oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2022/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	² 5	³
⁴	⁵ 4	⁶ 2	⁷ 8	⁸ 8	⁹	¹⁰
¹¹ 5	¹² 7	¹³ 3	¹⁴ 3	¹⁵	¹⁶ 1	¹⁷
¹⁸	¹⁹	²⁰ 3	²¹ 2	²² 7	²³	²⁴
²⁵	²⁶ 3	²⁷ 5	²⁸ 7	²⁹ 2	³⁰ 4

Messages by day:

April 2 (5 messages)

Re: [PATCH AUTOSEL 5.15 13/16] vdpa: clean up get_config_size ret value handling (Dan Carpenter <dan.carpenter@...cle.com>)
CVE-2022-1204: Linux kernel: UAF caused by binding operation when ax25 device is detaching (周多明 <duoming@....edu.cn>)
CVE-2022-1198 kernel: use-after-free in drivers/net/hamradio/6pack.c (周多明 <duoming@....edu.cn>)
CVE-2022-1205 kernel: Null pointer dereference and use-after-free in net/ax25/ax25_timer.c (周多明 <duoming@....edu.cn>)
CVE-2022-1199 kernel: Null pointer dereference and use-after-free in ax25_release() (周多明 <duoming@....edu.cn>)

April 5 (4 messages)

Xen Security Advisory 397 v2 (CVE-2022-26356) - Racy interactions between dirty vram tracking and paging log dirty hype… (Xen.org security team <security@....org…)
Xen Security Advisory 399 v2 (CVE-2022-26357) - race in VT-d domain ID cleanup (Xen.org security team <security@....org>)
Xen Security Advisory 400 v2 (CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361) - IOMMU: RMRR (VT-d) and uni… (Xen.org security team <security@....org…)
CVE-2022-23974: Apache Pinot: Pinot segment push endpoint has a vulnerability in unprotected environments (Subbu Subramaniam <mcvsubbu@...che.org>)

April 6 (2 messages)

CVE-2022-28356: Linux kernel: refcount leak in llc_ui_bind and llc_ui_autobind (Gianluca Gabrielli <ggabrielli@...e.de>)
CVE-2022-26850: Apache NiFi: Insufficiently protected credentials (Nathan Gough <thenatog@...che.org>)

April 7 (8 messages)

Linux kernel: x86/kvm: null-ptr-deref in kvm_dirty_ring_push (kangel <kangel@....edu.cn>)
Re: Linux kernel: x86/kvm: null-ptr-deref in kvm_dirty_ring_push (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: x86/kvm: null-ptr-deref in kvm_dirty_ring_push (Paolo Bonzini <pbonzini@...hat.com>)
Re: Linux kernel: x86/kvm: null-ptr-deref in kvm_dirty_ring_push (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: x86/kvm: null-ptr-deref in kvm_dirty_ring_push (Qiuhao Li <qiuhao@...ec.org>)
Re: Linux kernel: x86/kvm: null-ptr-deref in kvm_dirty_ring_push (Qiuhao Li <qiuhao@...ec.org>)
CVE-2022-26612: Apache Hadoop: Arbitrary file write in FileUtil#unpackEntries on Windows (Gautham Banasandra <gaurava@...che.org>)
zgrep, xzgrep: arbitrary-file-write vulnerability (Jim Meyering <jim@...ering.net>)

April 8 (8 messages)

Announce: OpenSSH 9.0 released (Damien Miller <djm@....openbsd.org>)
Re: zgrep, xzgrep: arbitrary-file-write vulnerability (Jakub Wilk <jwilk@...lk.net>)
Re: zgrep, xzgrep: arbitrary-file-write vulnerability (Levente Polyak <levente@...entepolyak.net>)
CVE-2022-1158: Linux Kernel v5.2+: x86/kvm: cmpxchg_gpte can write to pfns outside the userspace region (Qiuhao Li <qiuhao@...ec.org>)
Re: zgrep, xzgrep: arbitrary-file-write vulnerability (Axel Beckert <abe@...xchevaux.org>)
WebKitGTK and WPE WebKit Security Advisory WSA-2022-0004 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0004 (John Helmert III <ajak@...too.org>)
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0004 (John Helmert III <ajak@...too.org>)

April 11 (5 messages)

Django: CVE-2022-28346: Potential SQL injection in ``QuerySet.annotate()``, ``aggregate()``, and ``extra()`` (Mariusz Felisiak <felisiak.mariusz@...il.com>)
Django: CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL (Mariusz Felisiak <felisiak.mariusz@...il.com>)
CVE-2022-28893: Linux kernel: Use after free in SUNRPC subsystem (Felix Fu <foyjog@...il.com>)
Re: CVE-2022-28893: Linux kernel: Use after free in SUNRPC subsystem (Greg KH <greg@...ah.com>)
Re: CVE-2022-28893: Linux kernel: Use after free in SUNRPC subsystem ("Mike O'Connor" <mjo@...o.mi.org>)

April 12 (7 messages)

[SECURITY][ANNOUNCE] Apache Subversion 1.10.8 released ("markphip@...il.com" <markphip@...che.org>)
[SECURITY][ANNOUNCE] Apache Subversion 1.14.2 released ("markphip@...il.com" <markphip@...che.org>)
Linux kernel: A concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (Minh Yuan <yuanmingbuaa@...il.com>)
Re: Linux kernel: A concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (Greg KH <greg@...ah.com>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
CVE-2021-31805: Apache Struts: Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes… (Yasser Zamani <yasserzamani@...che.org>)
git v2.35.2 and friends for CVE-2022-24765 (Junio C Hamano <gitster@...ox.com>)

