linux-distros mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

linux-distros mailing list - 2021/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 2	² 4
³ 2	⁴ 10	⁵ 12	⁶ 2	⁷ 6	⁸	⁹
¹⁰ 2	¹¹ 12	¹² 7	¹³	¹⁴	¹⁵	¹⁶
¹⁷ 6	¹⁸ 5	¹⁹ 1	²⁰ 7	²¹ 1	²² 2	²³
²⁴ 4	²⁵ 7	²⁶ 16	²⁷ 2	²⁸	²⁹	³⁰ 2
³¹

Messages by day:

May 1 (2 messages)

[vs] ... (Demi Marie Obenour <demi@...isiblethingslab.com>)
[vs] Exim 4.94.2 patches backported to 4.92.3 (Heiko Schlittermann <hs@...marc.schlittermann.de>)

May 2 (4 messages)

[vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
[vs-plain] Re: [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Greg KH <greg@...ah.com>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Solar Designer <solar@...nwall.com>)
[vs-plain] Re: [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Linus Torvalds <torvalds@...uxfoundation.org>)

May 3 (2 messages)

[vs-plain] Re: [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
Re: [vs-plain] Re: [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Solar Designer <solar@...nwall.com>)

May 4 (10 messages)

Re: [vs-plain] hivex (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [vs] Exim (Qualys Security Advisory <qsa@...lys.com>)
[vs-plain] Re: ... ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
[vs] ... (Demi Marie Obenour <demi@...isiblethingslab.com>)
[vs-plain] Re: ... ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
[vs-plain] Re: [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Oliver Hartkopp <socketcan@...tkopp.net>)
[vs-plain] CVE-2021-3489 - Linux kernel eBPF RINGBUF map oversized allocation (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
[vs-plain] CVE-2021-3490 - Linux kernel eBPF bitwise ops ALU32 bounds tracking (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
[vs-plain] CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Linus Torvalds <torvalds@...uxfoundation.org>)

May 5 (12 messages)

[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Al Viro <viro@...iv.linux.org.uk>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Kees Cook <keescook@...omium.org>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Jens Axboe <axboe@...nel.dk>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Kees Cook <keescook@...omium.org>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
[vs] various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Johannes Berg <johannes@...solutions.net>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Linus Torvalds <torvalds@...uxfoundation.org>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Linus Torvalds <torvalds@...uxfoundation.org>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Jens Axboe <axboe@...nel.dk>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Jens Axboe <axboe@...nel.dk>)

May 6 (2 messages)

[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Kees Cook <keescook@...omium.org>)
[vs-plain] Re: CVE-2021-3491 - Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass (Jens Axboe <axboe@...nel.dk>)

May 7 (6 messages)

[vs-plain] Re: CVE-2021-3489 - Linux kernel eBPF RINGBUF map oversized allocation (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
Re: [vs] various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Johannes Berg <johannes@...solutions.net>)
[vs-plain] Re: various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Solar Designer <solar@...nwall.com>)
[vs-plain] Re: various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Anthony Liguori <aliguori@...zon.com>)
Re: [vs-plain] Re: various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] Re: various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Johannes Berg <johannes@...solutions.net>)

May 10 (2 messages)

Re: [vs] various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Jouni Malinen <j@...fi>)
[vs] CVE-2021-30465: runc<=1.0.0-rc94 vulnerable to symlink-exchange attack (Aleksa Sarai <cyphar@...har.com>)

May 11 (12 messages)

[vs-plain] Re: various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Seth Arnold <seth.arnold@...onical.com>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
Re: [vs] various 802.11 security issues - embargo until 2021-05-11 18:00 UTC (Jouni Malinen <j@...fi>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Marc Kleine-Budde <mkl@...gutronix.de>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Marc Kleine-Budde <mkl@...gutronix.de>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Oliver Hartkopp <socketcan@...tkopp.net>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Steve Beattie <steve.beattie@...onical.com>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Oliver Hartkopp <socketcan@...tkopp.net>)

May 12 (7 messages)

Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Marc Kleine-Budde <mkl@...gutronix.de>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Seth Arnold <seth.arnold@...onical.com>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Oliver Hartkopp <socketcan@...tkopp.net>)
[vs-plain] Re: CVE-2021-30465: runc<=1.0.0-rc94 vulnerable to symlink-exchange attack (Aleksa Sarai <cyphar@...har.com>)
Re: [vs-plain] Re: CVE-2021-30465: runc<=1.0.0-rc94 vulnerable to symlink-exchange attack ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
Re: [vs-plain] [PATCH] net/can: isotp_setsockopt() leads to local privilege escalation (Dan Carpenter <dan.carpenter@...cle.com>)

May 17 (6 messages)

[vs-plain] curl: TELNET stack contents disclosure (1/2) (Daniel Stenberg <daniel@...x.se>)
[vs-plain] curl: TLS session caching disaster (2/2) (Daniel Stenberg <daniel@...x.se>)
Re: [vs-plain] curl: TLS session caching disaster (2/2) (Robert Frohl <rfrohl@...e.com>)
[vs] nginx Off-by-One Heap Write Vulnerability (Luis Merino <luis.merino@...-dsec.de>)
[vs-plain] Implementation bug in the Linux Bluetooth subsystem (Mart111n <mmmart11nnnnn@...il.com>)
[vs-plain] Re: nginx Off-by-One Heap Write Vulnerability (Anthony Liguori <aliguori@...zon.com>)

