oss-security By Thread

Subject	Author	Date
[oss-security] CVE Request -- Apache CouchDB v.0.11.0 -- timing attacks flaw	Jan Lieskovsky	31 Mar 2010
Re: [oss-security] CVE Request -- Apache CouchDB v.0.11.0 -- timing attacks flaw	Alex Legler	31 Mar 2010
[oss-security] iscsitarget/scsi-target-tuils format string CVE assignment	Josh Bressers	31 Mar 2010
[oss-security] CVE request: kernel: tipc: Fix oops on send prior to entering networked mode	Eugene Teo	30 Mar 2010
Re: [oss-security] CVE request: kernel: tipc: Fix oops on send prior to entering networked mode	Steven M. Christey	30 Mar 2010
--> Re: [oss-security] CVE request: kernel: tipc: Fix oops on send prior to entering networked mode	Eugene Teo	31 Mar 2010
[oss-security] CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input	Reed Loden	29 Mar 2010
Re: [oss-security] CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input	Secunia Research	30 Mar 2010
Re: [oss-security] CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input	Reed Loden	30 Mar 2010
--> Re: [oss-security] CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input	Reed Loden	30 Mar 2010
--> Re: [oss-security] CVE Request: ViewVC 1.1.5 / 1.0.11 -- XSS via user-provided 'search_re' input	Steven M. Christey	30 Mar 2010
[oss-security] CVE-2010-0741 qemu: Improper handling of erroneous data provided by Linux virtio-net driver	Petr Matousek	29 Mar 2010
[oss-security] CVE Request -- Quake II Server -- two security issues affecting also Alien Arena	Jan Lieskovsky	29 Mar 2010
[oss-security] RE: CVE Request -- Quake II Server -- two security issues affecting also Alien Arena	Richard Stanway	29 Mar 2010
[oss-security] OpenSSL: CVE-2010-0740 and CVE-2009-3245 appear to be dupes	Florian Weimer	29 Mar 2010
Re: [oss-security] OpenSSL: CVE-2010-0740 and CVE-2009-3245 appear to be dupes	Florian Weimer	29 Mar 2010
[oss-security] CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS)	Eugene Teo	29 Mar 2010
Re: [oss-security] CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS)	Steven M. Christey	30 Mar 2010
--> Re: [oss-security] CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS)	Eugene Teo	31 Mar 2010
[oss-security] [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! Correction	Hafez Kamal	24 Mar 2010
[oss-security] kernel: bluetooth: Fix kernel crash on L2CAP stress tests	Eugene Teo	24 Mar 2010
[oss-security] CVE requests 6x kernel vulns still pending	Eugene Teo	23 Mar 2010
Re: [oss-security] CVE requests 6x kernel vulns still pending	Steven M. Christey	24 Mar 2010
--> Re: [oss-security] CVE requests 6x kernel vulns still pending	Eugene Teo	24 Mar 2010
[oss-security] [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!	Hafez Kamal	23 Mar 2010
[oss-security] CVE request: kernel: bluetooth: potential bad memory access with sysfs files	Eugene Teo	23 Mar 2010
[oss-security] CVE Request -- Sahana -- v0.6.2.2 -- Authentication bypass via "acl_enable_acl" URLs	Jan Lieskovsky	19 Mar 2010
Re: [oss-security] CVE Request -- Sahana -- v0.6.2.2 -- Authentication bypass via "acl_enable_acl" URLs	Steven M. Christey	30 Mar 2010
[oss-security] CVE Request -- Transmission v1.92	Jan Lieskovsky	17 Mar 2010
[oss-security] CVE id request: ikiwiki	Nico Golde	17 Mar 2010
Re: [oss-security] CVE id request: ikiwiki	Steven M. Christey	30 Mar 2010
[oss-security] CVE-2010-0008 kernel: sctp remote denial of service	Eugene Teo	17 Mar 2010
[oss-security] CVE-2009-4271 kernel: 32bit process on 64bit system DoS	Eugene Teo	17 Mar 2010
Re: [oss-security] CVE-2009-4271 kernel: 32bit process on 64bit system DoS	Marcus Meissner	17 Mar 2010
[oss-security] Re: CVE Request -- cURL/libCURL 7.20.0	Vincent Danen	16 Mar 2010
[oss-security] [HITB-Announce] HITBSecConf2010 - Dubai Agenda Released	Hafez Kamal	14 Mar 2010
[oss-security] Call for papers: ISP-10, USA, July 2010	James Heralds	12 Mar 2010
[oss-security] CVE-2010-0397: NULL pointer dereference in PHP's xmlrpc extension	Raphael Geissert	12 Mar 2010
[oss-security] CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS	Jan Lieskovsky	12 Mar 2010
Re: [oss-security] CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS	Vincent Danen	16 Mar 2010
--> Re: [oss-security] CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS	Tomas Hoger	16 Mar 2010
--> Re: [oss-security] CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS	Vincent Danen	16 Mar 2010
--> Re: [oss-security] CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS	Steven M. Christey	18 Mar 2010
--> Re: [oss-security] CVE Request -- Unbound v1.4.3 -- 64 bit platforms specific remote DoS	Vincent Danen	18 Mar 2010
[oss-security] CVE-2010-0729 kernel: ia64: ptrace: peek_or_poke requests miss ptrace_check_attach()	Eugene Teo	12 Mar 2010
[oss-security] CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw	Eugene Teo	12 Mar 2010
Re: [oss-security] CVE request: kernel: connector security bypass	dann frazier	11 Mar 2010
[oss-security] Re: [Drbd-dev] [oss-security] CVE request: kernel: connector security bypass	Lars Ellenberg	12 Mar 2010
--> [oss-security] Re: [Drbd-dev] [oss-security] CVE request: kernel: connector security bypass	dann frazier	12 Mar 2010
[oss-security] CVE id request: mydms	Nico Golde	11 Mar 2010
[oss-security] CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input	Reed Loden	10 Mar 2010
Re: [oss-security] CVE Request: ViewVC 1.1.4 / 1.0.10 -- XSS via user-provided query form input	Vincent Danen	16 Mar 2010
