oss-security mailing list - 2022/05

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2022/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 2
² 1	³	⁴ 1	⁵ 3	⁶	⁷	⁸
⁹ 4	¹⁰ 2	¹¹ 6	¹² 1	¹³	¹⁴	¹⁵ 3
¹⁶ 6	¹⁷ 9	¹⁸ 2	¹⁹ 2	²⁰ 2	²¹ 1	²² 4
²³ 3	²⁴ 12	²⁵ 5	²⁶ 6	²⁷ 2	²⁸ 2	²⁹
³⁰ 1	³¹ 3

Messages by day:

May 1 (2 messages)

Re: CVE-2022-21449 and version reporting ("Christian Fischer" <christian.fischer@...enbone.net>)
Re: CVE-2022-21449 and version reporting (John Helmert III <ajak@...too.org>)

May 2 (1 message)

Re: CVE-2022-21449 and version reporting (Christian Fischer <christian.fischer@...enbone.net>)

May 4 (1 message)

CVE-2022-28890: Apache Jena: Processing external DTDs (Andy Seaborne <andy@...che.org>)

May 5 (3 messages)

DPDK CVE-2021-3839 Release Notice ("Jiang, Cheng1" <cheng1.jiang@...el.com>)
DPDK CVE-2022-0669 Release Notice ("Jiang, Cheng1" <cheng1.jiang@...el.com>)
CVE-2022-24903: rsyslog < 8.2204.1 heap buffer overrun (Rainer Gerhards <rgerhards@...adiscon.com>)

May 9 (4 messages)

Re: CVE-2022-24706: Apache CouchDB: Remote Code Execution Vulnerability in Packaging (Archange <archange@...ivis.me>)
Re: CVE-2022-24706: Apache CouchDB: Remote Code Execution Vulnerability in Packaging (Jan Lehnardt <jan@...che.org>)
Re: CVE-2022-24706: Apache CouchDB: Remote Code Execution Vulnerability in Packaging (Archange <archange@...ivis.me>)
Re: CVE-2022-24706: Apache CouchDB: Remote Code Execution Vulnerability in Packaging (Jan Lehnardt <jan@...che.org>)

May 10 (2 messages)

Linux kernel: A concurrency use-after-free in bad_flp_intr for latest kernel version (Minh Yuan <yuanmingbuaa@...il.com>)
Re: Linux kernel: A concurrency use-after-free in bad_flp_intr for latest kernel version (Minh Yuan <yuanmingbuaa@...il.com>)

May 11 (6 messages)

[SECURITY ADVISORY] curl: removes wrong file on error (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: cookie for trailing dot TLD (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: percent-encoded path separator in URL host (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: CERTINFO never-ending busy-loop (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: TLS and SSH connection too eager reuse (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: HSTS bypass via trailing dot (Daniel Stenberg <daniel@...x.se>)

May 12 (1 message)

CVE-2022-29162: runc < 1.1.2 incorrect handling of inheritable capabilities in default configuration (Aleksa Sarai <asarai@...e.de>)

May 15 (3 messages)

linux-distros list policy and Linux kernel (Solar Designer <solar@...nwall.com>)
Re: linux-distros list policy and Linux kernel (Igor Seletskiy <i@...udlinux.com>)
Re: linux-distros list policy and Linux kernel (Anthony Liguori <anthony@...emonkey.ws>)

May 16 (6 messages)

Re: linux-distros list policy and Linux kernel ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: linux-distros list policy and Linux kernel (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
CVE-2022-30126: Apache Tika Regular Expression Denial of Service in Standards Extractor (Tim Allison <tallison@...che.org>)
CVE-2022-25169: Apache Tika BPGParser Memory Usage DoS (Tim Allison <tallison@...che.org>)
Re: linux-distros list policy and Linux kernel (Greg KH <gregkh@...uxfoundation.org>)
Re: linux-distros list policy and Linux kernel (Greg KH <greg@...ah.com>)

May 17 (9 messages)

Re: linux-distros list policy and Linux kernel (Seth Arnold <seth.arnold@...onical.com>)
Re: linux-distros list policy and Linux kernel (Greg KH <greg@...ah.com>)
CVE-2022-26650: Apache ShenYu (incubating) Regular expression denial of service (Zhang Yonglun <zhangyonglun@...che.org>)
Re: linux-distros list policy and Linux kernel ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: linux-distros list policy and Linux kernel (Greg KH <greg@...ah.com>)
Re: linux-distros list policy and Linux kernel (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
Re: linux-distros list policy and Linux kernel (Jeremy Stanley <fungi@...goth.org>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
CVE-2022-30688: needrestart 0.8+ local privilege escalation (Thomas Liske <thomas@...sko-nw.net>)

May 18 (2 messages)

ISC has disclosed a vulnerability in BIND (CVE-2022-1183) (ISC Security Officer <security-officer@....org>)
CVE-2022-29581: Linux kernel cls_u32 UAF (Kyle Zeng <zengyhkyle@...il.com>)

