oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2022/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 1	⁴ 5	⁵ 4	⁶ 8	⁷	⁸	⁹
¹⁰ 2	¹¹ 7	¹² 7	¹³ 5	¹⁴ 2	¹⁵ 2	¹⁶ 3
¹⁷ 3	¹⁸ 8	¹⁹ 1	²⁰ 4	²¹ 2	²² 1	²³ 1
²⁴ 5	²⁵ 16	²⁶ 9	²⁷ 6	²⁸ 1	²⁹ 2	³⁰ 5
³¹ 6

Messages by day:

January 3 (1 message)

CVE-2021-34797: Apache Geode project log file redaction of sensitive information vulnerability (Kirk Lund <klund@...che.org>)

January 4 (5 messages)

CVE-2021-38542: Apache James vulnerable to STARTTLS command injection (IMAP and POP3) (Benoit Tellier <btellier@...che.org>)
CVE-2021-40110: Apache James IMAP vulnerable to a ReDoS (Benoit Tellier <btellier@...che.org>)
CVE-2021-40111: Apache James IMAP parsing Denial Of Service (Benoit Tellier <btellier@...che.org>)
CVE-2021-40525: Apache James: Sieve file storage vulnerable to path traversal attacks (Benoit Tellier <btellier@...che.org>)
Django security releases issued: 4.0.1, 3.2.11, and 2.2.26 (Multiple CVEs) (Carlton Gibson <carlton.gibson@...il.com>)

January 5 (4 messages)

Fwd: Node.js security updates for all active release lines, January 2022 (Bryan English <bryan@...anenglish.com>)
CVE-2021-36737: Apache Portals: XSS in V3 Demo Portlet (Neil Griffin <asfgriff@...che.org>)
CVE-2021-36738: XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet (Neil Griffin <asfgriff@...che.org>)
CVE-2021-36739: Apache Portals: XSS vulnerability in the MVCBean JSP portlet maven archetype (Neil Griffin <asfgriff@...che.org>)

January 6 (8 messages)

CVE-2021-45456: Apache Kylin: Command injection ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-45457: Apache Kylin: Overly broad CORS configuration ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-45458: Apache Kylin: Hardcoded credentials ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-31522: Apache Kylin unsafe class loading ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-36774: Apache Kylin: Mysql JDBC Connector Deserialize RCE ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-27738: Apache Kylin: Improper Access Control to Streaming Coordinator & SSRF ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-45458: Apache Kylin: Hardcoded credentials ("Xiaoxiang Yu" <xxyu@...che.org>)
CVE-2021-43045: Apache Avro: Possible DOS vulnerabilities in C# Avro SDK (Ryan Skraba <rskraba@...che.org>)

January 10 (2 messages)

CVE-2021-4155 kernel: xfs: raw block device data leak in ioctl(XFS_IOC_ALLOCSP) (Rohit Keshri <rkeshri@...hat.com>)
CVE-2021-3997: Uncontrolled recursion in systemd's systemd-tmpfiles (Qualys Security Advisory <qsa@...lys.com>)

January 11 (7 messages)

Re: CVE-2021-3997: Uncontrolled recursion in systemd's systemd-tmpfiles (Sam James <sam@...too.org>)
Re: CVE-2021-3997: Uncontrolled recursion in systemd's systemd-tmpfiles (Sam James <sam@...too.org>)
Fwd: Node.js security updates for all active release lines, January 2022 (Bryan English <bryan@...anenglish.com>)
CVE-2021-4204: Linux Kernel eBPF Improper Input Validation Vulnerability (tr3e wang <tr3e.wang@...il.com>)
CVE-2021-3979 ceph: Ceph volume does not honour osd_dmcrypt_key_size (Ana McTaggart <amctagga@...hat.com>)
[SECURITY] CVE-2021-41767: Apache Guacamole: Private tunnel identifier may be included in the non-private details of active co… (Mike Jumper <mjumper@...che.org>)
[SECURITY] CVE-2021-43999: Apache Guacamole: Improper validation of SAML responses (Mike Jumper <mjumper@...che.org>)

