oss-security mailing list - 2019/11

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2019/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	² 1	³
⁴ 3	⁵ 6	⁶ 4	⁷ 2	⁸ 8	⁹	¹⁰
¹¹ 1	¹² 4	¹³	¹⁴ 1	¹⁵ 1	¹⁶	¹⁷ 2
¹⁸ 1	¹⁹ 12	²⁰ 9	²¹ 1	²² 2	²³	²⁴
²⁵ 4	²⁶ 2	²⁷ 1	²⁸ 2	²⁹	³⁰

Messages by day:

November 2 (1 message)

[ Linux kernel ] Exploitable bugs in drivers/media/platform/vivid (Alexander Popov <alex.popov@...ux.com>)

November 4 (3 messages)

[CVE-2019-10084] privilege escalation by authenticated Apache Impala users (Tim Armstrong <tarmstrong@...che.org>)
Re: Membership application for linux-distros - VMware ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
Re: Membership application for linux-distros - VMware ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)

November 5 (6 messages)

Re: [ Linux kernel ] Exploitable bugs in drivers/media/platform/vivid (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2019-12406] Apache CXF does not restrict the number of message attachments (Colm O hEigeartaigh <coheigea@...che.org>)
[CVE-2019-12419] Apache CXF OpenId Connect token service does not properly validate the clientId (Colm O hEigeartaigh <coheigea@...che.org>)
Re: Membership application for linux-distros - VMware (Solar Designer <solar@...nwall.com>)
Re: Contributing Back (Solar Designer <solar@...nwall.com>)
Re: Contributing Back (Seth Arnold <seth.arnold@...onical.com>)

November 6 (4 messages)

Re: Membership application for linux-distros - VMware ("Srivatsa S. Bhat" <srivatsa@...il.mit.edu>)
Re: Contributing Back (Anthony Liguori <anthony@...emonkey.ws>)
Re: Contributing Back (Solar Designer <solar@...nwall.com>)
Re: Membership application for linux-distros - VMware (Solar Designer <solar@...nwall.com>)

November 7 (2 messages)

Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem? (Kees Cook <kees@...ntu.com>)
Re: independent volunteers on distros list (Solar Designer <solar@...nwall.com>)

November 8 (8 messages)

[CVE-2019-12408][CVE-2019-12410] Uninitialized Memory Vulnerabilities fixed in Apache Arrow 0.15.1 (Micah Kornfield <emkornfield@...che.org>)
Controversy and exploitability of gcc issue 30475 |assert(int+100 > int)| (Georgi Guninski <gguninski@...il.com>)
Re: Controversy and exploitability of gcc issue 30475 |assert(int+100 > int)| (John Haxby <john.haxby@...cle.com>)
Re: Controversy and exploitability of gcc issue 30475 |assert(int+100 > int)| (John Haxby <john.haxby@...cle.com>)
CVE-2019-18397 - Stack buffer overflow in GNU FriBidi >= 1.0.0 (Alex Murray <alex.murray@...onical.com>)
WebKitGTK and WPE WebKit Security Advisory WSA-2019-0006 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: Controversy and exploitability of gcc issue 30475 |assert(int+100 > int)| (Russ Allbery <eagle@...ie.org>)
Re: Controversy and exploitability of gcc issue 30475 |assert(int+100 > int)| (Florian Weimer <fw@...eb.enyo.de>)

November 11 (1 message)

CVE-2019-2201: libjpeg-turbo: code execution (Wolfgang Frisch <wolfgang.frisch@...e.com>)

November 12 (4 messages)

Re: CVE-2019-2201: libjpeg-turbo: code execution (pgajdos <pgajdos@...e.cz>)
DPDK security advisory: CVE-2019-14818 (Ferruh Yigit <ferruh.yigit@...el.com>)
Xen Security Advisory 304 v1 (CVE-2018-12207) - x86: Machine Check Error on Page Size Change DoS (Xen.org security team <security@....org>)
Xen Security Advisory 305 v1 (CVE-2019-11135) - TSX Asynchronous Abort speculative side channel (Xen.org security team <security@....org>)

November 14 (1 message)

Security release of kubernetes-csi sidecars - CVE-2019-11255 (Tim Allclair <tallclair@...gle.com>)

November 15 (1 message)

CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys (Cedric Buissart <cbuissar@...hat.com>)

November 17 (2 messages)

[CVE-2019-10070] Apache Atlas Stored XSS Vulnerability (Madhan Neethiraj <madhan@...che.org>)
Nokogiri security update v1.10.5 (Mike Dalessio <mike.dalessio@...il.com>)

November 18 (1 message)

[CVE-2019-12422] Apache Shiro weak cookie vulnerability (Brian Demers <bdemers@...che.org>)

November 19 (12 messages)

CVE-2019-18934 Unbound: Vulnerability in IPSEC module (Ralph Dolmans <ralph@...etlabs.nl>)
Mitigating malicious packages in gnu/linux (Georgi Guninski <gguninski@...il.com>)
Re: Mitigating malicious packages in gnu/linux (Morten Linderud <morten@...derud.pw>)
Re: Mitigating malicious packages in gnu/linux (Pavel Heimlich <pavel.heimlich@...cle.com>)
Re: Mitigating malicious packages in gnu/linux ("Stuart D. Gathman" <stuart@...hman.org>)
Re: Mitigating malicious packages in gnu/linux (Tim Kuijsten <info+oss-security@...send.nl>)
Re: Mitigating malicious packages in gnu/linux (Ludovic Courtès <ludo@....org>)
Re: Mitigating malicious packages in gnu/linux (Jakub Wilk <jwilk@...lk.net>)
Re: Mitigating malicious packages in gnu/linux (Morten Linderud <morten@...derud.pw>)
[CVE-2019-10083] Apache NiFi process group information disclosure (Nathan Gough <thenatog@...che.org>)
[CVE-2019-12421] Apache NiFi 'Log out' button did not completely log user out (Nathan Gough <thenatog@...che.org>)
[CVE-2019-10080] Apache NiFi XXE information disclosure (Nathan Gough <thenatog@...che.org>)

November 20 (9 messages)

Re: Mitigating malicious packages in gnu/linux (Solar Designer <solar@...nwall.com>)
Re: Mitigating malicious packages in gnu/linux (Russ Allbery <eagle@...ie.org>)
Re: Mitigating malicious packages in gnu/linux (Solar Designer <solar@...nwall.com>)
Re: Mitigating malicious packages in gnu/linux (Aditya Sirish Arunkumar Yelgundhalli <asy278@....edu>)
Re: Mitigating malicious packages in gnu/linux (Mark Hatle <mark.hatle@...nel.crashing.org>)
Re: Mitigating malicious packages in gnu/linux (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)
Re: Mitigating malicious packages in gnu/linux (Jeremy Stanley <fungi@...goth.org>)
BIND9 CVE-2019-6477 (ISC Security Officer <security-officer@....org>)
Re: Mitigating malicious packages in gnu/linux (Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>)

November 21 (1 message)

Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)

November 22 (2 messages)

Linux kernel: three buffer overflow in the marvell wifi driver (huangwen <huangwenabc@...il.com>)
Linux kernel: heap overflow in the marvell wifi driver (qize wang <wangqize888888888@...il.com>)

November 25 (4 messages)

Re: Linux kernel: heap overflow in the marvell wifi driver (Solar Designer <solar@...nwall.com>)
Lots of bugs in 32-bit x86 Linux entry code (Andy Lutomirski <luto@...nel.org>)
Re: Lots of bugs in 32-bit x86 Linux entry code ("Stuart D. Gathman" <stuart@...hman.org>)
Re: Lots of bugs in 32-bit x86 Linux entry code (Simon McVittie <smcv@...ian.org>)

November 26 (2 messages)

grub2-set-bootflag utility causes grubenv corruption rendering the system un-bootable (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
Xen Security Advisory 306 v2 - Device quarantine for alternate pci assignment methods (Xen.org security team <security@....org>)

November 27 (1 message)

CVE-2019-18660: Linux kernel: powerpc: missing Spectre-RSB mitigation (Michael Ellerman <mpe@...erman.id.au>)

November 28 (2 messages)

CVE-2019-0219: Apache Cordova InAppBrowser Privilege Escalation (Android) (Jesse <purplecabbage@...il.com>)
Multiple issues in lemonldap-ng (Raphael Geissert <geissert@...ian.org>)

67 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.