oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2021/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 4	² 3	³ 4	⁴ 5	⁵ 7	⁶ 1	⁷ 1
⁸ 5	⁹ 10	¹⁰ 7	¹¹ 2	¹²	¹³	¹⁴
¹⁵ 3	¹⁶ 7	¹⁷ 4	¹⁸ 5	¹⁹ 8	²⁰ 2	²¹
²² 2	²³ 1	²⁴ 3	²⁵ 4	²⁶ 1	²⁷ 1	²⁸ 1

Messages by day:

February 1 (4 messages)

Re: Re: Linux kernel: linux-block: nbd: use-after-free Read in nbd_queue_rq (Marcus Meissner <meissner@...e.de>)
Django: CVE-2021-3281: Potential directory-traversal via archive.extract() (Mariusz Felisiak <felisiak.mariusz@...il.com>)
[CVE-2020-17523] Apache Shiro authentication bypass (Brian Demers <bdemers@...che.org>)
Re: Linux Kernel: local priv escalation via futexes (Solar Designer <solar@...nwall.com>)

February 2 (3 messages)

[CVE-2020-17516] Apache Cassandra internode encryption enforcement vulnerability (Aleksey Yeschenko <aleksey@...che.org>)
Re: Gentoo's "contributing back" linux-distros tasks (Anthony Liguori <aliguori@...n.com>)
Re: Gentoo's "contributing back" linux-distros tasks (Solar Designer <solar@...nwall.com>)

February 3 (4 messages)

KASAN: use-after-free in con_scroll (???? <zhaowenjia@....xjtu.edu.cn>)
Re: KASAN: use-after-free in con_scroll (Greg KH <gregkh@...uxfoundation.org>)
Re: Multiple memory leaks fixed in Privoxy 3.0.29 stable (Fabian Keil <freebsd-listen@...iankeil.de>)
wpa_supplicant P2P group information processing vulnerability (Jouni Malinen <j@...fi>)

February 4 (5 messages)

[CVE-2020-15692] Nim - stdlib Browsers - `open` Argument Injection (Martin Ortner <martin.ortner@...sensys.net>)
[CVE-2020-15693, CVE-2020-15694] Nim - stdlib Httpclient - Header Crlf Injection & Server Response Validation (Martin Ortner <martin.ortner@...sensys.net>)
[CVE-2020-15690] Nim - stdlib asyncftpd - Crlf Injection (Martin Ortner <martin.ortner@...sensys.net>)
Re: Two DoS issues fixed in Privoxy 3.0.31 stable (Fabian Keil <freebsd-listen@...iankeil.de>)
Linux kernel: Exploitable vulnerabilities in AF_VSOCK implementation (Alexander Popov <alex.popov@...ux.com>)

February 5 (7 messages)

CVE-2021-20221 QEMU: aarch64: GIC: out-of-bound heap buffer access via an interrupt ID field (P J P <ppandit@...hat.com>)
CVE-2021-3392 QEMU: scsi: mptsas: use-after-free while processing io requests (P J P <ppandit@...hat.com>)
[no-cve] Nim - Insecure SSL/TLS Defaults, MitM, and nimble shell command injection (Martin Ortner <martin.ortner@...sensys.net>)
CVE-2021-20226 kernel: use-after-free in io_uring feature (Rohit Keshri <rkeshri@...hat.com>)
Re: CVE-2021-20226 kernel: use-after-free in io_uring feature (Alex Gaynor <alex.gaynor@...il.com>)
Re: Linux kernel: Exploitable vulnerabilities in AF_VSOCK implementation (Alexander Popov <alex.popov@...ux.com>)
Re: CVE-2021-20226 kernel: use-after-free in io_uring feature (Salvatore Bonaccorso <carnil@...ian.org>)

February 6 (1 message)

Re: wpa_supplicant P2P group information processing vulnerability (Salvatore Bonaccorso <carnil@...ian.org>)

February 7 (1 message)

[CVE-2020-13924] Apache Ambari Arbitrary File Download Vulnerability (Szabolcs Beki <szabolcs.beki@...il.com>)

February 8 (5 messages)

CVE-2020-13947 - XSS in Apache ActiveMQ WebConsole (Jean-Baptiste Onofre <jb@...thrax.net>)
Remote code execution in connman (Marcus Meissner <meissner@...e.de>)
Re: CVE-2021-20226 kernel: use-after-free in io_uring feature (Rohit Keshri <rkeshri@...hat.com>)
Re: CVE-2021-20226 kernel: use-after-free in io_uring feature (Greg KH <greg@...ah.com>)
[cve-pending] Firejail: root privilege escalation in OverlayFS code (netblue30 <netblue30@...tonmail.com>)

