oss-sec: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

376 messages starting Apr 01 10 and ending Jul 01 10
Date index | Thread index | Author index

• CVE Request: moodle 1.9.8, 1.8.2 Ludwig Nussel (Apr 01)
  • Re: CVE Request: moodle 1.9.8, 1.8.2 Josh Bressers (Apr 01)
    • Re: CVE Request: moodle 1.9.8, 1.8.2 Ludwig Nussel (Apr 23)
  • Re: CVE Request: moodle 1.9.8, 1.8.2 Steven M. Christey (Apr 29)
• CVE Request -- Zabbix v1.8.2 and v.1.6.9 Jan Lieskovsky (Apr 01)
  • Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 Josh Bressers (Apr 01)
    • RE: CVE Request -- Zabbix v1.8.2 and v.1.6.9 Nicolas GREGOIRE (Apr 02)
    • Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 Moritz Muehlenhoff (Apr 02)
      • Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 Tomas Hoger (Apr 03)
      • Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 Nicob (Apr 04)
      • Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9 Steven M. Christey (Apr 06)
• CVE Request -- libnids v1.24 -- Null pointer dereference Jan Lieskovsky (Apr 01)
  • Re: CVE Request -- libnids v1.24 -- Null pointer dereference Josh Bressers (Apr 01)
• Re: CVE Request -- aMSN -- improper SSL certificate validation (MITM) Josh Bressers (Apr 01)
• Re: CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header Josh Bressers (Apr 01)
• Re: CVE Request: DeviceKit privilege escalation via pluggable storage device labels Josh Bressers (Apr 01)
• CVE Request: policykit (minor) Kees Cook (Apr 01)
  • Re: CVE Request: policykit (minor) Josh Bressers (Apr 01)
• Re: CVE request: kernel: connector security bypass Josh Bressers (Apr 01)
• Re: CVE Request -- Transmission v1.92 Josh Bressers (Apr 01)
• CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO message Jan Lieskovsky (Apr 03)
  • Re: CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO message Josh Bressers (Apr 06)
• CVE-2010-0463 incomplete horde fixes Nico Golde (Apr 03)
• CVE request: kernel: cifs: cifs_create() NULL pointer dereference Eugene Teo (Apr 05)
  • Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference Eugene Teo (Apr 05)
    • Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference Greg KH (May 18)
      • Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference Eugene Teo (May 19)
  • Re: CVE request: kernel: cifs: cifs_create() NULL pointer dereference Josh Bressers (Apr 06)
• Debian Moin Question Josh Bressers (Apr 05)
  • Re: Debian Moin Question Michael Gilbert (Apr 05)
  • Re: Debian Moin Question Giuseppe Iuculano (Apr 05)
• ClamAV small issues Jamie Strandboge (Apr 06)
  • Re: ClamAV small issues Josh Bressers (Apr 08)
    • Re: ClamAV small issues Kurt Seifried (Apr 08)
      • Re: ClamAV small issues Ludwig Nussel (Apr 09)
      • Re: ClamAV small issues Eren Türkay (Apr 09)
      • Re: ClamAV small issues Eren Türkay (Apr 09)
      • Re: ClamAV small issues Ludwig Nussel (Apr 09)
• CVE Request -- udisks v1.0.0 -- (serious) information disclosure Jan Lieskovsky (Apr 06)
  • Re: CVE Request -- udisks v1.0.0 -- (serious) information disclosure Josh Bressers (Apr 08)
• CVE Request: MediaWiki 1.15.3 -- Login CSRF Reed Loden (Apr 07)
  • Re: CVE Request: MediaWiki 1.15.3 -- Login CSRF Josh Bressers (Apr 08)
• CVE Request -- Abcm2ps v5.9.12 -- multiple unspecified vulnerabilities Jan Lieskovsky (Apr 08)
  • Re: CVE Request -- Abcm2ps v5.9.12 -- multiple unspecified vulnerabilities Jan Lieskovsky (Apr 08)
    • Re: CVE Request -- Abcm2ps v5.9.12 -- multiple unspecified vulnerabilities Tim Starling (Apr 08)
• CVE request -- memcached Jamie Strandboge (Apr 08)
  • Re: CVE request -- memcached Jamie Strandboge (Apr 08)