April 13 (3 messages)

Re: Linux kernel: A concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2022-0617: udf:A null-ptr-deref bug be triggered when write to an ICB inode (butt3rflyh4ck <butterflyhuangxx@...il.com>)
CVE-2022-27479: Apache Superset: SQL injection vulnerability in chart data API (Ville Brofeldt <villebro@...che.org>)

April 14 (3 messages)

Multiple vulnerabilities in swhkd hotkey helper for Wayland (Matthias Gerstner <mgerstner@...e.de>)
Re: Browser-mediated attacks on WebDriver servers (Gabriel Corona <gabriel.corona@...t-bretagne.fr>)
mutt 2.2.3 released - fixes CVE-2022-1328 (Alan Coopersmith <alan.coopersmith@...cle.com>)

April 16 (1 message)

Re: Browser-mediated attacks on WebDriver servers (Gabriel Corona <gabriel.corona@...t-bretagne.fr>)

April 20 (3 messages)

CVE-2022-29266: Apache APISIX: apisix/jwt-auth may leak secrets in error response (Zeping Bai <bzp2010@...che.org>)
CVE-2022-1215 libinput format string vulnerability (Peter Hutterer <peter.hutterer@...hat.com>)
tpm2-abrmd: possibly surprising security model for local users could result in a local DoS against TPM configuration and … (Matthias Gerstner <mgerstner@...e.de>)

April 21 (2 messages)

CVE-2022-1419: Linux kernel: A concurrency use-after-free in vgem_gem_dumb_create (Minh Yuan <yuanmingbuaa@...il.com>)
Re: CVE-2022-1419: Linux kernel: A concurrency use-after-free in vgem_gem_dumb_create (Greg KH <greg@...ah.com>)

April 22 (7 messages)

Re: CVE-2022-1419: Linux kernel: A concurrency use-after-free in vgem_gem_dumb_create (Marcus Meissner <meissner@...e.de>)
Re: CVE-2022-1419: Linux kernel: A concurrency use-after-free in vgem_gem_dumb_create (Greg KH <greg@...ah.com>)
Linux: UaF due to concurrency issue in io_uring timeouts (David Bouman <dbouman03@...il.com>)
Re: Linux: UaF due to concurrency issue in io_uring timeouts (Salvatore Bonaccorso <carnil@...ian.org>)
[kubernetes] CVE-2021-25745: Ingress-nginx `path` can be pointed to service account token file (CJ Cullen <cjcullen@...gle.com>)
[kubernetes] CVE-2021-25746: Ingress-nginx directive injection via annotations (CJ Cullen <cjcullen@...gle.com>)
CVE-2022-29464 :: WSO2 Unrestricted arbitrary file upload, and remote code to execution vulnerability. ("Myers, Christopher" <Christopher.Myers@...or.edu>)

April 26 (3 messages)

CVE-2022-24706: Apache CouchDB: Remote Code Execution Vulnerability in Packaging (Jan Lehnardt <jan@...che.org>)
CVE-2022-23942: Apache Doris(incubating) hardcoded cryptography initialization (陈明雨 <morningman@....com>)
[morningman@....com: CVE-2022-23942: Apache Doris(incubating) hardcoded cryptography initialization] (Seth Arnold <seth.arnold@...onical.com>)

April 27 (5 messages)

[SECURITY ADVISORY] curl OAUTH2 bearer bypass in connection re-use (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl credential leak on redirect (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl bad local IPv6 connection reuse (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl auth/cookie leak on redirect (Daniel Stenberg <daniel@...x.se>)
CVE-2022-27239: cifs-utils mount.cifs buffer overflow in ip parameter (Marcus Meissner <meissner@...e.de>)

April 28 (7 messages)

Linux kernel: A concurrency use-after-free in floppy's raw_cmd (Minh Yuan <yuanmingbuaa@...il.com>)
CVE-2022-21449 and version reporting ("Seaman, Chad" <cseaman@...mai.com>)
Re: CVE-2022-21449 and version reporting (Brian Behlendorf <brian@...lendorf.com>)
Re: CVE-2022-21449 and version reporting (Jeremy Stanley <fungi@...goth.org>)
Re: CVE-2022-21449 and version reporting (Seth Arnold <seth.arnold@...onical.com>)
Re: CVE-2022-21449 and version reporting (Sven Schwedas <sven.schwedas@....at>)
Re: CVE-2022-21449 and version reporting ("Seaman, Chad" <cseaman@...mai.com>)

April 29 (2 messages)

Re: CVE-2022-21449 and version reporting (Iron-Bound <iron.bound@...il.com>)
CVE-2022-29265: Apache NiFi: Improper Restriction of XML External Entity References in Multiple Components (David Handermann <exceptionfactory@...che.org>)

April 30 (4 messages)

Re: CVE-2022-21449 and version reporting (Christian Fischer <christian.fischer@...enbone.net>)
Re: CVE-2022-21449 and version reporting (John Helmert III <ajak@...too.org>)
Re: CVE-2022-21449 and version reporting (Jeremy Stanley <fungi@...goth.org>)
Re: CVE-2022-21449 and version reporting ("David A. Wheeler" <dwheeler@...eeler.com>)

79 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.