February 9 (10 messages)

Re: [cve-pending] Firejail: root privilege escalation in OverlayFS code (Salvatore Bonaccorso <carnil@...ian.org>)
Re: major changes if gnu/linux dominates the desktop and/or mobile market? (Solar Designer <solar@...nwall.com>)
screen crash processing combining characters (Tavis Ormandy <taviso@...il.com>)
Re: charset.alias in pkexec/glib/gnulib (Jakub Wilk <jwilk@...lk.net>)
Re: screen crash processing combining characters (Tavis Ormandy <taviso@...il.com>)
Re: screen crash processing combining characters (Harry Sintonen <sintonen@....fi>)
Re: screen crash processing combining characters (Tavis Ormandy <taviso@...il.com>)
Re: screen crash processing combining characters (Utkarsh Gupta <utkarsh@...ian.org>)
Re: screen crash processing combining characters (Tavis Ormandy <taviso@...il.com>)
Re: charset.alias in pkexec/glib/gnulib (Tavis Ormandy <taviso@...il.com>)

February 10 (7 messages)

Replay-Sorcery: CVE-2021-26936: Multiple security issues in with setuid-root program in versions 0.4.0 through 0.5.0 (Matthias Gerstner <mgerstner@...e.de>)
[SECURITY][ANNOUNCE] Apache Subversion 1.14.1 released (Stefan Sperling <stsp@...che.org>)
[SECURITY][ANNOUNCE] Apache Subversion 1.10.7 released (Stefan Sperling <stsp@...che.org>)
CVE-2020-35498: Open vSwitch: Packet parsing vulnerability (Flavio Leitner <fbl@...hat.com>)
CVE-2021-20200: Linux kernel: close race between munmap() and expand_upwards()/downwards() (Rohit Keshri <rkeshri@...hat.com>)
Re: CVE-2021-20200: Linux kernel: close race between munmap() and expand_upwards()/downwards() (Alexandros Toptsoglou <atoptsoglou@...e.de>)
Re: Re: screen crash processing combining characters (Utkarsh Gupta <utkarsh@...ian.org>)

February 11 (2 messages)

Re: Re: screen crash processing combining characters (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2020-13949: Apache Thrift: potential DoS when processing untrusted payloads ("Jens Geyer" <jensg@...che.org>)

February 15 (3 messages)

Re: sudo: Ineffective NO_ROOT_MAILER and Baron Samedit (Roman Fiedler <roman.fiedler@...aralleled.eu>)
CVE-2021-26720: avahi-daemon: 'avahi' to 'root' user privilege escalation through Debian specific if-up script avahi-daem… (Matthias Gerstner <mgerstner@...e.de>)
WebKitGTK and WPE WebKit Security Advisory WSA-2021-0001 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

February 16 (7 messages)

2021-01 stats ("Fuller, Abby" <abbyfull@...zon.com>)
Xen Security Advisory 363 v3 (CVE-2021-26934) - Linux: display frontend "be-alloc" mode is unsupported (Xen.org security team <security@....org>)
Xen Security Advisory 361 v4 (CVE-2021-26932) - Linux: grant mapping error handling issues (Xen.org security team <security@....org>)
Xen Security Advisory 362 v3 (CVE-2021-26931) - Linux: backends treating grant mapping errors as bugs (Xen.org security team <security@....org>)
Xen Security Advisory 364 v3 (CVE-2021-26933) - arm: The cache may not be cleaned for newly allocated scrubbed pages (Xen.org security team <security@....org>)
Xen Security Advisory 365 v3 (CVE-2021-26930) - Linux: error handling issues in blkback's grant mapping (Xen.org security team <security@....org>)
Re: 2021-01 stats (Solar Designer <solar@...nwall.com>)

February 17 (4 messages)

CVE-2021-26559: Apache Airflow 2.0.0: CWE-284 Improper Access Control on Configurations Endpoint for the Stable API (Kaxil Naik <kaxilnaik@...che.org>)
CVE-2021-26697: Apache Airflow: Lineage API endpoint for Experimental API missed authentication check (Kaxil Naik <kaxilnaik@...il.com>)
CVE-2021-26911: Canary Mail with IMAP STARTTLS missing certificate validation (Dimitrios Glynos <dimitris@...sus-labs.com>)
One BIND vulnerability (CVE-2020-8625) has been publicly disclosed (Michael McNally <mcnally@....org>)