  • Re: CVE request -- memcached Josh Bressers (Apr 08)
• CVE Request -- perl v5.8.* -- stack overflow by processing certain regex (Gentoo BTS#313565 / RH BZ#580605) Jan Lieskovsky (Apr 08)
  • Re: CVE Request -- perl v5.8.* -- stack overflow by processing certain regex (Gentoo BTS#313565 / RH BZ#580605) Josh Bressers (Apr 14)
• [HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam Hafez Kamal (Apr 08)
• CVE-2010-1146 kernel: reiserfs priv escalation Eugene Teo (Apr 09)
  • Re: CVE-2010-1146 kernel: reiserfs priv escalation Eugene Teo (Apr 09)
• CVE request: typo3 remote command execution Hanno Böck (Apr 10)
  • Re: CVE request: typo3 remote command execution Josh Bressers (Apr 12)
• CVE request: Java webstart remote code execution Hanno Böck (Apr 10)
  • Re: CVE request: Java webstart remote code execution Josh Bressers (Apr 12)
    • Re: CVE request: Java webstart remote code execution Steven M. Christey (Apr 15)
• CVE request: irssi 0.8.15 Tobias Heinlein (Apr 11)
  • <Possible follow-ups>
  • Re: CVE request: irssi 0.8.15 Josh Bressers (Apr 12)
    • Re: CVE request: irssi 0.8.15 Steven M. Christey (Apr 12)
      • Re: CVE request: irssi 0.8.15 Josh Bressers (Apr 13)
    • Re: CVE request: irssi 0.8.15 Tomas Hoger (Apr 13)
  • Re: CVE request: irssi 0.8.15 Wouter Coekaerts (Apr 13)
    • Re: Re: CVE request: irssi 0.8.15 Jamie Strandboge (Apr 17)
      • Re: Re: CVE request: irssi 0.8.15 Wouter Coekaerts (Apr 26)
      • Re: Re: CVE request: irssi 0.8.15 Steve Langasek (Apr 27)
• Couple of kernel issues Eugene Teo (Apr 14)
  • Re: Couple of kernel issues Michael Gilbert (Apr 15)
    • CVE request: kernel: tty: release_one_tty() forgets to put pids Eugene Teo (Apr 15)
      • Re: CVE request: kernel: tty: release_one_tty() forgets to put pids Eugene Teo (Apr 15)
      • Re: CVE request: kernel: tty: release_one_tty() forgets to put pids Josh Bressers (Apr 16)
      • Re: CVE request: kernel: tty: release_one_tty() forgets to put pids Eren Türkay (Apr 27)
      • Re: CVE request: kernel: tty: release_one_tty() forgets to put pids Eugene Teo (Apr 27)
• CVE request: aircrack-ng EAPOL buffer overflow Florian Weimer (Apr 14)
  • Re: CVE request: aircrack-ng EAPOL buffer overflow Josh Bressers (Apr 14)
• CVE request: GNU nano (minor) Dan Rosenberg (Apr 14)
  • Re: CVE request: GNU nano (minor) Josh Bressers (Apr 14)
• CVE request - sudo Tomas Hoger (Apr 15)
  • Re: CVE request - sudo Josh Bressers (Apr 16)
• CVE Request: JIRA Issues Eren Türkay (Apr 16)
  • Re: CVE Request: JIRA Issues Josh Bressers (Apr 16)
• Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove Michael Gilbert (Apr 17)
  • Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove Michael Gilbert (Apr 18)
    • Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove Eugene Teo (Apr 19)
    • Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove dann frazier (Jul 01)
  • Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove Eugene Teo (Apr 19)
• CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input Matthias Andree (Apr 18)
  • Re: CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input Florian Weimer (Apr 19)
    • Re: CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input Matthias Andree (Apr 20)
  • Re: CVE request: fetchmail 4.6.3...6.3.16 DoS in -v -v mode in multibyte locales on invalid input Josh Bressers (Apr 19)
• Re: CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw dann frazier (Apr 22)
• Check your WPA2 Enterprise setup Ludwig Nussel (Apr 22)
• CVE request: VLC <1.0.6 Multiple issues Alex Legler (Apr 22)
  • Re: CVE request: VLC <1.0.6 Multiple issues Josh Bressers (Apr 28)