May 18 (5 messages)

Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (xiao zhang <xiao.zhang@...driver.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Mart111n <mmmart11nnnnn@...il.com>)
[vs-plain] Re: nginx Off-by-One Heap Write Vulnerability ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
[vs-plain] Re: nginx Off-by-One Heap Write Vulnerability (Luis Merino <luis.merino@...-dsec.de>)
Re: [vs] nginx Off-by-One Heap Write Vulnerability (Luis Merino <luis.merino@...-dsec.de>)

May 19 (1 message)

Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem ("Zhang, Xiao" <xiao.zhang@...driver.com>)

May 20 (7 messages)

Re: [vs] nginx Off-by-One Heap Write Vulnerability (Tyler Hicks <code@...icks.com>)
Re: [vs] nginx Off-by-One Heap Write Vulnerability (Tyler Hicks <code@...icks.com>)
[vs-plain] Re: nginx Off-by-One Heap Write Vulnerability ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
[vs-plain] RE: nginx Off-by-One Heap Write Vulnerability (Anthony Liguori <aliguori@...zon.com>)
[vs-plain] RE: nginx Off-by-One Heap Write Vulnerability (Anthony Liguori <aliguori@...zon.com>)
Re: [vs] nginx Off-by-One Heap Write Vulnerability (Luis Merino <luis.merino@...-dsec.de>)
[vs-plain] Re: nginx Off-by-One Heap Write Vulnerability ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)

May 21 (1 message)

[vs] ... (Michael McNally <mcnally@....org>)

May 22 (2 messages)

Re: [vs] ... (Seth Arnold <seth.arnold@...onical.com>)
Re: [vs] nginx Off-by-One Heap Write Vulnerability (Tyler Hicks <code@...icks.com>)

May 24 (4 messages)

Re: [vs] nginx Off-by-One Heap Write Vulnerability (Luis Merino <luis.merino@...-dsec.de>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Mart111n <mmmart11nnnnn@...il.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Guilherme Suckevicz <gsuckevi@...hat.com>)

May 25 (7 messages)

Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Mart111n <mmmart11nnnnn@...il.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Seth Arnold <seth.arnold@...onical.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Mart111n <mmmart11nnnnn@...il.com>)
Re: [vs] nginx Off-by-One Heap Write Vulnerability (Luis Merino <luis.merino@...-dsec.de>)
[vs-plain] Re: [vs] nginx Off-by-One Heap Write Vulnerability (Roxana Bradescu <roxana.bradescu@...cle.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Greg KH <greg@...ah.com>)

May 26 (16 messages)

[vs-plain] INTEL-SA-00517 (Luiz Augusto von Dentz <luiz.dentz@...il.com>)
[vs-plain] Re: INTEL-SA-00517 (Greg KH <greg@...ah.com>)
[vs-plain] Re: INTEL-SA-00517 (Greg KH <greg@...ah.com>)
Re: [vs-plain] Re: INTEL-SA-00517 (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [vs-plain] Re: INTEL-SA-00517 (Greg KH <greg@...ah.com>)
[vs-plain] Re: INTEL-SA-00517 (Luiz Augusto von Dentz <luiz.dentz@...il.com>)
[vs-plain] Re: INTEL-SA-00517 (Greg KH <greg@...ah.com>)
Re: [vs-plain] INTEL-SA-00517 (Solar Designer <solar@...nwall.com>)
Re: [vs-plain] INTEL-SA-00517 (John Haxby <john.haxby@...cle.com>)
Re: [vs-plain] Re: INTEL-SA-00517 (Greg KH <greg@...ah.com>)
[vs] CVE-2021-3560 polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (Cedric Buissart <cbuissar@...hat.com>)
Re: [vs-plain] Implementation bug in the Linux Bluetooth subsystem (Mart111n <mmmart11nnnnn@...il.com>)
[vs-plain] CVE-2021-3560 polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (Roxana Bradescu <roxana.bradescu@...cle.com>)
[vs] ... (John Haxby <john.haxby@...cle.com>)
[vs-plain] Re: ***UNCHECKED*** ... (Thomas Klausner <wiz@...BSD.org>)
Re: [vs] CVE-2021-3560 polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (Cedric Buissart <cbuissar@...hat.com>)

May 27 (2 messages)

Re: [vs] CVE-2021-3560 polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (Tyler Hicks <code@...icks.com>)
Re: [vs] CVE-2021-3560 polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (Cedric Buissart <cbuissar@...hat.com>)

May 30 (2 messages)

[vs-plain] Use-After-Free vulnerability in function hci_sock_bound_ioctl() (Lin Horse <kylin.formalin@...il.com>)
Re: [vs-plain] Use-After-Free vulnerability (Roxana Bradescu <roxana.bradescu@...cle.com>)

112 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.