oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2017/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 3
² 5	³ 14	⁴ 10	⁵ 2	⁶ 1	⁷ 2	⁸ 1
⁹ 11	¹⁰ 7	¹¹ 5	¹² 18	¹³ 3	¹⁴	¹⁵
¹⁶ 3	¹⁷ 4	¹⁸ 14	¹⁹ 5	²⁰ 7	²¹ 7	²² 4
²³ 3	²⁴ 4	²⁵ 2	²⁶ 1	²⁷ 4	²⁸	²⁹ 1
³⁰ 4	³¹ 17

Messages by day:

October 1 (3 messages)

Stored XSS vulnerability in BlogoText <= 3.7.5 (chbi@...i.eu)
Re: clamav: Out of bounds read and segfault in xar parser (Eddie Chapman <eddie@...k.net>)
Re: Stored XSS vulnerability in BlogoText <= 3.7.5 (chbi@...i.eu)

October 2 (5 messages)

Re: The Internet Bug Bounty: Data Processing (hackerone.com) (Reed Loden <reed@...dloden.com>)
Re: CVE-2017-1000252: KVM denial of service with posted interrupts on Intel systems (since Linux 4.4) (Greg KH <greg@...ah.com>)
[ANNOUNCE] CVE-2017-12620: Apache OpenNLP XXE vulnerability (Joern Kottmann <joern@...che.org>)
CVE-2017-9807: e2openplugin-OpenWebif: Remote code execution through HTTP GET parameter manipulation (John Torakis <johntorakis@...sus-labs.com>)
dnsmasq: CVE-2017-14491 to CVE-2017-14496 and CVE-2017-13704 (Simon Kelley <simon@...kelleys.org.uk>)

October 3 (14 messages)

Graphicsmagick: NULL Pointer Dereference in DICOM Decoder (CVE-2017-14994) (Terry Chia <terrycwk1994@...il.com>)
Re: Linux kernel CVEs not mentioned on oss-security (Greg KH <greg@...ah.com>)
Re: Linux kernel CVEs not mentioned on oss-security (Moritz Muehlenhoff <jmm@...til.org>)
CVE Request: FreeBSD kernel, double-fetch bug in smb_strdupin ("Xu, Meng" <meng.xu@...ech.edu>)
Re: Linux kernel CVEs not mentioned on oss-security (Kurt Seifried <kseifried@...hat.com>)
Re: CVE Request: FreeBSD kernel, double-fetch bug in smb_strdupin (Salvatore Bonaccorso <carnil@...ian.org>)
Re: Linux kernel CVEs not mentioned on oss-security (Greg KH <greg@...ah.com>)
Re: clamav: Out of bounds read and segfault in xar parser (Joel Esler <joel.esler@...com>)
Re: Qualys Security Advisory - Linux PIE/stack corruption (CVE-2017-1000253) (Jan Schaumann <jschauma@...meister.org>)
Re: Qualys Security Advisory - Linux PIE/stack corruption (CVE-2017-1000253) (Qualys Security Advisory <qsa@...lys.com>)
Re: Qualys Security Advisory - Linux PIE/stack corruption (CVE-2017-1000253) (Kurt Seifried <kseifried@...hat.com>)
Re: clamav: md5 collision based detection avoidance, Was: Out of bounds read and segfault in xar parser (klondike <klondike@...cosoft.es>)
Re: Linux kernel CVEs not mentioned on oss-security (Yves-Alexis Perez <corsac@...ian.org>)
Announce: OpenSSH 7.6 released (Damien Miller <djm@...nbsd.org>)

October 4 (10 messages)