• [HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials Hafez Kamal (Apr 23)
• [HITB-Announce] HITB eZine Issue 002 out now! Hafez Kamal (Apr 23)
• CVE Request: cacti SQL injection in template_export Thijs Kinkhorst (Apr 23)
  • Re: CVE Request: cacti SQL injection in template_export Josh Bressers (Apr 26)
• CVE request: joomla <= 1.5.15 code upload, information leak, session fixation, unauthorized access (was Fwd: Joomla! Security News) Hanno Böck (Apr 26)
  • Re: CVE request: joomla <= 1.5.15 code upload, information leak, session fixation, unauthorized access (was Fwd: Joomla! Security News) Josh Bressers (Apr 26)
• WordNet wn format string issue Tomas Hoger (Apr 26)
• Searching for vuln apps for testing free code review tools Taras (Apr 26)
  • Re: Searching for vuln apps for testing free code review tools Henri Salo (Apr 26)
• CVE request - gfs2 kernel issue Eugene Teo (Apr 27)
  • Re: CVE request - gfs2 kernel issue Josh Bressers (Apr 28)
• CVE request - kernel: find_keyring_by_name() can gain the freed keyring Eugene Teo (Apr 27)
  • Re: CVE request - kernel: find_keyring_by_name() can gain the freed keyring Josh Bressers (Apr 28)
• wafp insecure temporary directory Henri Salo (Apr 27)
  • Re: wafp insecure temporary directory Josh Bressers (Apr 28)
• CVS request - Moodle Dan Poltawski (Apr 27)
  • Re: CVS request - Moodle Josh Bressers (Apr 29)
• CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors Eugene Teo (Apr 29)
  • Re: CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors Hui Zhu (Apr 29)
  • Re: CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors Hui Zhu (Apr 29)
    • Re: CVE-2010-1173 kernel: skb_over_panic resulting from multiple invalid parameter errors Eugene Teo (Apr 29)
• CVE request - Linux Kernel KGDB/ppc issue Hui Zhu (Apr 29)
  • Re: CVE request - Linux Kernel KGDB/ppc issue Eugene Teo (Apr 29)
    • Re: [security-linux] Re: [oss-security] CVE request - Linux Kernel KGDB/ppc issue Mark Hatle (Apr 29)
  • Re: CVE request - Linux Kernel KGDB/ppc issue Josh Bressers (Apr 29)
  • Re: CVE request - Linux Kernel KGDB/ppc issue Eugene Teo (Apr 30)
• Multiple vulnerabilities in OpenTTD Matthijs Kooijman (May 01)
• CVE request: lxr Raphael Geissert (May 03)
  • Re: CVE request: lxr Dan Rosenberg (May 03)
    • Re: CVE request: lxr Henri Salo (May 03)
      • Re: CVE request: lxr Josh Bressers (May 03)
      • Re: CVE request: lxr Henri Salo (May 03)
      • Re: CVE request: lxr Dan Rosenberg (May 03)
      • Re: CVE request: lxr Steven M. Christey (May 06)
      • Re: CVE request: lxr Dan Rosenberg (May 06)
      • Re: CVE request: lxr Josh Bressers (May 14)
      • Re: CVE request: lxr Dan Rosenberg (May 14)
      • Re: CVE request: lxr Josh Bressers (May 14)
  • Re: CVE request: lxr Josh Bressers (May 03)
• CVE Request [was Re: [oss-security] kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)] dann frazier (May 05)
  • Re: CVE Request [was Re: [oss-security] kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)] Josh Bressers (May 05)
• CVE Request - Piwik 0.5.5 - XSS vulnerability Anthon Pang (May 05)
  • Re: CVE Request - Piwik 0.5.5 - XSS vulnerability Josh Bressers (May 05)
• CVE-2010-0730 xen: emulator instruction decoding inconsistency Eugene Teo (May 07)
• A mysql flaw. Oden Eriksson (May 07)
  • Re: A mysql flaw. Josh Bressers (May 08)
    • Re: A mysql flaw. Oden Eriksson (May 10)
  • Re: A mysql flaw. Tomas Hoger (May 10)
    • Re: A mysql flaw. Josh Bressers (May 18)
• MOPS and CVEs? Hanno Böck (May 07)
  • Re: MOPS and CVEs? Josh Bressers (May 07)
• CVE Assignment (wireshark) Josh Bressers (May 07)