[oss-security] CVE Request: DeviceKit privilege escalation via pluggable storage device labels	Vincent Danen	10 Mar 2010
[oss-security] CVE Request -- Dovecot v1.2.11 -- DoS (excessive CPU use) by processing email with huge header	Jan Lieskovsky	10 Mar 2010
[oss-security] CVE Request -- aMSN -- improper SSL certificate validation (MITM)	Jan Lieskovsky	10 Mar 2010
[oss-security] CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc)	Jan Lieskovsky	10 Mar 2010
Re: [oss-security] CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc)	Steven M. Christey	26 Mar 2010
[oss-security] phpmyvisites 2.3	Henri Salo	10 Mar 2010
Re: [oss-security] phpmyvisites 2.3	Anthon Pang	10 Mar 2010
Re: [oss-security] phpmyvisites 2.3	Steven M. Christey	30 Mar 2010
--> Re: [oss-security] phpmyvisites 2.3	Anthon Pang	30 Mar 2010
[oss-security] CVE Request -- MediaWiki - v1.15.2	Jan Lieskovsky	09 Mar 2010
Re: [oss-security] CVE Request -- MediaWiki - v1.15.2	Nico Golde	16 Mar 2010
Re: [oss-security] CVE Request -- MediaWiki - v1.15.2	Henri Salo	24 Mar 2010
Re: [oss-security] CVE Request -- MediaWiki - v1.15.2	Steven M. Christey	30 Mar 2010
[oss-security] CVE Request: postgresql integer overflow in hash table size calculation	Vincent Danen	09 Mar 2010
Re: [oss-security] CVE Request: postgresql integer overflow in hash table size calculation	Vincent Danen	16 Mar 2010
Re: [oss-security] CVE Request -- cURL/libCURL 7.20.0	Jan Lieskovsky	09 Mar 2010
[oss-security] CVE Request -- Drupal v6.16 / v5.22 SA-CORE-2010-001	Jan Lieskovsky	08 Mar 2010
Re: [oss-security] WANTED: mikmod patches	Kees Cook	06 Mar 2010
[oss-security] Re: CVE Request: gnome-screensaver termination by pressing "Enter"	Marcus Meissner	05 Mar 2010
Re: [oss-security] Re: CVE Request: gnome-screensaver termination by pressing "Enter"	Vincent Danen	16 Mar 2010
Re: [oss-security] Samba symlink 0day flaw	Ludwig Nussel	05 Mar 2010
Re: [oss-security] Samba symlink 0day flaw	Steven M. Christey	05 Mar 2010
[oss-security] kernel: hvc_console: Fix race between hvc_close and hvc_remove	Eugene Teo	04 Mar 2010
Re: [oss-security] CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference	Eugene Teo	04 Mar 2010
Re: [oss-security] CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference	Josh Bressers	04 Mar 2010
[oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Kees Cook	03 Mar 2010
Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Jan Lieskovsky	09 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	10 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	11 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	11 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	11 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	11 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	11 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	15 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	ArkanoiD	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Peter Sylvester	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	ArkanoiD	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	17 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	17 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Ludwig Nussel	17 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	ArkanoiD	17 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Brian Stafford	17 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	ArkanoiD	17 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Joe Orton	16 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Geoff Keating	11 Mar 2010
--> Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Joe Orton	11 Mar 2010
Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Emily Ratliff	17 Mar 2010
Re: [oss-security] CVE Request: libesmtp does not check NULL bytes in commonName	Steven M. Christey	30 Mar 2010
[oss-security] OpenSSL (with KRB5) remote crash - CVE-2010-0433	Tomas Hoger	03 Mar 2010
[oss-security] [cansecwest] Advanced PHP Hacking	Laurent OUDOT at TEHTRI-Security	03 Mar 2010
[oss-security] CFPs and con invitations on the list (was: [cansecwest] Advanced PHP Hacking)	Solar Designer	03 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Solar Designer	12 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Jon Oberheide	12 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Solar Designer	14 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Josh Bressers	15 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Solar Designer	25 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Josh Bressers	25 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Matthias Andree	25 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Jonathan Brossard	25 Mar 2010
--> Re: [oss-security] CFPs and con invitations on the list	Josh Bressers	26 Mar 2010
[oss-security] CVE request: kernel: NFS: Fix an Oops when truncating a file	Eugene Teo	03 Mar 2010
[oss-security] CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names?	Vincent Danen	02 Mar 2010
Re: [oss-security] CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names?	Vincent Danen	02 Mar 2010
[oss-security] Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names?	Steven M. Christey	03 Mar 2010
--> [oss-security] Re: CVE-2009-3297 samba/ncpfs/fuse issues granted individual 2010 CVE names?	Vincent Danen	04 Mar 2010
[oss-security] CVE request: kernel: dvb-core: ULE decapsulation DoS	Eugene Teo	01 Mar 2010

Last message date: 31 Mar 2010
Archived on: 01 Apr 2010 GMT

122 messages sort by: [ author ] [ date ] [ subject ]
Other periods: