| Main Archive Page > Month Archives > oss-security archives |
| Subject | Author | Date |
| [oss-security] /bin/su (was: CVE request -- coreutils -- tty hijacking possible in "su" via TIOCSTI ioctl) | ||
| Karel Zak | 20 Jun 2011 | |
| Nicolas François | 15 Jun 2011 | |
| Nicolas François | 15 Jun 2011 | |
| Ondrej Vasik | 15 Jun 2011 | |
| Luka Marinko | 15 Jun 2011 | |
| Ludwig Nussel | 15 Jun 2011 | |
| [oss-security] [CVE-2011-2186] [PATCH] gitweb: Enable $prevent_xss by default | ||
| Jakub Narebski | 14 Jun 2011 | |
| [oss-security] [CVE-2011-2186] XSS security issue in gitweb for 'blob_plain' view with HTML files | ||
| Jakub Narebski | 14 Jun 2011 | |
| Ludwig Nussel | 14 Jun 2011 | |
| [oss-security] Bug#629511: Info received (CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used) | ||
| Debian Bug Tracking System | 12 Jun 2011 | |
| [oss-security] Bug#629938: Info received (CVE Request -- dbus -- Local DoS via messages with non-native byte order) | ||
| Debian Bug Tracking System | 12 Jun 2011 | |
| [oss-security] Bug#631818: Info received (CVE Request -- DokuWiki -- XSS in DokuWiki's RSS embedding mechanism) | ||
| Debian Bug Tracking System | 28 Jun 2011 | |
| [oss-security] Closed list | ||
| Tomas Hoger | 16 Jun 2011 | |
| Tomas Hoger | 16 Jun 2011 | |
| akuster | 01 Jun 2011 | |
| Solar Designer | 01 Jun 2011 | |
| Solar Designer | 01 Jun 2011 | |
| [oss-security] CVE Request -- Cherokee -- server admin vulnerable to csrf | ||
| Josh Bressers | 06 Jun 2011 | |
| dave b | 03 Jun 2011 | |
| Jan Lieskovsky | 02 Jun 2011 | |
| [oss-security] CVE Request -- Coppermine Photo Gallery -- cpg1.4.27 / cpg1.5.12 -- XSS flaw | ||
| Josh Bressers | 08 Jun 2011 | |
| Jan Lieskovsky | 08 Jun 2011 | |
| [oss-security] CVE request -- coreutils -- tty hijacking possible in "su" via TIOCSTI ioctl | ||
| Ludwig Nussel | 28 Jun 2011 | |
| Todd C. Miller | 22 Jun 2011 | |
| Ludwig Nussel | 22 Jun 2011 | |
| Josh Bressers | 21 Jun 2011 | |
| Ludwig Nussel | 21 Jun 2011 | |
| Bernhard Rosenkraenzer | 10 Jun 2011 | |
| Ludwig Nussel | 10 Jun 2011 | |
| Ludwig Nussel | 09 Jun 2011 | |
| Josh Bressers | 08 Jun 2011 | |
| daniel_at_nospam | 06 Jun 2011 | |
| Michael Gilbert | 06 Jun 2011 | |
| Josh Bressers | 06 Jun 2011 | |
| Jan Lieskovsky | 02 Jun 2011 | |
| [oss-security] CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used | ||
| Josh Bressers | 13 Jun 2011 | |
| Jan Lieskovsky | 12 Jun 2011 | |
| [oss-security] CVE Request -- dbus -- Local DoS via messages with non-native byte order | ||
| Josh Bressers | 13 Jun 2011 | |
| Jan Lieskovsky | 12 Jun 2011 | |
| [oss-security] CVE Request -- DokuWiki -- XSS in DokuWiki's RSS embedding mechanism | ||
| Josh Bressers | 29 Jun 2011 | |
| Jan Lieskovsky | 28 Jun 2011 | |
| [oss-security] CVE Request -- fabric -- Use of insecure temporary file by uploading templates and projects to remote hosts | ||
| Josh Bressers | 06 Jun 2011 | |
| Jan Lieskovsky | 03 Jun 2011 | |
| [oss-security] CVE request -- libvirt: regression introduced in disk probe logic | ||
| Josh Bressers | 02 Jun 2011 | |
| Petr Matousek | 01 Jun 2011 | |
| [oss-security] CVE Request -- libvoikko -- DoS of application linked against libvoikko due improper handling of embedded null characters in input strings | ||
| Josh Bressers | 13 Jun 2011 | |
| Jan Lieskovsky | 13 Jun 2011 | |
| [oss-security] CVE Request -- LuaExpat -- Prone to XML "billion laughs attack" | ||
| Josh Bressers | 06 Jun 2011 | |
| Jan Lieskovsky | 06 Jun 2011 | |
| [oss-security] CVE Request -- OpenOffice.org -- InteVyDis Demo of OpenOffice 0day. Released with VulnDisco 8.8 pack (release date May,2009) | ||
| Josh Bressers | 02 Jun 2011 | |
| Jan Lieskovsky | 01 Jun 2011 | |
| [oss-security] CVE Request -- vsftpd -- Do not create network namespace per connection | ||
| Eugene Teo | 06 Jun 2011 | |
| Josh Bressers | 06 Jun 2011 | |
| Jan Lieskovsky | 06 Jun 2011 | |
| Jan Lieskovsky | 06 Jun 2011 | |
| [oss-security] CVE Request -- vte -- Excessive memory and CPU use by processing certain character sequences | ||
| Josh Bressers | 13 Jun 2011 | |
| Jan Lieskovsky | 09 Jun 2011 | |
| [oss-security] CVE Request -- WebSVN -- execCommand() remote commands injection vulnerability | ||
| Josh Bressers | 08 Jun 2011 | |
| Jan Lieskovsky | 07 Jun 2011 | |
| [oss-security] CVE Request -- xscreensaver -- exits when activated | ||
| Josh Bressers | 06 Jun 2011 | |
| Jan Lieskovsky | 03 Jun 2011 | |
| [oss-security] CVE Request / Discussion -- dirmngr -- Improper dealing with blocking system calls, when verifying a certificate | ||
| Josh Bressers | 15 Jun 2011 | |
| Bernhard Reiter | 15 Jun 2011 | |
| Josh Bressers | 06 Jun 2011 | |
| Jan Lieskovsky | 03 Jun 2011 | |
| [oss-security] CVE request for fetchmail STARTTLS hang (Denial of Service) | ||
| Matthias Andree | 01 Jun 2011 | |
| [oss-security] CVE request for libpng regression (CVE-2004-0421) | ||
| Josh Bressers | 28 Jun 2011 | |
| Vincent Danen | 27 Jun 2011 | |
| [oss-security] CVE request for Wireshark 1.4.5 TCP DoS issue | ||
| Josh Bressers | 01 Jun 2011 | |
| [oss-security] CVE request for Wireshark 1.4.6/1.2.16 Multiple DoS issues | ||
| Josh Bressers | 01 Jun 2011 | |
| Huzaifa Sidhpurwala | 01 Jun 2011 | |
| [oss-security] CVE request: Alpha kernel issues | ||
| Eugene Teo | 14 Jun 2011 | |
| Moritz Muehlenhoff | 13 Jun 2011 | |
| [oss-security] CVE request: buffer overflow in tftp-hpa | ||
| Josh Bressers | 13 Jun 2011 | |
| Timo Warns | 11 Jun 2011 | |
| [oss-security] CVE request: crypt_blowfish 8-bit character mishandling | ||
| Solar Designer | 29 Jun 2011 | |
| Michael Matz | 28 Jun 2011 | |
| Solar Designer | 27 Jun 2011 | |
| Solar Designer | 27 Jun 2011 | |
| Michael Matz | 27 Jun 2011 | |
| Ludwig Nussel | 27 Jun 2011 | |
| Djalal Harouni | 24 Jun 2011 | |
| Solar Designer | 24 Jun 2011 | |
| Solar Designer | 23 Jun 2011 | |
| Ludwig Nussel | 22 Jun 2011 | |
| Solar Designer | 21 Jun 2011 | |
| Vincent Danen | 21 Jun 2011 | |
| Solar Designer | 21 Jun 2011 | |
| Vincent Danen | 21 Jun 2011 | |
| Solar Designer | 21 Jun 2011 | |
| Vincent Danen | 21 Jun 2011 | |
| Solar Designer | 21 Jun 2011 | |
| Vincent Danen | 21 Jun 2011 | |
| Ludwig Nussel | 21 Jun 2011 | |
| Josh Bressers | 21 Jun 2011 | |
| Solar Designer | 21 Jun 2011 | |
| The Fungi | 20 Jun 2011 | |
| Solar Designer | 20 Jun 2011 | |
| The Fungi | 20 Jun 2011 | |
| Solar Designer | 20 Jun 2011 | |
| Daniel Godás | 20 Jun 2011 | |
| Solar Designer | 20 Jun 2011 | |
| [oss-security] CVE request: FreeBSD/NetBSD 802.11 kernel memory disclosure | ||
| Josh Bressers | 20 Jun 2011 | |
| Dan Rosenberg | 20 Jun 2011 | |
| Josh Bressers | 20 Jun 2011 | |
| Dan Rosenberg | 16 Jun 2011 | |
| [oss-security] CVE request: Joomla unspecified information disclosure vulnerability | ||
| Henri Salo | 27 Jun 2011 | |
| YGN Ethical Hacker Group | 27 Jun 2011 | |
| Josh Bressers | 23 Jun 2011 | |
| Henri Salo | 20 Jun 2011 | |
| [oss-security] CVE Request: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities | ||
| Josh Bressers | 29 Jun 2011 | |
| YGN Ethical Hacker Group | 28 Jun 2011 | |
| [oss-security] CVE request: kernel: alpha: fix several security issues | ||
| Josh Bressers | 15 Jun 2011 | |
| Eugene Teo | 13 Jun 2011 | |
| [oss-security] CVE request: kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace | ||
| Murray McAllister | 24 Jun 2011 | |
| Eugene Teo | 24 Jun 2011 | |
| [oss-security] CVE request: kernel: ext4: init timer earlier to avoid a kernel panic in __save_error_info | ||
| Eugene Teo | 24 Jun 2011 | |
| Kees Cook | 23 Jun 2011 | |
| [oss-security] CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables | ||
| Timo Warns | 05 Jun 2011 | |
| Eugene Teo | 03 Jun 2011 | |
| [oss-security] CVE request: kernel: hfs_find_init() sb->ext_tree NULL pointer dereference | ||
| Josh Bressers | 13 Jun 2011 | |
| Eugene Teo | 13 Jun 2011 | |
| [oss-security] CVE request: kernel: inet_diag: fix inet_diag_bc_audit() | ||
| Dan Rosenberg | 20 Jun 2011 | |
| Josh Bressers | 20 Jun 2011 | |
| Eugene Teo | 20 Jun 2011 | |
| [oss-security] CVE request: kernel: ksm: race between ksmd and exiting task | ||
| Huzaifa Sidhpurwala | 06 Jun 2011 | |
| Eugene Teo | 03 Jun 2011 | |
| [oss-security] CVE request: kernel: mm: avoid wrapping vm_pgoff in mremap() and stack expansions | ||
| Petr Matousek | 24 Jun 2011 | |
| [oss-security] CVE request: kernel: NLM: Don't hang forever on NLM unlock requests | ||
| Josh Bressers | 23 Jun 2011 | |
| Eugene Teo | 23 Jun 2011 | |
| [oss-security] CVE request: kernel: oom: use pte pages in OOM score | ||
| Huzaifa Sidhpurwala | 28 Jun 2011 | |
| Eugene Teo | 28 Jun 2011 | |
| [oss-security] CVE request: kernel: remote buffer overflow in bluetooth | ||
| Eugene Teo | 27 Jun 2011 | |
| Dan Rosenberg | 24 Jun 2011 | |
| [oss-security] CVE request: kernel: set cred->user_ns in key_replace_session_keyring | ||
| Huzaifa Sidhpurwala | 06 Jun 2011 | |
| Eugene Teo | 03 Jun 2011 | |
| [oss-security] CVE request: kernel: taskstats local DoS | ||
