oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2018/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 4	² 4	³	⁴
⁵ 2	⁶ 8	⁷ 1	⁸ 3	⁹ 3	¹⁰ 1	¹¹ 1
¹² 3	¹³	¹⁴	¹⁵	¹⁶ 1	¹⁷	¹⁸ 1
¹⁹ 1	²⁰ 9	²¹	²² 3	²³ 10	²⁴ 3	²⁵ 4
²⁶ 2	²⁷ 5	²⁸ 1	²⁹ 5	³⁰

Messages by day:

November 1 (4 messages)

CVE-2018-18849 Qemu: lsi53c895a: OOB msg buffer access leads to DoS (P J P <ppandit@...hat.com>)
Xen Security Advisory 278 v2 (CVE-2018-18883) - x86: Nested VT-x usable even when disabled (Xen.org security team <security@....org>)
Icecast 2.4.4 - CVE-2018-18820 - buffer overflow in url-auth (Thomas B. Rücker <thomas@...cker.fi>)
CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Billy Brumley <bbrumley@...il.com>)

November 2 (4 messages)

CVE-2018-16847 QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations (P J P <ppandit@...hat.com>)
CVE-2018-18439, CVE-2018-18440 - U-Boot verified boot bypass vulnerabilities (Andrea Barisani <andrea.barisani@...ecure.com>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Solar Designer <solar@...nwall.com>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Billy Brumley <bbrumley@...il.com>)

November 5 (2 messages)

[CVE-2018-16470] Possible DoS vulnerability in Rack (Aaron Patterson <tenderlove@...y-lang.org>)
[CVE-2018-16471] Possible XSS vulnerability in Rack (Aaron Patterson <tenderlove@...y-lang.org>)

November 6 (8 messages)

libiec61850 stack based buffer overflow - CVE-2018-18957 (Dhiraj Mishra <mishra.dhiraj95@...il.com>)
[SECURITY] CVE-2018-17184 Apache Syncope (Francesco Chicchiriccò <ilgrosso@...che.org>)
[SECURITY] CVE-2018-17186 Apache Syncope (Francesco Chicchiriccò <ilgrosso@...che.org>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Cesar Pereida Garcia <cesar.pereidagarcia@....fi>)
Xen Security Advisory 282 v1 - guest use of HLE constructs may lock up host (Xen.org security team <security@....org>)
CVE-2018-18954 QEMU: ppc64: Out-of-bounds r/w stack access in pnv_lpc_do_eccb (P J P <ppandit@...hat.com>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Solar Designer <solar@...nwall.com>)
PowerDNS Security Advisories 2018-03, 2018-04, 2018-05, 2018-06 and 2018-07 (Remi Gacogne <remi.gacogne@...erdns.com>)

November 7 (1 message)

Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Billy Brumley <bbrumley@...il.com>)

November 8 (3 messages)

[SECURITY] CVE-2018-1314: Hive explain query not being authorized (Daniel Dai <daijy@...che.org>)
[SECURITY] CVE-2018-11777: Blocking local resource access in HiveServer2 (Daniel Dai <daijy@...che.org>)
PowerDNS Security Advisories for dnsdist 2018-08 (Remi Gacogne <remi.gacogne@...erdns.com>)

November 9 (3 messages)

Re: Squid Proxy multiple vulnerabilities (Karol Babioch <kbabioch@...e.de>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Billy Brumley <bbrumley@...il.com>)

November 10 (1 message)

null-pointer dereference in poppler library (Dhiraj Mishra <mishra.dhiraj95@...il.com>)

November 11 (1 message)

Re: null-pointer dereference in poppler library (Dhiraj Mishra <mishra.dhiraj95@...il.com>)

November 12 (3 messages)

Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Billy Brumley <bbrumley@...il.com>)
[SECURITY] [CVE-2018-17187] Apache Qpid Proton-J transport TLS wrapper hostname verification mode not implemented (Robbie Gemmell <robbie@...che.org>)
Re: CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures (Marc Deslauriers <marc.deslauriers@...onical.com>)

November 16 (1 message)

Linux kernel: broken uid/gid mapping for nested user namespaces with >5 ranges (CVE-2018-18955; since 4.15; fixed in 4.18.19 and 4… (Jann Horn <jannh@...gle.com>)

November 18 (1 message)

CVE-2018-17190: Unsecured Apache Spark standalone executes user code (Sean Owen <srowen@...che.org>)

November 19 (1 message)

REJECT request filed for CVE-2018-11210 against tinyxml2 (Florian Weimer <fweimer@...hat.com>)

November 20 (9 messages)

