oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2020/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 3	² 1	³ 3	⁴	⁵ 1	⁶ 1
⁷ 5	⁸ 8	⁹ 5	¹⁰ 2	¹¹ 4	¹²	¹³
¹⁴	¹⁵ 16	¹⁶ 7	¹⁷ 1	¹⁸	¹⁹	²⁰
²¹ 1	²² 1	²³ 2	²⁴	²⁵ 3	²⁶	²⁷
²⁸ 1	²⁹ 1	³⁰	³¹

Messages by day:

December 1 (3 messages)

Linux Kernel: ALSA: use-after-free Write in snd_rawmidi_kernel_write1 (butt3rflyh4ck <butterflyhuangxx@...il.com>)
CVE-2020-28916 QEMU: e1000e: infinite loop scenario in case of null packet descriptor (P J P <ppandit@...hat.com>)
X.Org server security advisory: December 1, 2020 (Matthieu Herrb <matthieu@...rb.eu>)

December 2 (1 message)

Some mitigation for openssh CVE-2020-14145 (Marcus Meissner <meissner@...e.de>)

December 3 (3 messages)

Re: Linux Kernel: ALSA: use-after-free Write in snd_rawmidi_kernel_write1 (butt3rflyh4ck <butterflyhuangxx@...il.com>)
Multiple vulnerabilities in Jenkins (Daniel Beck <ml@...kweb.net>)
[SECURITY] CVE-2020-17527 Apache Tomcat HTTP/2 Request header mix-up (Mark Thomas <markt@...che.org>)

December 5 (1 message)

Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem? (Salvatore Bonaccorso <carnil@...ian.org>)

December 6 (1 message)

[CVE-2020-17521]: Apache Groovy Information Disclosure (Paul King <paulk@...che.org>)

December 7 (5 messages)

Linux kernel NULL-ptr deref bug in spk_ttyio_receive_buf2 (Shisong Qin <qinshisong1205@...il.com>)
Re: Linux kernel NULL-ptr deref bug in spk_ttyio_receive_buf2 (John Haxby <john.haxby@...cle.com>)
Re: Linux kernel NULL-ptr deref bug in spk_ttyio_receive_buf2 (- Nop <nopitydays@...il.com>)
[SECURITY] CVE-2020-13945: Apache APISIX's Admin API default access token vulnerability (YuanSheng Wang <membphis@...che.org>)
[kubernetes] CVE-2020-8554: Man in the middle using LoadBalancer or ExternalIPs (Tim Allclair <timallclair@...il.com>)

December 8 (8 messages)

Re: Linux kernel NULL-ptr deref bug in spk_ttyio_receive_buf2 (Marcus Meissner <meissner@...e.de>)
[OSSA-2020-008] horizon: Open redirect in workflow forms (CVE-2020-29565) (Gage Hugo <gagehugo@...il.com>)
Apache Struts 2: CVE-2020-17530: Potential RCE when using forced evaluation (Lukasz Lenart <lukaszlenart@...che.org>)
Re: Linux kernel NULL-ptr deref bug in spk_ttyio_receive_buf2 (- Nop <nopitydays@...il.com>)
Bugs found by Cryptofuzz - some missing CVEs or too low impact for CVE? (yersinia <yersinia.spiros@...il.com>)
Re: Bugs found by Cryptofuzz - some missing CVEs or too low impact for CVE? (Eric Biggers <ebiggers@...nel.org>)
Re: Bugs found by Cryptofuzz - some missing CVEs or too low impact for CVE? (Robert Watson <robertcwatson1@...il.com>)
Re: Bugs found by Cryptofuzz - some missing CVEs or too low impact for CVE? (Seth Arnold <seth.arnold@...onical.com>)

December 9 (5 messages)

[SECURITY ADVISORY] curl: trusting FTP PASV responses (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] libcurl: FTP wildcard stack overflow (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: Inferior OCSP verification (Daniel Stenberg <daniel@...x.se>)
CVE-2020-17528: Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length (Brennan Ashton <btashton@...che.org>)
CVE-2020-17529: Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP h… (Brennan Ashton <btashton@...che.org>)

December 10 (2 messages)

2 kernel issues (Marcus Meissner <meissner@...e.de>)
Re: Linux kernel: powerpc: RTAS calls can be used to compromise kernel integrity (Andrew Donnellan <ajd@...ux.ibm.com>)

December 11 (4 messages)

CVE-2020-27825 kernel: use-after-free in the ftrace ring buffer resizing logic due to a race condition (Rohit Keshri <rkeshri@...hat.com>)
CVE-2020-17515: Apache Airflow Reflected XSS via Origin Parameter (Kaxil Naik <kaxilnaik@...che.org>)
CVE-2020-17511: Apache Airflow Admin password gets logged in plain text (Kaxil Naik <kaxilnaik@...che.org>)
CVE-2020-17513: Apache Airflow Server-Side Request Forgery (SSRF) in Charts & Query View (Kaxil Naik <kaxilnaik@...che.org>)

December 15 (16 messages)