[SECURITY ADVISORY] curl: FTP PWD response parser out of bounds read (Daniel Stenberg <daniel@...x.se>)
Re: clamav: md5 collision based detection avoidance, Was: Out of bounds read and segfault in xar parser (Joel Esler <joel.esler@...com>)
binutils: heap-based buffer overflow in parse_die (dwarf1.c) ("Agostino Sarubbo" <ago@...too.org>)
binutils: NULL pointer dereference in bfd_hash_hash (hash.c) ("Agostino Sarubbo" <ago@...too.org>)
binutils: NULL pointer dereference in concat_filename (dwarf2.c) ("Agostino Sarubbo" <ago@...too.org>)
binutils: heap-based buffer overflow in bfd_get_debug_link_info_1 (opncls.c) ("Agostino Sarubbo" <ago@...too.org>)
binutils: divide-by-zero in decode_line_info (dwarf2.c) ("Agostino Sarubbo" <ago@...too.org>)
binutils: infinite loop in find_abstract_instance_name (dwarf2.c) ("Agostino Sarubbo" <ago@...too.org>)
Several Privilege Escalation issues in Kanboard <= 1.0.46 (chbi@...i.eu)
Fwd: X server fixes for CVE-2017-13721 & CVE-2017-13723 (Alan Coopersmith <alan.coopersmith@...cle.com>)

October 5 (2 messages)

[CVE-2017-14614] GridGain Visor GUI Console - File System Path Traversal (Andrey Bazhenov <support@...dgain.freshdesk.com>)
[CVE-2017-14604] .desktop vulnerability again (Yves-Alexis Perez <corsac@...ian.org>)

October 6 (1 message)

CVE-2017-15038 Qemu: 9p: virtfs: information disclosure when reading extended attributes (P J P <ppandit@...hat.com>)

October 7 (2 messages)

Stored XSS vulnerabilities in Flyspray (chbi@...i.eu)
Reflected XSS vulnerability in Shaarli v0.9.1 (chbi@...i.eu)

October 8 (1 message)

Re: Several Privilege Escalation issues in Kanboard <= 1.0.46 ("Henri S." <henri@...v.fi>)

October 9 (11 messages)

答复: CVE-2017-14160: libvorbis-1.3.5 bark_noise_hybridmp() integer signedness bug (连一汉 <lianyihan@....cn>)
Re: The Internet Bug Bounty: Data Processing (hackerone.com) (Michael Niedermayer <michael@...dermayer.cc>)
Re: The Internet Bug Bounty: Data Processing (hackerone.com) (Reed Loden <reed@...dloden.com>)
OpenEXR : CVE-2017-14988 : DOS in Header::readfrom ("NOIRFATE" <noirfate@....qq.com>)
ImageMagick : CVE-2017-14989 : heap use-after-free in RenderFreetype ("NOIRFATE" <noirfate@....qq.com>)
CVE-2017-14991 in the Linux Kernel: local infoleak via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0 (Alexander Potapenko <glider@...gle.com>)
Re: Linux kernel CVEs not mentioned on oss-security (Fabian Keil <fk@...iankeil.de>)
Re: Several Privilege Escalation issues in Kanboard <= 1.0.46 (chbi@...i.eu)
Re: Stored XSS vulnerability in BlogoText <= 3.7.5 (chbi@...i.eu)
[SECURITY] CVE-2017-5637: DOS attack on wchp/wchc four letter words (4lw) (Patrick Hunt <phunt@...che.org>)
Re: Linux kernel CVEs not mentioned on oss-security (Stiepan <stie@....swiss>)

October 10 (7 messages)

[ANNOUNCE] Apache NiFi CVE-2017-12623 (Andy LoPresto <alopresto@...che.org>)
[CVE-2017-0903] Unsafe Object Deserialization Vulnerability in RubyGems (Aaron Patterson <tenderlove@...y-lang.org>)
CVE-2017-1000255: Linux: powerpc: kernel memory overwrite in transactional memory handling (Michael Ellerman <mpe@...erman.id.au>)
CVE-2017-12190: Linux kernel: block: memory leak when merging small consecutive buffers in SCSI IO vectors (Vladis Dronov <vdronov@...hat.com>)
Re: Several Privilege Escalation issues in Kanboard <= 1.0.46 (chbi@...i.eu)
Re: Stored XSS vulnerabilities in Flyspray (chbi@...i.eu)
Re: Reflected XSS vulnerability in Shaarli v0.9.1 (chbi@...i.eu)

October 11 (5 messages)

CVE request: Two DoS vulneribilities in libextractor (Leon Zhao <leon.zhao.7@...il.com>)
Re: CVE request: Two DoS vulneribilities in libextractor (Salvatore Bonaccorso <carnil@...ian.org>)
Linux kernel: alsa: use-after-free in /dev/snd/seq CVE-2017-15265 (Marcus Meissner <meissner@...e.de>)
Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)