| Vasiliy Kulikov | 30 Jun 2011 | |
| Eugene Teo | 22 Jun 2011 | |
| Vasiliy Kulikov | 22 Jun 2011 | |
| [oss-security] CVE request: kernel: taskstats/procfs io infoleak | ||
| Eugene Teo | 27 Jun 2011 | |
| [oss-security] CVE request: kernel: taskstats/procfs io infoleak (was: taskstats authorized_keys presence infoleak PoC) | ||
| Eugene Teo | 29 Jun 2011 | |
| Josh Bressers | 28 Jun 2011 | |
| Vasiliy Kulikov | 24 Jun 2011 | |
| [oss-security] CVE request: kernel: thp: madvise on top of /dev/zero private mapping can lead to panic | ||
| Josh Bressers | 20 Jun 2011 | |
| Petr Matousek | 20 Jun 2011 | |
| [oss-security] CVE request: kernel: tomoyo: oops in tomoyo_mount_acl() | ||
| Petr Matousek | 30 Jun 2011 | |
| [oss-security] CVE request: libvirt: integer overflow in VirDomainGetVcpus | ||
| Josh Bressers | 29 Jun 2011 | |
| Petr Matousek | 28 Jun 2011 | |
| [oss-security] CVE Request: Mambo CMS 4.6.x | Multiple Cross Site Scripting Vulnerabilities | ||
| Josh Bressers | 28 Jun 2011 | |
| YGN Ethical Hacker Group | 27 Jun 2011 | |
| [oss-security] CVE request: Multiple security vulnerabilities in ARSC Really Simple Chat | ||
| Steven M. Christey | 08 Jun 2011 | |
| Josh Bressers | 02 Jun 2011 | |
| Henri Salo | 02 Jun 2011 | |
| [oss-security] CVE Request: nfs-utils | ||
| Josh Bressers | 28 Jun 2011 | |
| Ludwig Nussel | 27 Jun 2011 | |
| [oss-security] CVE request: openssl timing attack | ||
| Solar Designer | 04 Jun 2011 | |
| Michael Gilbert | 04 Jun 2011 | |
| Solar Designer | 01 Jun 2011 | |
| [oss-security] CVE request: pam_ssh not dropping root gid(s) | ||
| Sebastian Krahmer | 07 Jun 2011 | |
| Josh Bressers | 06 Jun 2011 | |
| Thomas Biege | 06 Jun 2011 | |
| Jan Lieskovsky | 06 Jun 2011 | |
| Sebastian Krahmer | 06 Jun 2011 | |
| [oss-security] CVE Request: PHP File upload filename | ||
| Josh Bressers | 13 Jun 2011 | |
| Felipe Pena | 12 Jun 2011 | |
| [oss-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities | ||
| Josh Bressers | 29 Jun 2011 | |
| Jan Lieskovsky | 28 Jun 2011 | |
| Mango | 28 Jun 2011 | |
| [oss-security] CVE Request: prosody DoS, djabberd external entity injection | ||
| Josh Bressers | 15 Jun 2011 | |
| Wouter Coekaerts | 14 Jun 2011 | |
| [oss-security] CVE request: qemu-kvm: OOB memory access caused by negative vq notifies | ||
| Josh Bressers | 29 Jun 2011 | |
| Petr Matousek | 28 Jun 2011 | |
| [oss-security] CVE Request: Ruby on Rails 3/rails_xss XSS | ||
| Josh Bressers | 13 Jun 2011 | |
| Ludwig Nussel | 09 Jun 2011 | |
| [oss-security] CVE request: Several Moodle issues | ||
| Moritz Mühlenhoff | 16 Jun 2011 | |
| [oss-security] CVE request: vlc | ||
| Josh Bressers | 08 Jun 2011 | |
| Marc Deslauriers | 07 Jun 2011 | |
| [oss-security] CVE request: XSS in nagios | ||
| Josh Bressers | 02 Jun 2011 | |
| Vincent Danen | 01 Jun 2011 | |
| [oss-security] CVE requests: opie off by one and setuid() failure | ||
| Josh Bressers | 23 Jun 2011 | |
| Vasiliy Kulikov | 22 Jun 2011 | |
| Sebastian Krahmer | 22 Jun 2011 | |