May 19 (2 messages)

Re: linux-distros list policy and Linux kernel (Dan Carpenter <dan.carpenter@...cle.com>)
Re: linux-distros list policy and Linux kernel (Alan Coopersmith <alan.coopersmith@...cle.com>)

May 20 (2 messages)

Re: linux-distros list policy and Linux kernel (Vegard Nossum <vegard.nossum@...cle.com>)
CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)

May 21 (1 message)

Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Solar Designer <solar@...nwall.com>)

May 22 (4 messages)

Re: linux-distros list policy and Linux kernel (Solar Designer <solar@...nwall.com>)
Re: linux-distros list policy and Linux kernel (Solar Designer <solar@...nwall.com>)
Re: linux-distros list policy and Linux kernel (Sam James <sam@...too.org>)
Re: linux-distros list policy and Linux kernel (Sam James <sam@...too.org>)

May 23 (3 messages)

Re: linux-distros list policy and Linux kernel (Greg KH <greg@...ah.com>)
Re: linux-distros list policy and Linux kernel (eduardo vela <evn@...glers.com>)
CVE-2022-29599: Apache Maven: Commandline class shell injection vulnerabilities (Slawomir Jaranowski <sjaranowski@...che.org>)

May 24 (12 messages)

Re: linux-distros list policy and Linux kernel (Solar Designer <solar@...nwall.com>)
Re: linux-distros list policy and Linux kernel (Solar Designer <solar@...nwall.com>)
Re: linux-distros list policy and Linux kernel (Vegard Nossum <vegard.nossum@...cle.com>)
CVE-2022-1786: Linux Kernel invalid-free in io_uring (Kyle Zeng <zengyhkyle@...il.com>)
Re: CVE-2022-1786: Linux Kernel invalid-free in io_uring (Solar Designer <solar@...nwall.com>)
Re: linux-distros list policy and Linux kernel (Greg KH <greg@...ah.com>)
CVE-2022-21499: trivial lockdown break (John Haxby <john.haxby@...cle.com>)
Re: CVE-2022-1786: Linux Kernel invalid-free in io_uring (Kyle Zeng <zengyhkyle@...il.com>)
Re: linux-distros list policy and Linux kernel (Mickaël Salaün <mic@...ikod.net>)
Re: CVE-2022-21499: trivial lockdown break (John Haxby <john.haxby@...cle.com>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Solar Designer <solar@...nwall.com>)

May 25 (5 messages)

multiple vulnerabilities in radare2 (Dimitrios Glynos <dimitris@...sus-labs.com>)
CVE-2022-1789: Linux Kernel: x86/kvm: NULL pointer dereference in kvm_mmu_invpcid_gva (kangel <kangel@....edu.cn>)
Re: CVE-2022-1348 logrotate: potential DoS from unprivileged users via the state file (Kamil Dudka <kdudka@...hat.com>)
Re: Re: CVE-2022-1348 logrotate: potential DoS from unprivileged users via the state file (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Re: CVE-2022-1348 logrotate: potential DoS from unprivileged users via the state file (Kamil Dudka <kdudka@...hat.com>)

May 26 (6 messages)

OPEN SOURCE NTFS-3G SECURITY ADVISORY NTFS3G-SA-2022-0001 (Jussi Hietanen <jussi.hietanen@...era.com>)
OPEN SOURCE NTFS-3G SECURITY ADVISORY NTFS3G-SA-2022-0002 (Jussi Hietanen <jussi.hietanen@...era.com>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Norbert Slusarek <nslusarek@....net>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Jeremy Stanley <fungi@...goth.org>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Solar Designer <solar@...nwall.com>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Philip Pettersson <philip.pettersson@...il.com>)

May 27 (2 messages)

Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation ("Mike O'Connor" <mjo@...o.mi.org>)
CVE-2022-1462: Linux kernel: A race condition vulnerability in drivers/tty/tty_buffers.c (一只狗 <chennbnbnb@...il.com>)

May 28 (2 messages)

Re: CVE-2022-1786: Linux Kernel invalid-free in io_uring (Kyle Zeng <zengyhkyle@...il.com>)
Re: CVE-2022-1729: race condition in Linux perf subsystem leads to local privilege escalation (Solar Designer <solar@...nwall.com>)

May 30 (1 message)

WebKitGTK and WPE WebKit Security Advisory WSA-2022-0005 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

May 31 (3 messages)

Linux Kernel use-after-free write in netfilter (EDG EDG <edg.bugs@...il.com>)
CVE-2022-30973: Apache Tika: Missing fix for CVE-2022-30126 in 1.28.2 (Tim Allison <tallison@...che.org>)
CVE-2022-1852: Linux Kernel: x86/kvm: NULL pointer dereference in x86_emulate_insn (kangel <kangel@....edu.cn>)

83 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.