oss-security mailing list - 2019/05

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2019/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 1	² 1	³ 3	⁴	⁵ 4
⁶ 1	⁷ 1	⁸ 7	⁹ 1	¹⁰ 4	¹¹ 1	¹²
¹³	¹⁴ 3	¹⁵	¹⁶ 1	¹⁷	¹⁸	¹⁹ 6
²⁰ 2	²¹ 1	²² 7	²³	²⁴ 2	²⁵	²⁶
²⁷	²⁸ 1	²⁹	³⁰ 2	³¹ 2

Messages by day:

May 1 (1 message)

[ANNOUNCE] CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability fix (Lou DeGenaro <lou.degenaro@...il.com>)

May 2 (1 message)

CVE-2019-11683: "GRO packet of death" issue in the Linux kernel (Andrey Konovalov <andreyknvl@...il.com>)

May 3 (3 messages)

[CVE-2018-17201]: Apache Commons Imaging information disclosure vulnerability ("Bruno P. Kinoshita" <kinow@...che.org>)
[CVE-2018-17202]: Apache Commons Imaging information disclosure vulnerability ("Bruno P. Kinoshita" <kinow@...che.org>)
XSS via EXIF tag in Serendipity blog (Hanno Böck <hanno@...eck.de>)

May 5 (4 messages)

Open source tool | Lets Map Your Network (Pramod Rana <varchashva@...il.com>)
CSV Injection | Alkacon OpenCMS v10.5.4 and before (Pramod Rana <varchashva@...il.com>)
Cross Site Scripting | WolfCMS v0.8.3.1 and before (Pramod Rana <varchashva@...il.com>)
Re: CVE-2019-11683: "GRO packet of death" issue in the Linux kernel (Greg KH <greg@...ah.com>)

May 6 (1 message)

[SECURITY] New security advisory for CVE-2019-0226 released for Apache Karaf (Jean-Baptiste Onofré <jb@...thrax.net>)

May 7 (1 message)

Re: fprintd: found storing user fingerprints without encryption (Seong-Joong Kim <sungjungk@...il.com>)

May 8 (7 messages)

Re: Re: fprintd: found storing user fingerprints without encryption (Roman Drahtmueller <draht@...altsekun.de>)
Re: Re: fprintd: found storing user fingerprints without encryption (Noel Kuntze <noel.kuntze+oss-security@...rmi.consulting>)
Re: Re: fprintd: found storing user fingerprints without encryption (Seong-Joong Kim <sungjungk@...il.com>)
Re: Re: fprintd: found storing user fingerprints without encryption (Noel Kuntze <noel.kuntze+oss-security@...rmi.consulting>)
Re: Re: fprintd: found storing user fingerprints without encryption (Seong-Joong Kim <sungjungk@...il.com>)
Re: Re: fprintd: found storing user fingerprints without encryption (Roman Drahtmueller <draht@...altsekun.de>)
Re: Re: fprintd: found storing user fingerprints without encryption (Seong-Joong Kim <sungjungk@...il.com>)

May 9 (1 message)

[CVE-2018-11800] and [CVE-2018-11801] Apache Fineract SQL Injection Vulnerabilities fixed in v1.3.0 (Michael Vorburger <vorburger@...che.org>)

May 10 (4 messages)

Re: XSS via EXIF tag in Serendipity blog (Henri Salo <henri@...v.fi>)
Re: Re: fprintd: found storing user fingerprints without encryption (halfdog <me@...fdog.net>)
Re: Re: fprintd: found storing user fingerprints without encryption (Seong-Joong Kim <sungjungk@...il.com>)
Re: System Down: A systemd-journald exploit (Qualys Security Advisory <qsa@...lys.com>)

May 11 (1 message)

Re: Re: fprintd: found storing user fingerprints without encryption (Seong-Joong Kim <sungjungk@...il.com>)

May 14 (3 messages)

Re: fprintd: found storing user fingerprints without encryption (halfdog <me@...fdog.net>)
Re: fprintd: found storing user fingerprints without encryption (halfdog <me@...fdog.net>)
Xen Security Advisory 297 v1 (CVE-2018-12126,CVE-2018-12127,CVE-2018-12130,CVE-2019-11091) - Microarchitectural Data Sa… (Xen.org security team <security@....org…)

May 16 (1 message)

Singularity 3.1.0: CVE-2019-11328: namespace privilege escalation and arbitrary file corruption (Matthias Gerstner <mgerstner@...e.de>)

May 19 (6 messages)

Potential DoS vulnerability in CGit (Wire Snark <wsnark@...a.io>)
Re: Potential DoS vulnerability in CGit (Wire Snark <wsnark@...a.io>)
Re: Potential DoS vulnerability in CGit ("Jason A. Donenfeld" <Jason@...c4.com>)
[CVE-2019-10076] Apache JSPWiki Cross-site scripting vulnerability (Juan Pablo Santos Rodríguez <juanpablo@...che.org>)
[CVE-2019-10077] Apache JSPWiki Cross-site scripting vulnerability (Juan Pablo Santos Rodríguez <juanpablo@...che.org>)
[CVE-2019-10078] Apache JSPWiki Cross-site scripting vulnerability (Juan Pablo Santos Rodríguez <juanpablo.santos@...il.com>)

May 20 (2 messages)

[CVE-2019-0201] Information disclosure vulnerability in Apache ZooKeeper (Andor Molnar <andor@...che.org>)
WebKitGTK and WPE WebKit Security Advisory WSA-2019-0003 (Michael Catanzaro <mcatanzaro@...lia.com>)

May 21 (1 message)

Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)

May 22 (7 messages)

CVE-2019-12155 QEMU: qxl: null pointer dereference while releasing spice resources (P J P <ppandit@...hat.com>)
[SECURITY ADVISORY] curl: Integer overflows in curl_url_set (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: TFTP receive buffer overflow (Daniel Stenberg <daniel@...x.se>)
CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command (P J P <ppandit@...hat.com>)
CVE-2019-10142 linux kernel: integer overflow in ioctl handling of fsl hypervisor (Wade Mealing <wmealing@...hat.com>)
Re: CVE-2019-10142 linux kernel: integer overflow in ioctl handling of fsl hypervisor (Greg KH <greg@...ah.com>)
Re: Linux kernel < 4.8 local generic ASLR - another CVE-ID (Solar Designer <solar@...nwall.com>)

May 24 (2 messages)

[SECURITY] New security advisory CVE-2019-0188 released for Apache Camel (Andrea Cosentino <ancosen1985@...oo.com>)
[SECURITY][ERRATA-CORRIGE] New security advisory CVE-2019-0188 released for Apache Camel (Andrea Cosentino <ancosen1985@...oo.com>)

May 28 (1 message)

CVE-2018-15664: docker (all versions) is vulnerable to a symlink-race attack (Aleksa Sarai <cyphar@...har.com>)

May 30 (2 messages)

CVE-2018-8029: Apache Hadoop Privilege escalation vulnerability (Akira Ajisaka <aajisaka@...che.org>)
CVE-2019-3846：Marvell Wifi Driver mwifiex mwifiex_update_bss_desc_with_ie Heap Overflow ("huangwen" <huangwen@...ustech.com.cn>)

May 31 (2 messages)

[ANNOUNCE] Security regression in Kubernetes kubelet v1.13.6 and v1.14.2 only - CVE-2019-11245 (Brandon Philips <bphilips@...hat.com>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)

51 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.