  • Re: CVE Assignment (wireshark) Josh Bressers (May 07)
• CVE Assignment (gnustep) Josh Bressers (May 07)
  • Re: CVE Assignment (gnustep) Dan Rosenberg (May 07)
    • Re: CVE Assignment (gnustep) Josh Bressers (May 07)
• Month of PHP Security 2010 Issues Eren Türkay (May 11)
  • Re: Month of PHP Security 2010 Issues Moritz Muehlenhoff (May 11)
  • Re: Month of PHP Security 2010 Issues Steven M. Christey (May 11)
• CVE assignment: ghostscript stack-based overflow Steven M. Christey (May 11)
  • Re: CVE assignment: ghostscript stack-based overflow Dan Rosenberg (May 12)
    • Re: CVE assignment: ghostscript stack-based overflow Josh Bressers (May 18)
• KDENetwork vulnerabilities Jamie Strandboge (May 13)
• CVE request: phpbb 3.0.7 and before 3.0.5 Hanno Böck (May 16)
  • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Josh Bressers (May 18)
    • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Steven M. Christey (May 18)
  • <Possible follow-ups>
  • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Josh Bressers (May 18)
    • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Hanno Böck (May 19)
      • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Josh Bressers (May 19)
      • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Steven M. Christey (May 19)
    • Message not available
      • Re: CVE request: phpbb 3.0.7 and before 3.0.5 Thijs Kinkhorst (May 19)
• CVE request: phorum < 5.2.15 backend XSS Hanno Böck (May 16)
  • Re: CVE request: phorum < 5.2.15 backend XSS Josh Bressers (May 18)
    • Re: CVE request: phorum < 5.2.15 backend XSS Steven M. Christey (May 18)
      • Re: CVE request: phorum < 5.2.15 backend XSS Josh Bressers (May 18)
• [oCERT-2010-001] multiple http client unexpected download filename vulnerability Daniele Bianco (May 17)
  • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Florian Weimer (May 17)
    • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Ludwig Nussel (May 18)
      • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Solar Designer (May 18)
      • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Ludwig Nussel (May 19)
      • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Solar Designer (May 20)
      • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Vincent Danen (Jun 10)
      • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Solar Designer (May 20)
      • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Solar Designer (May 21)
  • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Marcus Meissner (Jun 09)
    • Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability Steven M. Christey (Jun 09)
• kernel: btrfs: check for read permission on src file in the clone ioctl Eugene Teo (May 18)
  • Re: kernel: btrfs: check for read permission on src file in the clone ioctl Dan Rosenberg (May 18)
  • Re: kernel: btrfs: check for read permission on src file in the clone ioctl Josh Bressers (May 25)
• [HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers Hafez Kamal (May 20)
• Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Thomas Biege (May 20)
  • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Thomas Biege (May 25)
    • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Josh Bressers (May 25)
    • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Tomas Hoger (May 26)
      • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Thomas Biege (May 26)
  • <Possible follow-ups>
  • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Josh Bressers (May 25)
    • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities Thomas Biege (May 26)
    • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) Eren Türkay (May 28)
      • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) Tomas Hoger (May 28)
      • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) Eren Türkay (May 28)
      • Re: Fwd: [Full-disclosure] stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (3.3.x) Tomas Hoger (May 31)
• CVE Request for Horde and Squirrelmail Max Olsterd (May 20)
  • Re: [core] CVE Request for Horde and Squirrelmail Marcus I. Ryan (May 21)
  • Re: CVE Request for Horde and Squirrelmail Thijs Kinkhorst (May 21)
    • Re: CVE Request for Horde and Squirrelmail Max Olsterd (May 22)
      • Re: CVE Request for Horde and Squirrelmail Thijs Kinkhorst (May 23)
      • Re: CVE Request for Horde and Squirrelmail Nicob (May 24)
      • Re: [SquirrelMail-Security] [oss-security] CVE Request for Horde and Squirrelmail Paul Lesniewski (May 25)
  • Re: [core] CVE Request for Horde and Squirrelmail Michael M Slusarz (May 25)
  • Re: CVE Request for Horde and Squirrelmail Josh Bressers (May 25)
    • Re: CVE Request for Horde and Squirrelmail Steven M. Christey (May 25)
    • Re: [SquirrelMail-Security] [oss-security] CVE Request for Horde and Squirrelmail Paul Lesniewski (Jun 21)
• CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request Jan Lieskovsky (May 20)
• clamav null pointer dereference Thomas Biege (May 21)
  • Re: clamav null pointer dereference Jamie Strandboge (May 21)
• CVE Request: clamav crash via malformed PDF Jamie Strandboge (May 21)
  • Re: CVE Request: clamav crash via malformed PDF Josh Bressers (May 25)
    • Re: CVE Request: clamav crash via malformed PDF Steven M. Christey (May 25)
• CVE Request: off by one DoS in pe_icons.c Jamie Strandboge (May 21)
  • Re: CVE Request: off by one DoS in pe_icons.c Josh Bressers (May 25)
    • Re: CVE Request: off by one DoS in pe_icons.c Steven M. Christey (May 25)
• CVE Request -- Cacti v0.8.7 -- three security fixes Jan Lieskovsky (May 24)
  • Re: CVE Request -- Cacti v0.8.7 -- three security fixes Josh Bressers (May 26)
    • Re: CVE Request -- Cacti v0.8.7 -- three security fixes Steven M. Christey (May 27)
      • Re: CVE Request -- Cacti v0.8.7 -- three security fixes Jan Lieskovsky (Jun 01)
      • Re: CVE Request -- Cacti v0.8.7 -- three security fixes Steven M. Christey (Jun 07)
      • Re: CVE Request -- Cacti v0.8.7 -- three security fixes Larry Adams (Jun 07)
      • Re: CVE Request -- Cacti v0.8.7 -- three security fixes Tony Roman (Jun 07)
• CVE request - kernel: GFS2: The setflags ioctl() doesn't check file ownership Eugene Teo (May 25)
  • Re: CVE request - kernel: GFS2: The setflags ioctl() doesn't check file ownership Josh Bressers (May 25)
    • Re: CVE request - kernel: GFS2: The setflags ioctl() doesn't check file ownership Eugene Teo (May 26)
• Who visits the Linux Security Summit 2010 Thomas Biege (May 25)
• Python rgbimg and audioop issues Tomas Hoger (May 25)
• CVE request - kernel: nfsd: fix vm overcommit crash Eugene Teo (May 26)
  • Re: CVE request - kernel: nfsd: fix vm overcommit crash Josh Bressers (May 26)
    • Re: CVE request - kernel: nfsd: fix vm overcommit crash Eugene Teo (May 27)
• CVE request: Mediawiki below 1.15.4 / 1.16.0beta3 Hanno Böck (May 28)
  • Re: CVE request: Mediawiki below 1.15.4 / 1.16.0beta3 Josh Bressers (Jun 01)
• CVE request: ghostscript and gv Ludwig Nussel (May 28)
  • Re: CVE request: ghostscript and gv Bernhard R. Link (May 29)
    • Re: CVE request: ghostscript and gv Florian Weimer (May 30)
      • Re: CVE request: ghostscript and gv Bernhard R. Link (May 30)
  • Re: CVE request: ghostscript and gv Josh Bressers (Jun 01)
