oss-security mailing list - 2020/06

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2020/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 6	² 1	³ 6	⁴ 6	⁵ 1	⁶	⁷
⁸ 2	⁹ 3	¹⁰ 5	¹¹ 2	¹² 3	¹³	¹⁴ 1
¹⁵ 10	¹⁶ 2	¹⁷ 1	¹⁸ 1	¹⁹ 1	²⁰ 1	²¹
²² 2	²³ 2	²⁴ 2	²⁵ 6	²⁶	²⁷	²⁸
²⁹	³⁰ 3

Messages by day:

June 1 (6 messages)

Exploitability of the integer overflows in djbdns 1.05? (Georgi Guninski <gguninski@...il.com>)
Re: Exploitability of the integer overflows in djbdns 1.05? (Solar Designer <solar@...nwall.com>)
CVE-2020-13659 QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS (P J P <ppandit@...hat.com>)
CVE-2020-8555: Kubernetes: Half-Blind SSRF in kube-controller-manager (Tim Allclair <tallclair@...gle.com>)
Kubernetes: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements (Joel Smith <joelsmith@...hat.com>)
CVE-2020-13754 QEMU: msix: OOB access during mmio operations may lead to DoS (P J P <ppandit@...hat.com>)

June 2 (1 message)

Re: Exploitability of the integer overflows in djbdns 1.05? (Georgi Guninski <gguninski@...il.com>)

June 3 (6 messages)

Django security releases issued: 3.0.7, and 2.2.13 for CVE-2020-13254 & CVE-2020-13596. (Carlton Gibson <carlton.gibson@...il.com>)
[CVE-2020-1963] Apache Ignite access to file system disclosure vulnerability (Юрий <jury.gerzhedowich@...il.com>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Grafana 6.7.4 and 7.0.2 released with fix for CVE-2020-13379 (Richard Hartmann <richih.mailinglist@...il.com>)
Re: Exploitability of the integer overflows in djbdns 1.05? (Georgi Guninski <gguninski@...il.com>)
CVE-2020-13765 QEMU: loader: OOB access while loading registered ROM may lead to code execution (P J P <ppandit@...hat.com>)

June 4 (6 messages)

CVE-2020-13791 QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS (P J P <ppandit@...hat.com>)
CVE-2020-13800 QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS (P J P <ppandit@...hat.com>)
CVE-2020-12049: dbus: denial of service via file descriptor leak (Simon McVittie <smcv@...ian.org>)
CVE-2020-10757 Linux kernel: mremap hugepage mmaped DAX nvdimm may cause corrupted page table (Fan Yang <fan_yang@...U.EDU.CN>)
linux-pam: pam_setquota.so vulnerability facilitated through fusermount setuid-root program (Matthias Gerstner <mgerstner@...e.de>)
xawtv: CVE-2020-13696: v4l-conf setuid-root program allows file existence tests and open(..., O_RDRW) on arbitrary files (Matthias Gerstner <mgerstner@...e.de>)

June 5 (1 message)

[SECURITY][ANNOUNCEMENT] Fix for CVE-2020-11975 in Apache Unomi 1.5.1 (Serge Huber <shuber@...che.org>)

June 8 (2 messages)

CVE-2020-13881: pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if configured with de… ("Gollub, Daniel" <daniel.gollub@...l.at…)
hostapd: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (Jouni Malinen <j@...fi>)

June 9 (3 messages)

CVE-2020-10761 QEMU: nbd: reachable assertion failure innbd_negotiate_send_rep_verr via remote client (P J P <ppandit@...hat.com>)
Re: Grafana 6.7.4 and 7.0.2 released with fix for CVE-2020-13379 (Richard Hartmann <richih.mailinglist@...il.com>)
Xen Security Advisory 320 v1 (CVE-2020-0543) - Special Register Buffer speculative side channel (Xen.org security team <security@....org>)

June 10 (5 messages)

kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768 (Wade Mealing <wmealing@...hat.com>)
Re: kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768 (Greg KH <gregkh@...uxfoundation.org>)
Re: kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768 (Wade Mealing <wmealing@...hat.com>)
Re: kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768 (Greg KH <greg@...ah.com>)
Re: kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768 (Monsieur Francis Perron <francisp@...gle.com>)

June 11 (2 messages)

Xen Security Advisory 320 v2 (CVE-2020-0543) - Special Register Buffer speculative side channel (Xen.org security team <security@....org>)
adns (dns resolver library) multiple vulns (Ian Jackson <ijackson@...ark.greenend.org.uk>)