February 18 (5 messages)

Vulnerability in the Linux Audit Framework Auditd (Felix Kosterhon <felix.kosterhon@...uinfra.com>)
Xen Security Advisory 366 v1 - missed flush in XSA-321 backport (Xen.org security team <security@....org>)
Re: Vulnerability in the Linux Audit Framework Auditd (Steve Grubb <sgrubb@...hat.com>)
Re: Vulnerability in the Linux Audit Framework Auditd (Felix Kosterhon <felix.kosterhon@...uinfra.com>)
CVE-2021-26296: Cross-Site Request Forgery (CSRF) vulnerability in Apache MyFaces (Bill Lucy <wtlucy@...che.org>)

February 19 (8 messages)

BIND Operational Notification: Enabling the new BIND option "stale-answer-client-timeout" can result in unexpected serv… (ISC Security Officer <security-officer@…)
Re: BIND Operational Notification: Enabling the new BIND option "stale-answer-client-timeout" can result in unexpected server te… (Hanno Böck <hanno@...eck.de>)
Re: BIND Operational Notification: Enabling the new BIND option "stale-answer-client-timeout" can result in unexpected server… (Michael McNally <mcnally@....org>)
Django security releases: CVE-2021-23336: Web cache poisoning via ``django.utils.http.limited_parse_qsl()`` (Carlton Gibson <carlton.gibson@...il.com>)
Re: BIND Operational Notification: Enabling the new BIND option "stale-answer-client-timeout" can result in unexpected server t… (Ondřej Surý <ondrej@....org>)
CVE-2021-3411 kernel: broken KRETPROBES reports corruption of .text section while running a FTRACE stress tester (Rohit Keshri <rkeshri@...hat.com>)
Vulnerability in Jenkins (Daniel Beck <ml@...kweb.net>)
Re: CVE-2021-20200: Linux kernel: close race between munmap() and expand_upwards()/downwards() (Rohit Keshri <rkeshri@...hat.com>)

February 20 (2 messages)

CVE-2021-26544: Apache Livy (Incubating) is vulnerable to cross site scripting (Jerry Shao <jshao@...che.org>)
BIND Operational Notification: Zone journal (.jnl) file incompatibility,after upgrading to BIND 9.16.12 and 9.17 (ISC Security Officer <security-officer@....or…)

February 22 (2 messages)

CVE-2021-20247: isync/mbsync data leak/destruction vulnerability (Oswald Buddenhagen <oswald.buddenhagen@....de>)
BIND Operational Notification: Zone journal (.jnl) file incompatibility,after upgrading to BIND 9.16.12 and 9.17 - REVI… (ISC Security Officer <security-officer@…)

February 23 (1 message)

Xen Security Advisory 366 v2 (CVE-2021-27379) - missed flush in XSA-321 backport (Xen.org security team <security@....org>)

February 24 (3 messages)

[CVE-2020-11988] Apache XML Graphics Commons SSRF vulnerability ("Simon Steiner" <simonsteiner1984@...il.com>)
[CVE-2020-11987] Apache XML Graphics Batik SSRF vulnerability ("Simon Steiner" <simonsteiner1984@...il.com>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)

February 25 (4 messages)

CVE-2021-20255 QEMU: net: eepro100: stack overflow via infiniterecursion (P J P <ppandit@...hat.com>)
CVE-2021-20257 QEMU: net: e1000: infinite loop while processing transmit descriptors (P J P <ppandit@...hat.com>)
wpa_supplicant P2P provision discovery processing vulnerability (Jouni Malinen <j@...fi>)
Re: Vulnerability in the Linux Audit Framework Auditd (Salvatore Bonaccorso <carnil@...ian.org>)

February 26 (1 message)

CVE-2021-3416 QEMU: net: infinite loop in loopback mode may lead tostack overflow (P J P <ppandit@...hat.com>)

February 27 (1 message)

Re: wpa_supplicant P2P provision discovery processing vulnerability (Salvatore Bonaccorso <carnil@...ian.org>)

February 28 (1 message)

Multiple DoS issues fixed in Privoxy 3.0.32 stable (Fabian Keil <freebsd-listen@...iankeil.de>)

91 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.