    • Re: CVE request: ghostscript and gv Michael Gilbert (Jun 01)
      • Re: CVE request: ghostscript and gv Josh Bressers (Jun 01)
• CVE-2009-4824 is a duplicate of CVE-2009-3236 Giuseppe Iuculano (May 28)
• CVE request: joomla before 1.5.18 Hanno Böck (May 29)
  • Re: CVE request: joomla before 1.5.18 Josh Bressers (Jun 01)
• CVE request: zonecheck Sebastien Delafond (May 29)
  • Re: CVE request: zonecheck Josh Bressers (Jun 01)
    • Re: CVE request: zonecheck Steven M. Christey (Jun 07)
• Fwd: emesene preditable temporary filename Emilio Pozuelo Monfort (May 29)
  • Re: Fwd: emesene preditable temporary filename Marcus Meissner (May 29)
  • Re: Fwd: emesene preditable temporary filename Josh Bressers (Jun 01)
• SFCB vulnerabilities Nicolas Grégoire (May 31)
  • Re: SFCB vulnerabilities Josh Bressers (Jun 01)
    • Re: SFCB vulnerabilities Nicolas Grégoire (Jun 01)
      • Re: SFCB vulnerabilities Sebastian Krahmer (Jun 02)
      • Re: SFCB vulnerabilities Nicolas Grégoire (Jun 02)
• CVE request: DM Database Server Shennan.Wang (Jun 01)
  • <Possible follow-ups>
  • Re: CVE request: DM Database Server Josh Bressers (Jun 01)
• prewikka permission bug Stefan Behte (Jun 01)
  • Re: prewikka permission bug Josh Bressers (Jun 03)
• CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) Jan Lieskovsky (Jun 02)
  • Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) Jan Lieskovsky (Jun 02)
    • Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) Josh Bressers (Jun 03)
      • Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) Steven M. Christey (Jun 03)
      • Re: CVE Request -- rpm -- Fails to remove the SUID/SGID bits on package upgrade (RH BZ#598775) Panu Matilainen (Jun 04)
• CVE Request -- Beanstalkd (prior v1.4.6) -- Improper sanitization of job body (job payload data) Jan Lieskovsky (Jun 02)
  • Re: CVE Request -- Beanstalkd (prior v1.4.6) -- Improper sanitization of job body (job payload data) Josh Bressers (Jun 03)
• CVE Request -- rpcbind -- Insecure (predictable) temporary file use Jan Lieskovsky (Jun 03)
  • Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use Josh Bressers (Jun 04)
    • Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use Steven M. Christey (Jun 07)
      • Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use Josh Bressers (Jun 07)
      • Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use Steven M. Christey (Jun 07)
  • <Possible follow-ups>
  • Re: CVE Request -- rpcbind -- Insecure (predictable) temporary file use Josh Bressers (Jun 08)
• CVE requests for mplayer/vlc and abcm2ps Moritz Muehlenhoff (Jun 03)
  • Re: CVE requests for mplayer/vlc and abcm2ps Josh Bressers (Jun 04)
    • Re: CVE requests for mplayer/vlc and abcm2ps Tomas Hoger (Jun 04)
• Virii in the wild Henri Salo (Jun 04)
• CVE request - kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files Eugene Teo (Jun 07)
  • Re: CVE request - kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files Josh Bressers (Jun 09)
• ArpON (Arp handler inspectiON) 2.0 released! Andrea Di Pasquale (Jun 08)
• jar, fastjar directory traversal vulnerabilities Vincent Danen (Jun 08)
  • Re: jar, fastjar directory traversal vulnerabilities Steven M. Christey (Jun 08)
    • Re: jar, fastjar directory traversal vulnerabilities Vincent Danen (Jun 08)
• CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc Moritz Muehlenhoff (Jun 09)
  • Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc Josh Bressers (Jun 11)
    • Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc Marcus Meissner (Jun 24)
  • Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc Steven M. Christey (Jun 24)