October 12 (18 messages)

Privilege escalation with kill(-1, SIGKILL) in XNU kernel of macOS High Sierra (Shea Levy <shea@...alevy.com>)
Re: Privilege escalation with kill(-1, SIGKILL) in XNU kernel of macOS High Sierra (Kurt Seifried <kseifried@...hat.com>)
CVE-2017-12192 kernel: NULL pointer dereference due to KEYCTL_READ on negative key (Wade Mealing <wmealing@...hat.com>)
CVE-2017-15268. Qemu: I/O: potential memory exhaustion via websock connection to VNC (P J P <ppandit@...hat.com>)
Re: Privilege escalation with kill(-1, SIGKILL) in XNU kernel of macOS High Sierra (Hunger <hunger@...ger.hu>)
Re: Privilege escalation with kill(-1, SIGKILL) in XNU kernel of macOS High Sierra (Graham Christensen <graham@...hamc.com>)
Re: Privilege escalation with kill(-1, SIGKILL) in XNU kernel of macOS High Sierra (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Xen Security Advisory 238 - DMOP map/unmap missing argument checks (Xen.org security team <security@....org>)
Xen Security Advisory 239 - hypervisor stack leak in x86 I/O intercept code (Xen.org security team <security@....org>)
Xen Security Advisory 237 - multiple MSI mapping issues on x86 (Xen.org security team <security@....org>)
Xen Security Advisory 241 - Stale TLB entry due to page type release race (Xen.org security team <security@....org>)
Xen Security Advisory 242 - page type reference leak on x86 (Xen.org security team <security@....org>)
Xen Security Advisory 243 - x86: Incorrect handling of self-linear shadow mappings with translated guests (Xen.org security team <security@....org>)
Xen Security Advisory 244 - x86: Incorrect handling of IST settings during CPU hotplug (Xen.org security team <security@....org>)
Re: CVE request: Two DoS vulneribilities in libextractor (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2017-15289 Qemu: cirrus: OOB access issue in mode4and5 write functions (P J P <ppandit@...hat.com>)
CVE-2017-12188 Kernel: KVM: MMU potential stack buffer overrun during page walks (P J P <ppandit@...hat.com>)
CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok() (Kees Cook <keescook@...omium.org>)

October 13 (3 messages)

CVE-2017-12629 Solr: Code execution via entity expansion (Andrej Nemec <anemec@...hat.com>)
Advisory X41-2017-010: Command Execution in Shadowsocks-libev (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
Advisory X41-2017-008: Multiple Vulnerabilities in Shadowsocks (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)

October 16 (3 messages)

CVE-2017-15299: Linux kernel: incorrect update of uninstantiated keys can crash a kernel (Vladis Dronov <vdronov@...hat.com>)
wpa_supplicant/hostapd: WPA packet number reuse with replayed messages and key reinstallation (Jouni Malinen <j@...fi>)
distros list downtime (Solar Designer <solar@...nwall.com>)

October 17 (4 messages)

Re: Linux kernel: alsa: use-after-free in /dev/snd/seq CVE-2017-15265 (Marcus Meissner <meissner@...e.de>)
CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Bastian Blank <waldi@...ian.org>)
Stored XSS vulnerability in ILIAS <= 5.2.8 and <= 5.1.20 (chbi@...i.eu)
Re: CVE-2017-12190: Linux kernel: block: memory leak when merging small consecutive buffers in SCSI IO vectors (Vladis Dronov <vdronov@...hat.com>)

October 18 (14 messages)