Re: Bugs found by Cryptofuzz - some missing CVEs or too low impact for CVE? (Douglas Bagnall <douglas.bagnall@...alyst.net.nz>)
Xen Security Advisory 115 v4 (CVE-2020-29480) - xenstore watch notifications lacking permission checks (Xen.org security team <security@....org>)
Xen Security Advisory 322 v4 (CVE-2020-29481) - Xenstore: new domains inheriting existing node permissions (Xen.org security team <security@....org>)
Xen Security Advisory 325 v3 (CVE-2020-29483) - Xenstore: guests can disturb domain cleanup (Xen.org security team <security@....org>)
Xen Security Advisory 324 v3 (CVE-2020-29484) - Xenstore: guests can crash xenstored via watchs (Xen.org security team <security@....org>)
Xen Security Advisory 323 v3 (CVE-2020-29482) - Xenstore: wrong path length check (Xen.org security team <security@....org>)
Xen Security Advisory 330 v3 (CVE-2020-29485) - oxenstored memory leak in reset_watches (Xen.org security team <security@....org>)
Xen Security Advisory 348 v3 (CVE-2020-29566) - undue recursion in x86 HVM context switch code (Xen.org security team <security@....org>)
Xen Security Advisory 350 v4 (CVE-2020-29569) - Use after free triggered by block frontend in Linux blkback (Xen.org security team <security@....org>)
Xen Security Advisory 349 v3 (CVE-2020-29568) - Frontends can trigger OOM in Backends by update a watched path (Xen.org security team <security@....org>)
Xen Security Advisory 354 v4 (CVE-2020-29487) - XAPI: guest-triggered excessive memory usage (Xen.org security team <security@....org>)
Xen Security Advisory 352 v3 (CVE-2020-29486) - oxenstored: node ownership can be changed by unprivileged clients (Xen.org security team <security@....org>)
Xen Security Advisory 353 v4 (CVE-2020-29479) - oxenstored: permissions not checked on root node (Xen.org security team <security@....org>)
Xen Security Advisory 358 v4 (CVE-2020-29570) - FIFO event channels control block related ordering (Xen.org security team <security@....org>)
Xen Security Advisory 356 v3 (CVE-2020-29567) - infinite loop when cleaning up IRQ vectors (Xen.org security team <security@....org>)
Xen Security Advisory 359 v3 (CVE-2020-29571) - FIFO event channels control structure ordering (Xen.org security team <security@....org>)

December 16 (7 messages)

[ANNOUNCE] qemu-security mailing list (P J P <ppandit@...hat.com>)
CVE-2020-13931 Apache TomEE - Incorrect config on JMS Resource Adapter can lead to JMX being enabled (Jonathan Gallimore <jonathan.gallimore@...il.com>)
Xen Security Advisory 322 v5 (CVE-2020-29481) - Xenstore: new domains inheriting existing node permissions (Xen.org security team <security@....org>)
Xen Security Advisory 358 v5 (CVE-2020-29570) - FIFO event channels control block related ordering (Xen.org security team <security@....org>)
Xen Security Advisory 343 v5 (CVE-2020-25599) - races with evtchn_reset() (Xen.org security team <security@....org>)
CVE-2020-27821 QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c (Mauro Matteo Cascella <mcascell@...hat.com>)
CVE-2020-27781 User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila (Ana McTaggart <amctagga@...hat.com>)

December 17 (1 message)

CVE-2020-17520 Apache Pulsar Manager Information Disclosure (bypass admin interceptor) (Guangning E <guangning@...che.org>)

December 21 (1 message)

CVE-2020-17526: Apache Airflow Incorrect Session Validation in Airflow Webserver with default config (Kaxil Naik <kaxilnaik@...che.org>)

December 22 (1 message)

CVE-2020-25723 QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c (Mauro Matteo Cascella <mcascell@...hat.com>)

December 23 (2 messages)

CVE request experience (was: Multiple memory leaks fixed in Privoxy 3.0.29 stable) (Fabian Keil <freebsd-listen@...iankeil.de>)
Re: CVE request experience (was: Multiple memory leaks fixed in Privoxy 3.0.29 stable) (Nick Tait <ntait@...hat.com>)

December 25 (3 messages)

Re: CVE request experience (was: Multiple memory leaks fixed in Privoxy 3.0.29 stable) (Jeffrey Walton <noloader@...il.com>)
More CVE request experience (Fwd: Automatic reply: [EXT] Need a CVE for Crypto++) (Jeffrey Walton <noloader@...il.com>)
Re: More CVE request experience (Fwd: Automatic reply: [EXT] Need a CVE for Crypto++) (Noel Kuntze <noel.kuntze@...rmi.consulting>)

December 28 (1 message)

Re: CVE-2020-27815 Linux kernel: jfs: array-index-out-of-bounds in dbAdjTree (butt3rflyh4ck <butterflyhuangxx@...il.com>)

December 29 (1 message)

CVE-2020-17533: Apache Accumulo Improper Handling of Insufficient Permissions (Billie Rinaldi <billie@...che.org>)

66 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.