• CVE-2010-2070 kernel-xen: ia64-xen: unset be from the task psr Eugene Teo (Jun 10)
• CVE request for new wireshark vulnerabilities Vincent Danen (Jun 11)
  • Re: CVE request for new wireshark vulnerabilities Josh Bressers (Jun 14)
  • Re: CVE request for new wireshark vulnerabilities Steven M. Christey (Jun 14)
• CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own Dan Rosenberg (Jun 11)
  • Re: CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own Eugene Teo (Jun 14)
    • Re: CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own Eugene Teo (Jun 14)
• CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution Alex Legler (Jun 12)
  • Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution Alex Legler (Jun 14)
    • Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution Josh Bressers (Jun 14)
      • Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution Steven M. Christey (Jun 14)
  • Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution Josh Bressers (Jun 14)
  • Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution Eugene Teo (Jun 15)
• CVE request - pyftpd insecure usage of temporary directory Henri Salo (Jun 13)
  • Re: CVE request - pyftpd insecure usage of temporary directory Josh Bressers (Jun 14)
• CVE request - pyftpd default username and password vulnerability Henri Salo (Jun 13)
  • Re: CVE request - pyftpd default username and password vulnerability Josh Bressers (Jun 14)
• CVE request: punbb before 1.3.4 xss Hanno Böck (Jun 14)
  • Re: CVE request: punbb before 1.3.4 xss Josh Bressers (Jun 14)
    • Re: CVE request: punbb before 1.3.4 xss Steven M. Christey (Jun 14)
• CVE Request: w3m does not check null bytes CN/subjAltName Ludwig Nussel (Jun 14)
  • Re: CVE Request: w3m does not check null bytes CN/subjAltName Josh Bressers (Jun 14)
• CVE Request - kernel: put_tty_queue NULL pointer deref dann frazier (Jun 15)
  • Re: CVE Request - kernel: put_tty_queue NULL pointer deref Eugene Teo (Jun 15)
    • Re: CVE Request - kernel: put_tty_queue NULL pointer deref Josh Bressers (Jun 15)
      • Re: CVE Request - kernel: put_tty_queue NULL pointer deref Steven M. Christey (Jun 15)
• CVE request - kernel: xfs swapext ioctl issue Eugene Teo (Jun 17)
  • Re: CVE request - kernel: xfs swapext ioctl issue Josh Bressers (Jun 18)
• VLC 1.0 series End of Life Rémi Denis-Courmont (Jun 18)
• Stefan Esser's 0day PHP SysCan flaw Josh Bressers (Jun 18)
  • Re: Stefan Esser's 0day PHP SysCan flaw Raphael Geissert (Jun 27)
    • Re: Stefan Esser's 0day PHP SysCan flaw Raphael Geissert (Jun 30)
      • Re: Re: Stefan Esser's 0day PHP SysCan flaw Pierre Joye (Jun 30)
• CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities Vincent Danen (Jun 18)
  • Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities Josh Bressers (Jun 21)
• CVE Request -- Plone -- arbitrary HTML code injection in safe_html Jan Lieskovsky (Jun 21)
  • Re: CVE Request -- Plone -- arbitrary HTML code injection in safe_html Matthew Wilkes (Jun 22)
    • Re: Re: CVE Request -- Plone -- arbitrary HTML code injection in safe_html Steven M. Christey (Jun 22)
• CVE request: kernel: timekeeping: Prevent oops when GENERIC_TIME=n Eugene Teo (Jun 23)
  • Re: CVE request: kernel: timekeeping: Prevent oops when GENERIC_TIME=n Josh Bressers (Jun 25)
• kernel: thinkpad-acpi: lock down video output state access Eugene Teo (Jun 23)
• kernel: l2tp: Fix oops in pppol2tp_xmit Eugene Teo (Jun 23)
• CVE Request: avahi DoS Ludwig Nussel (Jun 23)
  • Re: CVE Request: avahi DoS Josh Bressers (Jun 25)
• CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface Jan Lieskovsky (Jun 23)
  • Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface Florian Streibelt (Jun 23)
    • Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface Morten Shearman Kirkegaard (Jun 26)
  • Re: CVE Request -- mlmmj -- Directory traversal flaw by editing and saving list entries via php-admin web interface Josh Bressers (Jun 25)
• CVE requests: LibTIFF Dan Rosenberg (Jun 23)
  • Re: CVE requests: LibTIFF Tomas Hoger (Jun 24)
    • Re: CVE requests: LibTIFF Dan Rosenberg (Jun 24)
      • Re: CVE requests: LibTIFF Tomas Hoger (Jun 24)
      • Re: CVE requests: LibTIFF Dan Rosenberg (Jun 29)
      • Re: CVE requests: LibTIFF Tomas Hoger (Jun 29)
      • Re: CVE requests: LibTIFF Dan Rosenberg (Jun 29)
      • Re: CVE requests: LibTIFF Josh Bressers (Jun 30)
      • Re: CVE requests: LibTIFF Dan Rosenberg (Jun 30)
  • <Possible follow-ups>
  • Re: CVE requests: LibTIFF Josh Bressers (Jun 30)
• CVE request: feh Daniel Friesel (Jun 25)
  • Re: CVE request: feh Josh Bressers (Jun 28)
• CVE request: makepasswd, Default settings generate insecure passwords Henri Salo (Jun 27)
  • Re: CVE request: makepasswd, Default settings generate insecure passwords Josh Bressers (Jun 28)
• CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server Eugene Teo (Jun 28)
  • Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server Josh Bressers (Jun 28)
  • Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server akuster (Jun 29)
    • Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server Eugene Teo (Jun 30)
      • Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server akuster (Jun 30)
      • Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server Eugene Teo (Jun 30)
• CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks Jan Lieskovsky (Jun 28)
  • Re: CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks Josh Bressers (Jun 28)
    • Re: CVE Request -- libpng v1.4.3 and v1.2.44 -- memory leak while processing PNG image with malformed sCAL chunks Marcus Meissner (Jun 30)
• Re: CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001 Henri Salo (Jun 28)
  • Re: CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001 Josh Bressers (Jun 28)
• kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL Eugene Teo (Jun 29)
  • Re: kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL akuster (Jun 29)
    • CVE Request: kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL Eugene Teo (Jun 30)
      • Re: CVE Request: kernel: ethtool: kernel buffer overflow in ETHTOOL_GRXCLSRLALL Josh Bressers (Jun 30)
• CVE id request: syscp Nico Golde (Jun 29)
  • Re: CVE id request: syscp Josh Bressers (Jun 30)
• CVE request: XSS in python paste Raphael Geissert (Jun 29)
  • Re: CVE request: XSS in python paste Josh Bressers (Jun 30)
• CVE request: HTML Purifier Raphael Geissert (Jun 30)
  • Re: CVE request: HTML Purifier Josh Bressers (Jun 30)
• CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability Péter Veres (Jun 30)
  • Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability Josh Bressers (Jun 30)
    • Re: CVE Request -- PHP strrchr() Interruption Information Leak Vulnerability Pierre Joye (Jun 30)
• CVE Request -- Python-Mako (prior v0.3.4): Improper escaping of single quotes in escape.cgi (XSS) Jan Lieskovsky (Jun 30)
  • Re: CVE Request -- Python-Mako (prior v0.3.4): Improper escaping of single quotes in escape.cgi (XSS) Josh Bressers (Jun 30)
• CVE request: PHP MOPS-2010-56..60 Raphael Geissert (Jun 30)
  • Re: CVE request: PHP MOPS-2010-56..60 Josh Bressers (Jun 30)
• Re: CVE request: simplemachinesforum Henri Salo (Jun 30)

Previous period

Next period