MuPDF mutools Out-of-Bounds Write Vulnerability (CVE-2017-15587) (amon <amon@...dynarwhals.org>)
Xen Security Advisory 235 (CVE-2017-15596) - add-to-physmap error paths fail to release lock on ARM (Xen.org security team <security@....org>)
Xen Security Advisory 237 (CVE-2017-15590) - multiple MSI mapping issues on x86 (Xen.org security team <security@....org>)
Xen Security Advisory 241 (CVE-2017-15588) - Stale TLB entry due to page type release race (Xen.org security team <security@....org>)
Xen Security Advisory 242 (CVE-2017-15593) - page type reference leak on x86 (Xen.org security team <security@....org>)
Xen Security Advisory 239 (CVE-2017-15589) - hypervisor stack leak in x86 I/O intercept code (Xen.org security team <security@....org>)
Xen Security Advisory 243 (CVE-2017-15592) - x86: Incorrect handling of self-linear shadow mappings with translated gue… (Xen.org security team <security@....org…)
Xen Security Advisory 244 (CVE-2017-15594) - x86: Incorrect handling of IST settings during CPU hotplug (Xen.org security team <security@....org>)
Re: CVE-2017-12190: Linux kernel: block: memory leak when merging small consecutive buffers in SCSI IO vectors (Vladis Dronov <vdronov@...hat.com>)
WebKitGTK+ Security Advisory WSA-2017-0008 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Robert Watson <robertcwatson1@...il.com>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Ben Tasker <ben@...tasker.co.uk>)
Re: Stored XSS vulnerability in ILIAS <= 5.2.8 and <= 5.1.20 (chbi@...i.eu)
[RCESEC-2017-001][CVE-2017-14955] Check_mk v1.2.8p25 save_users() Race Condition leading to Sensitive Information Disclosu… (Julien Ahrens <info@...security.com>)

October 19 (5 messages)

Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Robert Watson <robertcwatson1@...il.com>)
Re: Stored XSS vulnerability in ILIAS <= 5.2.8 and <= 5.1.20 (Dollar Strike <dollarstrike163@...il.com>)
[ANNOUNCE] [SECURITY] CVE-2017-12629: Several critical vulnerabilities discovered in Apache Solr (XXE & RCE) (Shalin Shekhar Mangar <shalin@...che.org>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Seth Arnold <seth.arnold@...onical.com>)
CVE request: musl libc 1.1.16 and earlier dns buffer overflow (Rich Felker <dalias@...c.org>)

October 20 (7 messages)

Re: CVE request: musl libc 1.1.16 and earlier dns buffer overflow (Rich Felker <dalias@...c.org>)
Announce: Apache James 3.0.1 security release (Tellier Benoit <btellier@...che.org>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Robert Watson <robertcwatson1@...il.com>)
[CVE-2017-15186]: ffmpeg: Double free when ffmpeg parsing an craft AVI file to MKV file using ffvhuff decoder (连一汉 <lianyihan@....cn>)
Re: [CVE-2017-15186]: ffmpeg: Double free when ffmpeg parsing an craft AVI file to MKV file using ffvhuff decoder (ludo@....org (Ludovic Courtès))
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Ben Tasker <ben@...tasker.co.uk>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Seth Arnold <seth.arnold@...onical.com>)

October 21 (7 messages)

Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Robert Watson <robertcwatson1@...il.com>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Bastian Blank <waldi@...ian.org>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Solar Designer <solar@...nwall.com>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Simon McVittie <smcv@...ian.org>)
CVE-2017-15670, CVE-2017-15671 glibc: Buffer overflow and memory leak in glob with GLOB_TILDE (Eddie Chapman <eddie@...k.net>)
Re: CVE-2017-8805: Unsafe symlinks not filtered in Debian mirror script ftpsync (Robert Watson <robertcwatson1@...il.com>)
LAME 3.100 released with security fixes (Henri Salo <henri@...v.fi>)

October 22 (4 messages)

Netlink XFRM socket subsystem NULL pointer dereference (Noam Rathaus <noamr@...ondsecurity.com>)
Re: Netlink XFRM socket subsystem NULL pointer dereference (Marius Bakke <mbakke@...tmail.com>)
Re: Netlink XFRM socket subsystem NULL pointer dereference (Solar Designer <solar@...nwall.com>)
Irssi 1.0.5: CVE-2017-15228, CVE-2017-15227, CVE-2017-15721, CVE-2017-15722, CVE-2017-15723 (Ailin Nemui <ailin.nemui@...il.com>)

October 23 (3 messages)