January 12 (7 messages)

Re: CVE-2021-3979 ceph: Ceph volume does not honour osd_dmcrypt_key_size (Jeffrey Walton <noloader@...il.com>)
Re: CVE-2021-3979 ceph: Ceph volume does not honour osd_dmcrypt_key_size (John Helmert III <ajak@...too.org>)
Re: CVE-2021-3979 ceph: Ceph volume does not honour osd_dmcrypt_key_size (Sven Kieske <S.Kieske@...twald.de>)
CVE-2021-22569: Protobuf Java, Kotlin, JRuby DoS (Ana Oprea <anaoprea@...gle.com>)
Re: CVE-2021-3979 ceph: Ceph volume does not honour osd_dmcrypt_key_size (Ana McTaggart <amctagga@...hat.com>)
Multiple vulnerabilities in Jenkins and Jenkins plugins (Wadeck Follonier <wfollonier@...udbees.com>)
Re: CVE-2021-22569: Protobuf Java, Kotlin, JRuby DoS (John Helmert III <ajak@...too.org>)

January 13 (5 messages)

Linux Kernel eBPF Improper Input Validation Vulnerability (tr3e wang <tr3e.wang@...il.com>)
CVE-2021-4122: cryptsetup 2.x: decryption through LUKS2 reencryption crash recovery (Milan Broz <gmazyland@...il.com>)
Prosody XMPP server advisory 2022-01-13 (Remote Unauthenticated Denial of Service) (CVE request) (Jonas Schäfer <jonas@...licki.name>)
Re: Prosody XMPP server advisory 2022-01-13 (Remote Unauthenticated Denial of Service) (CVE request) (Jonas Schäfer <jonas@...licki.name>)
Re: Prosody XMPP server advisory 2022-01-13 (Remote Unauthenticated Denial of Service) (CVE-2022-0217) (Jonas Schäfer <jonas@...licki.name>)

January 14 (2 messages)

Re: Linux Kernel eBPF Improper Input Validation Vulnerability (tr3e wang <tr3e.wang@...il.com>)
Null pointer deref in unzip 6.0 (Nils Bars <nils_bars@...nline.de>)

January 15 (2 messages)

Re: 3 new CVE's in vim (Alan Coopersmith <alan.coopersmith@...cle.com>)
Fuzzy CVE's in GNU inetutils (Alan Coopersmith <alan.coopersmith@...cle.com>)

January 16 (3 messages)

Re: Fuzzy CVE's in GNU inetutils (Salvatore Bonaccorso <carnil@...ian.org>)
wpa_supplicant/hostapd: SAE/EAP-pwd side-channel attack update 2 (Jouni Malinen <j@...fi>)
Re: Fuzzy CVE's in GNU inetutils (Alan Coopersmith <alan.coopersmith@...cle.com>)

January 17 (3 messages)

Re: CVE-2021-4095: kernel: KVM: NULL pointer dereference in kvm_dirty_ring_get() in virt/kvm/dirty_ring.c (butt3rflyh4ck <butterflyhuangxx@...il.com>)
CVE-2021-42357: DOM based XSS Vulnerability in Apache Knox (Larry McCay <lmccay@...che.org>)
Expat 2.4.3 released, includes 8 security fixes (Alan Coopersmith <alan.coopersmith@...cle.com>)

January 18 (8 messages)

Re: CVE-2021-4204: Linux Kernel eBPF Improper Input Validation Vulnerability (tr3e wang <tr3e.wang@...il.com>)
Re: Linux Kernel eBPF Improper Input Validation Vulnerability (tr3e wang <tr3e.wang@...il.com>)
CVE-2022-23302: Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (Ralph Goers <rgoers@...che.org>)
CVE-2022-23305: SQL injection in JDBC Appender in Apache Log4j V1 (Ralph Goers <rgoers@...che.org>)
CVE-2022-23307: Apache Log4j 1.x: A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execu… (Ralph Goers <rgoers@...che.org>)
Re: Prosody XMPP server advisory 2022-01-13 (Remote Unauthenticated Denial of Service) (CVE request) (Jonas Schäfer <jonas@...licki.name>)
Linux kernel: Heap buffer overflow in fs_context.c since version 5.1 (Will <willsroot@...tonmail.com>)
Re: Linux kernel: Heap buffer overflow in fs_context.c since version 5.1 (John Haxby <john.haxby@...cle.com>)

January 19 (1 message)

CVE-2021-45230: Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver (Kaxil Naik <kaxilnaik@...che.org>)

January 20 (4 messages)

Race condition in the Rust standard library (CVE-2022-21658) (Pietro Albini <pietro@...troalbini.org>)
CVE-2022-22733: Apache ShardingSphere ElasticJob-UI: Access-Token in ElasticJob UI causes password disclosure (Haoran Meng <menghaoran@...che.org>)
CVE-2021-45417 - aide (>= 0.13 <= 0.17.3): heap-based buffer overflow vulnerability in base64 functions (Hannes von Haugwitz <hannes@...haugwitz.com>)
Re: Prosody XMPP server advisory 2022-01-13 (Remote Unauthenticated Denial of Service) (CVE-2022-0217) (Kim Alvefur <zash@...h.se>)

January 21 (2 messages)

usbview polkit policy local root exploit (CVE-2022-23220) (Matthias Gerstner <mgerstner@...e.de>)
WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

January 22 (1 message)

Re: usbview polkit policy local root exploit (CVE-2022-23220) (Greg KH <greg@...ah.com>)

January 23 (1 message)

Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (John Helmert III <ajak@...too.org>)

January 24 (5 messages)

Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (Leo Famulari <leo@...ulari.name>)
CVE-2021-3996 and CVE-2021-3995 in util-linux's libmount (Qualys Security Advisory <qsa@...lys.com>)
CVE-2022-23437: Infinite loop within Apache XercesJ xml parser (Mukul Gandhi <mukulg@...che.org>)
CVE-2021-3998 and CVE-2021-3999 in glibc's realpath() and getcwd() (Qualys Security Advisory <qsa@...lys.com>)
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (John Helmert III <ajak@...too.org>)

January 25 (16 messages)

Multiple vulnerabilities in connman's dnsproxy component (Matthias Gerstner <mgerstner@...e.de>)
Xen Security Advisory 393 v2 (CVE-2022-23033) - arm: guest_physmap_remove_page not removing the p2m mappings (Xen.org security team <security@....org>)
Xen Security Advisory 394 v3 (CVE-2022-23034) - A PV guest could DoS Xen while unmapping a grant (Xen.org security team <security@....org>)
Xen Security Advisory 395 v2 (CVE-2022-23035) - Insufficient cleanup of passed-through device IRQs (Xen.org security team <security@....org>)
CVE-2022-23944: Apache ShenYu 2.4.1 Improper access control (Zhang Yonglun <zhangyonglun@...che.org>)
CVE-2022-23945: Apache ShenYu missing authentication allows gateway registration (Zhang Yonglun <zhangyonglun@...che.org>)
CVE-2022-23223: Password leakage in Apache ShenYu (Zhang Yonglun <zhangyonglun@...che.org>)
CVE-2021-45029: Groovy Code Injection & SpEL Injection in Apache ShenYu 2.4.1 (Zhang Yonglun <zhangyonglun@...che.org>)
[SECURITY] New security advisory for CVE-2021-41766 released for Apache Karaf (Jean-Baptiste Onofré <jbonofre@...che.org>)
[SECURITY] New security advisory for CVE-2022-22932 (Jean-Baptiste Onofré <jbonofre@...che.org>)
pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Qualys Security Advisory <qsa@...lys.com>)
Linux kernel: Security sensitive bug in the i915 kernel driver (CVE-2022-0330) (Tvrtko Ursulin <tvrtko.ursulin@...ux.intel.com>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Sam James <sam@...too.org>)
CVE-2022-0185: Linux kernel slab out-of-bounds write: exploit and writeup (Alejandro Guerrero <aguerrero@...lys.com>)
Re: CVE-2022-23944: Apache ShenYu 2.4.1 Improper access control (Alan Coopersmith <alan.coopersmith@...cle.com>)
Bad signal handling in shell scripts leading to insecure use of /tmp (Jakub Wilk <jwilk@...lk.net>)

January 26 (9 messages)

CVE-2021-45029: Apache ShenYu (incubating) Groovy Code Injection and SpEL Injection (Zhang Yonglun <zhangyonglun@...che.org>)
CVE-2022-23944: Apache ShenYu (incubating) Improper access control (Zhang Yonglun <zhangyonglun@...che.org>)
CVE-2022-23945: Apache ShenYu (incubating) missing authentication allows gateway registration (Zhang Yonglun <zhangyonglun@...che.org>)
CVE-2022-23223: Apache ShenYu (incubating) Password leakage (Zhang Yonglun <zhangyonglun@...che.org>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Henri Salo <henri@...v.fi>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Matthias Schmidt <oss-sec@...c.org>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Dominik Czarnota <dominik.b.czarnota@...il.com>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Erik Auerswald <auerswal@...x-ag.uni-kl.de>)

January 27 (6 messages)

Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Chris Boot <lists@...tc.boo.tc>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Kai Lüke <kai@...volk.io>)
Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034) (Bastian Blank <bblank@...nkmo.de>)
CVE-2022-22942: Linux kernel: wrong file descriptor handling in the vmwgfx driver (Mathias Krause <minipli@...ecurity.net>)
Linux kernel: erroneous error handling after fd_install() (Mathias Krause <minipli@...ecurity.net>)
Re: CVE-2022-22942: Linux kernel: wrong file descriptor handling in the vmwgfx driver (Mathias Krause <minipli@...ecurity.net>)

January 28 (1 message)

keylime: Multiple Security Issues (including remote code execution in the Agent component) (Matthias Gerstner <mgerstner@...e.de>)

January 29 (2 messages)

Linux kernel: use-after-free of user namespace on shm and mqueue destruction (Mathias Krause <minipli@...ecurity.net>)
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (Leo Famulari <leo@...ulari.name>)

January 30 (5 messages)

Re: Linux kernel: use-after-free of user namespace on shm and mqueue destruction (Salvatore Bonaccorso <carnil@...ian.org>)
xterm buffer overflow via crafted sixel (nick black <dankamongmen@...il.com>)
Re: xterm buffer overflow via crafted sixel (Tavis Ormandy <taviso@...il.com>)
General authentication bypass in Atheme IRC services with InspIRCd 3 (Ed Kellett <e+ow@...lett.im>)
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (Sam James <sam@...too.org>)

January 31 (6 messages)

Re: xterm buffer overflow via crafted sixel (Salvatore Bonaccorso <carnil@...ian.org>)
Plone: cache poisoning in image_view_fullscreen (Maurits van Rees <maurits@...rees.org>)
Re: Re: xterm buffer overflow via crafted sixel (Jakub Wilk <jwilk@...lk.net>)
CVE-2021-41571: Apache Pulsar: Pulsar Admin API allows access to data from other tenants using getMessageById API (Enrico Olivelli <eolivelli@...che.org>)
[SBA-ADV-20220127-01] CVE-2022-24129: Shibboleth Identity Provider OIDC OP Plugin 3.0.3 or below Server-Side Request Fo… (SBA - Advisory <advisory@...-research.o…)
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

116 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.