CVE-2018-19364 Qemu: 9pfs: Use-after-free due to race condition while updating fid path (P J P <ppandit@...hat.com>)
Xen Security Advisory 275 v2 - insufficient TLB flushing / improper large page mappings with AMD IOMMUs (Xen.org security team <security@....org>)
Xen Security Advisory 279 v2 - x86: DoS from attempting to use INVPCID with a non-canonical addresses (Xen.org security team <security@....org>)
Xen Security Advisory 277 v2 - x86: incorrect error handling for guest p2m page removals (Xen.org security team <security@....org>)
Xen Security Advisory 276 v2 - resource accounting issues in x86 IOREQ server handling (Xen.org security team <security@....org>)
Xen Security Advisory 280 v2 - Fix for XSA-240 conflicts with shadow paging (Xen.org security team <security@....org>)
Arbitrary file upload vulnerability in jQuery-Picture-Cut v1.1beta ("Larry W. Cashdollar" <larry0@...com>)
Arbitrary file upload vulnerability in jQuery Upload File v4.0.2 ("Larry W. Cashdollar" <larry0@...com>)
Arbitrary File Upload File Upload Vulnerability in php-traditional-server v1.2.2 ("Larry W. Cashdollar" <larry0@...com>)

November 22 (3 messages)

WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0008 (Michael Catanzaro <mcatanzaro@...lia.com>)
CVE-2018-8009: Apache Hadoop distributed cache archive vulnerability (Akira Ajisaka <aajisaka@...che.org>)
PHP imap_open() script injection (Hanno Böck <hanno@...eck.de>)

November 23 (10 messages)

Crashes and memory safety bugs in dcraw (Hanno Böck <hanno@...eck.de>)
Re: Crashes and memory safety bugs in dcraw (Agostino Sarubbo <ago@...too.org>)
Re: Crashes and memory safety bugs in dcraw (Hanno Böck <hanno@...eck.de>)
Re: Crashes and memory safety bugs in dcraw (Marcus Meissner <meissner@...e.de>)
CVE-2018-16862: Linux kernel: cleancache: deleted files infoleak (Vladis Dronov <vdronov@...hat.com>)
fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Yves-Alexis Perez <corsac@...ian.org>)
Re: Crashes and memory safety bugs in dcraw (Ian Zimmerman <itz@...y.loosely.org>)
Re: fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Greg KH <greg@...ah.com>)
Re: fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Yves-Alexis Perez <corsac@...ian.org>)
Re: fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Daniel Borkmann <daniel@...earbox.net>)

November 24 (3 messages)

Re: Re: Crashes and memory safety bugs in dcraw (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided) (Yves-Alexis Perez <corsac@...ian.org>)
Path traversal in mozilla PDF.js [Unpatched] (Dhiraj Mishra <mishra.dhiraj95@...il.com>)

November 25 (4 messages)

catdoc: out of bounds heap read and nullpointer / segfault (Hanno Böck <hanno@...eck.de>)
Re: catdoc: out of bounds heap read and nullpointer / segfault (Agostino Sarubbo <ago@...too.org>)
Re: PHP imap_open() script injection (Salvatore Bonaccorso <carnil@...ian.org>)
Re: catdoc: out of bounds heap read and nullpointer / segfault (Hanno Böck <hanno@...eck.de>)

November 26 (2 messages)

CVE-2018-19489 QEMU: 9pfs: crash due to race condition in renaming files (P J P <ppandit@...hat.com>)
PowerDNS Security Advisory 2018-09 (Remi Gacogne <remi.gacogne@...erdns.com>)

November 27 (5 messages)

Re: Crashes and memory safety bugs in dcraw (Marcus Meissner <meissner@...e.de>)
CVE-2018-11766: Apache Hadoop privilege escalation vulnerability (Akira Ajisaka <aajisaka@...che.org>)
CVE-2018-19591: glibc if_nametoindex may not close descriptor (Florian Weimer <fweimer@...hat.com>)
[CVE-2018-16476] Broken Access Control vulnerability in Active Job (Rafael Mendonça França <rafaelmfranca@...il.com>)
[CVE-2018-16477] Bypass vulnerability in Active Storage (Rafael Mendonça França <rafaelmfranca@...il.com>)

November 28 (1 message)

memory safety bugs in bc (Hanno Böck <hanno@...eck.de>)

November 29 (5 messages)

CVE-2018-19665 Qemu: bt: integer overflow in Bluetooth routines allows memory corruption (P J P <ppandit@...hat.com>)
Re: memory safety bugs in bc (Marcus Meissner <meissner@...e.de>)
Re: memory safety bugs in bc (Daniel Kahn Gillmor <dkg@...thhorseman.net>)
Re: memory safety bugs in bc (Hanno Böck <hanno@...eck.de>)
Re: memory safety bugs in bc (Daniel Kahn Gillmor <dkg@...thhorseman.net>)

75 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.