[SECURITY ADVISORY] curl: IMAP FETCH response out of bounds read (Daniel Stenberg <daniel@...x.se>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
[KIS-2017-02] Tuleap <= 9.6 Second-Order PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)

October 24 (4 messages)

Hash thief on Windows shared folder with SCF files. ADV170014 NTLM SSO (Juan Diego <diego@...ux.com>)
Re: Hash thief on Windows shared folder with SCF files. ADV170014 NTLM SSO (Solar Designer <solar@...nwall.com>)
Xen Security Advisory 236 (CVE-2017-15597) - pin count / page reference race in grant table code (Xen.org security team <security@....org>)
Re: CVE Request -- glibc: DoS due to a buffer overrun in regexp matcher by processing multibyte characters (Solar Designer <solar@...nwall.com>)

October 25 (2 messages)

[ oss-security ] CVE-2016-10517: CSRF in redis < 3.2.7 (Thomas Calderon <calderon.thomas@...il.com>)
Re: CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok() (up201407890@...nos.dcc.fc.up.pt)

October 26 (1 message)

CVE-2016-6809: Java code execution for serialized objects embedded in MATLAB files parsed by Apache Solr using Tika (Shalin Shekhar Mangar <shalin@...che.org>)

October 27 (4 messages)

Two vulnerabilities patched in GNU Wget: CVE-2017-13089, CVE-2017-13090 (NCSC-FI Vulnerability Co-ordination <vulncoord@...ora.fi>)
Re: Advisory X41-2017-010: Command Execution in Shadowsocks-libev (Salvatore Bonaccorso <carnil@...ian.org>)
binutils: NULL pointer dereference in concat_filename (dwarf2.c) (INCOMPLETE FIX FOR CVE-2017-15023) ("Agostino Sarubbo" <ago@...too.org>)
binutils: invalid memory read in find_abstract_instance_name (dwarf2.c) ("Agostino Sarubbo" <ago@...too.org>)

October 29 (1 message)

Drupal backup_migrate information leak (was Fw: Database mishandling at defectivebydesign.org) (Hanno Böck <hanno@...eck.de>)

October 30 (4 messages)

Magento: Leaking of config file local.xml (Hanno Böck <hanno@...eck.de>)
Re: Magento: Leaking of config file local.xml (Michael Orlitzky <michael@...itzky.com>)
CVE-2017-14752, CVE-2017-15273: Stored XSS vulnerability in Mahara <= 15.04.14, <= 16.04.8, <= 16.10.5, <= 17.04.3 (chbi@...i.eu)
Quagga: CVE-2017-16227: BGP session termination due to rather long AS paths in update messages (Salvatore Bonaccorso <carnil@...ian.org>)

October 31 (17 messages)

Fw: Security risk of vim swap files (Hanno Böck <hanno@...eck.de>)
Re: Fw: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Apostolis Hardalias <ahardalias@...sus-labs.com>)
Re: Fw: Security risk of vim swap files (Stefan Bühler <stbuehler@...httpd.net>)
Re: Fw: Security risk of vim swap files (Jakub Wilk <jwilk@...lk.net>)
Re: Fw: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Solar Designer <solar@...nwall.com>)
Re: Fw: Security risk of vim swap files (Jason Cooper <osssecurity@...edaemon.net>)
Re: Fw: Security risk of vim swap files (Adam Shannon <adamkshannon@...il.com>)
Re: Security risk of vim swap files ("Simon Waters (Surevine)" <simon.waters@...evine.com>)
Re: Fw: Security risk of vim swap files (Gordo Lowrey <gordo@...eval.com>)
Re: Fw: Security risk of vim swap files (Tim <tim-security@...tinelchicken.org>)
Re: Fw: Security risk of vim swap files (Kurt H Maier <khm@...ops.net>)
Re: Fw: Security risk of vim swap files (Tim <tim-security@...tinelchicken.org>)
Re: Fw: Security risk of vim swap files (Kurt Seifried <kseifried@...hat.com>)
Re: Fw: Security risk of vim swap files (Steffen Nurpmeso <steffen@...oden.eu>)
[CVE-2017-12625] Apache Hive information disclosure vulnerability for column masking (Jesus Camacho Rodriguez <jcamacho@...che.org>)

162 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.