June 12 (3 messages)

icinga2: CVE-2020-14004: prepare-dirs script allows for symlink attack in the icinga user context (Matthias Gerstner <mgerstner@...e.de>)
[CVE-2020-11980] A remote client could create MBeans from arbitrary URLs (Jean-Baptiste Onofre <jb@...thrax.net>)
Re: icinga2: CVE-2020-14004: prepare-dirs script allows for symlink attack in the icinga user context (Michael Orlitzky <michael@...itzky.com>)

June 14 (1 message)

lockdown bypass on ubuntu 18.04's 4.15 kernel for loading unsigned modules ("Jason A. Donenfeld" <Jason@...c4.com>)

June 15 (10 messages)

[CVE-2020-9483] Apache SkyWalking SQL injection vulnerability (Sheng Wu <wusheng@...che.org>)
[CVE-2019-17566] Apache XML Graphics Batik SSRF vulnerability ("Simon Steiner" <simonsteiner1984@...il.com>)
lockdown bypass on mainline kernel for loading unsigned modules ("Jason A. Donenfeld" <Jason@...c4.com>)
CVE-2020-11969 Apache TomEE - useJMX attribute on ActiveMQ resource adapter URI causes authenticated JMX port to be ope… (Jonathan Gallimore <jgallimore@...che.o…)
Re: lockdown bypass on mainline kernel for loading unsigned modules (John Haxby <john.haxby@...cle.com>)
Re: lockdown bypass on mainline kernel for loading unsigned modules (Jann Horn <jannh@...gle.com>)
Re: lockdown bypass on mainline kernel for loading unsigned modules ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: CVE-2020-13754 QEMU: msix: OOB access during mmio operations may lead to DoS (P J P <ppandit@...hat.com>)
Re: lockdown bypass on ubuntu 18.04's 4.15 kernel for loading unsigned modules ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: lockdown bypass on mainline kernel for loading unsigned modules ("Jason A. Donenfeld" <Jason@...c4.com>)

June 16 (2 messages)

Re: Re: lockdown bypass on ubuntu 18.04's 4.15 kernel for loading unsigned modules (Reed Loden <reed@...dloden.com>)
Re: Remote Code Execution in qmail (CVE-2005-1513) (Qualys Security Advisory <qsa@...lys.com>)

June 17 (1 message)

ISC announces two medium-severity vulnerabilities, CVE-2020-8618 and CVE-2020-8619 (Michael McNally <mcnally@....org>)

June 18 (1 message)

CVE-2020-10781 kernel: zram sysfs resource consumption (Wade Mealing <wmealing@...hat.com>)

June 19 (1 message)

[SECURITY] CVE-2020-9495: Apache Archiva login service is vulnerable to LDAP injection (Martin <martin_s@...che.org>)

June 20 (1 message)

Squirrelmail: Use of unserialize() on user data (Hanno Böck <hanno@...eck.de>)

June 22 (2 messages)

[CVE-2020-11989] Apache Shiro authentication bypass vulnerability (Brian Demers <bdemers@...che.org>)
CVE-2020-9480: Apache Spark RCE vulnerability in auth-enabled standalone master (Sean Owen <srowen@...che.org>)

June 23 (2 messages)

CVE-2020-10769 kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not aligned. (Rohit Keshri <rkeshri@...hat.com>)
Re: CVE-2020-10769 kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not align… (Eric Biggers <ebiggers@...nel.org>)

June 24 (2 messages)

[SECURITY ADVISORY] curl: Partial password leak over DNS on HTTP redirect (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: overwrite local file with -J (Daniel Stenberg <daniel@...x.se>)

June 25 (6 messages)

Requesting a CVE id for Trojitá, an e-mail client: Improper Certificate Validation (Jan Kundrát <jkt@....org>)
Re: Requesting a CVE id for Trojitá, an e-mail client: Improper Certificate Validation (Agostino Sarubbo <ago@...too.org>)
Re: Requesting a CVE id for Trojitá, an e-mail client: Improper Certificate Validation (Johannes Segitz <jsegitz@...e.de>)
[cve-request@...re.org: Re: [scr916814] net-snmp - Perhaps only unreleased development versions; fix appears to be in v… (Seth Arnold <seth.arnold@...onical.com>)
CVE-2020-10753 ceph: radosgw: HTTP header injection via CORS ExposeHeader tag (Przemyslaw Roguski <proguski@...hat.com>)
CVE-2020-11996 Apache Tomcat HTTP/2 Denial of Service (Mark Thomas <markt@...che.org>)

June 30 (3 messages)

default behavior in unzip more dangerous then -^ (Dennis Goodlett <dennis@...ricanelabs.com>)
libvncserver: old websocket decoding patch (Stefan Cornelius <scorneli@...hat.com>)
Re: libvncserver: old websocket decoding patch (Stefan Cornelius <scorneli@...hat.com>)

67 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.