2140 (Raphael Geissert <geissert@...ian.org>)
Re: ghostscript CVE for multiple NULL dereferences in JBIG2 decoder (Raphael Geissert <geissert@...ian.org>)
[oCERT-2009-015] KDE multiple issues (Andrea Barisani <lcars@...rt.org>)
CVE request for oCERT advisory 2009-013 (yTNEF/Evolution TNEF) (Vincent Danen <vdanen@...hat.com>)

October 28 (7 messages)

Handling cases of CWE-776 (Tim Brown <tmb@...35.com>)
Re: Handling cases of CWE-776 (Marcus Meissner <meissner@...e.de>)
Re: CVE Request -- expat [was: Re: Regarding expat bug 1990430] (Mark J Cox <mjc@...hat.com>)
Re: Handling cases of CWE-776 (Tim Brown <tmb@...35.com>)
Re: Handling cases of CWE-776 (Tim Brown <tmb@...35.com>)
Re: Re: ghostscript CVE for multiple NULL dereferences in JBIG2 decoder (Mark J Cox <mjc@...hat.com>)
Re: CVE request for oCERT advisory 2009-013 (yTNEF/Evolution TNEF) (Mark J Cox <mjc@...hat.com>)

October 29 (11 messages)

CVE request: kvm: check cpl before emulating debug register access (Eugene Teo <eugene@...hat.com>)
Re: CVE request: kvm: check cpl before emulating debug register access (Mark J Cox <mjc@...hat.com>)
Re: Re: ghostscript CVE for multiple NULL dereferences in JBIG2 decoder (Oden Eriksson <oeriksson@...driva.com>)
CVE request - asterisk, python-markdown, jetty, kde (Raphael Geissert <geissert@...ian.org>)
Re: CVE request - asterisk, python-markdown, jetty, kde (Mark J Cox <mjc@...hat.com>)
Re: CVE request - asterisk, python-markdown, jetty, kde (Tomas Hoger <thoger@...hat.com>)
MFSA 2009-63 (Tomas Hoger <thoger@...hat.com>)
Re: MFSA 2009-63 (Reed Loden <reed@...dloden.com>)
Re: MFSA 2009-63 (Florian Weimer <fw@...eb.enyo.de>)
Re: MFSA 2009-63 (Reed Loden <reed@...dloden.com>)
Re: CVE request - asterisk, python-markdown, jetty, kde (Tim Brown <tmb@...35.com>)

October 30 (3 messages)

Re: MFSA 2009-63 (Tomas Hoger <thoger@...hat.com>)
Re: MFSA 2009-63 (Reed Loden <reed@...dloden.com>)
Re: MFSA 2009-63 (Tomas Hoger <thoger@...hat.com>)

122 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.