| [oss-security] CVE-2011-1576 kernel: net: Fix memory leak/corruption on VLAN GRO_DROP | ||
| Petr Matousek | 06 Jun 2011 | |
| [oss-security] CVE-2011-2485 assignment notification -- gdk-pixbuf | ||
| Jan Lieskovsky | 24 Jun 2011 | |
| [oss-security] CVE-request: XSS in Webmin 1.540 | ||
| Henri Salo | 13 Jun 2011 | |
| [oss-security] fetchmail 6.3.20 release to fix CVE-2011-1947 (was: CVE request for fetchmail STARTTLS hang (Denial of Service)) | ||
| Matthias Andree | 06 Jun 2011 | |
| [oss-security] Linux kernel proactive security hardening | ||
| Solar Designer | 03 Jun 2011 | |
| [oss-security] list archive | ||
| Tomas Hoger | 16 Jun 2011 | |
| [oss-security] Multiple libraries privilege checking | ||
| Florian Weimer | 19 Jun 2011 | |
| [oss-security] NetworkManager: did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks | ||
| Huzaifa Sidhpurwala | 23 Jun 2011 | |
| [oss-security] nspluginwrapper CVE id | ||
| Josh Bressers | 28 Jun 2011 | |
| [oss-security] Security issue in cherokee | ||
| Josh Bressers | 06 Jun 2011 | |
| Jamie Strandboge | 03 Jun 2011 | |
| [oss-security] Security issue in gitweb | ||
| Josh Bressers | 06 Jun 2011 | |
| Jamie Strandboge | 03 Jun 2011 | |
| [oss-security] taskstats authorized_keys presence infoleak PoC | ||
| Vasiliy Kulikov | 21 Jun 2011 | |
| Josh Bressers | 21 Jun 2011 | |
| Vasiliy Kulikov | 21 Jun 2011 | |
| [Phpmyadmin-security] [oss-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities | ||
| Herman van Rink | 28 Jun 2011 | |
| [Security] CVE request: kernel: taskstats/procfs io infoleak (was: taskstats authorized_keys presence infoleak PoC) | ||
| Vasiliy Kulikov | 29 Jun 2011 | |
| Vasiliy Kulikov | 29 Jun 2011 | |
| Linus Torvalds | 29 Jun 2011 | |
| Vasiliy Kulikov | 29 Jun 2011 | |
| Vasiliy Kulikov | 29 Jun 2011 | |
| Vasiliy Kulikov | 29 Jun 2011 | |
| Vasiliy Kulikov | 29 Jun 2011 | |
| Linus Torvalds | 29 Jun 2011 | |
| Linus Torvalds | 29 Jun 2011 | |
| Andrew Morton | 28 Jun 2011 | |
| Linus Torvalds | 27 Jun 2011 | |
| CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used | ||
| Mark Stosberg | 13 Jun 2011 | |
| CVE Request -- vsftpd -- Do not create network namespace per connection | ||
| Chris Evans | 06 Jun 2011 | |
| Greg KH | 06 Jun 2011 | |
| CVE request: FreeBSD/NetBSD 802.11 kernel memory disclosure | ||
| Dan Rosenberg | 20 Jun 2011 | |
| CVE request: kernel: mm: avoid wrapping vm_pgoff in mremap() and stack expansions | ||
| Eugene Teo | 27 Jun 2011 | |
| CVE request: kernel: taskstats/procfs io infoleak | ||
| Vasiliy Kulikov | 25 Jun 2011 | |
| CVE-request: XSS in Webmin 1.540 | ||
| Josh Bressers | 13 Jun 2011 | |
| Jamie Cameron | 13 Jun 2011 | |
| Javier Bassi | 13 Jun 2011 | |
| Security issue in cherokee | ||
| Alvaro Lopez Ortega | 06 Jun 2011 | |
| XSS security issue in gitweb for 'blob_plain' view with HTML files | ||
| Ludwig Nussel | 14 Jun 2011 | |
| Jakub Narebski | 04 Jun 2011 | |
| dave b | 03 Jun 2011 | |
| Jakub Narebski | 03 Jun 2011 | |