oss-security mailing list - 2023/05

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2023/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 3	³ 8	⁴ 8	⁵ 1	⁶	⁷ 3
⁸ 4	⁹ 2	¹⁰ 8	¹¹ 5	¹² 3	¹³	¹⁴ 3
¹⁵ 5	¹⁶ 5	¹⁷ 9	¹⁸ 1	¹⁹ 1	²⁰	²¹ 11
²² 2	²³ 1	²⁴ 7	²⁵ 2	²⁶ 1	²⁷	²⁸
²⁹ 4	³⁰ 2	³¹

Messages by day:

May 2 (3 messages)

CVE-2023-32007: Apache Spark: Shell command injection via Spark UI (Arnout Engelen <engelen@...che.org>)
CVE-2023-26268: Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes (Nick Vatamaniuc <vatamane@...che.org>)
Fwd: Retired X.Org Packages (Alan Coopersmith <alan.coopersmith@...cle.com>)

May 3 (8 messages)

Django: CVE-2023-31047 Potential bypass of validation when uploading multiple files using one form field (Mariusz Felisiak <felisiak.mariusz@...il.com>)
semi-public issues on (linux-)distros (Solar Designer <solar@...nwall.com>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Reid Sutherland <reid@...rddimension.net>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules ("David A. Wheeler" <dwheeler@...eeler.com>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Jeffrey Walton <noloader@...il.com>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Reid Sutherland <reid@...rddimension.net>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Moritz Bechler <mbechler@...terphace.org>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Michael Orlitzky <michael@...itzky.com>)

May 4 (8 messages)

Re: semi-public issues on (linux-)distros (Johannes Segitz <jsegitz@...e.de>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Reid Sutherland <reid@...rddimension.net>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Sam Bull <9m199i@...bull.org>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Rainer Canavan <rainer.canavan@...nga.com>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules ("David A. Wheeler" <dwheeler@...eeler.com>)
CVE-2022-45048: Apache Ranger: code execution vulnerability in policy expressions (Madhan Neethiraj <madhan@...che.org>)
CVE-2021-40331: Apache Ranger Hive Plugin: Any user with SELECT privilege on a database can alter the ownership of the table in … (Ramesh Mani <rmani@...che.org>)

May 5 (1 message)

Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (Steffen Nurpmeso <steffen@...oden.eu>)

May 7 (3 messages)

CVE-2023-29247: Stored XSS on Apache Airflow (Pierre Jeambrun <pierrejeambrun@...che.org>)
Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules (John Helmert III <ajak@...too.org>)
CVE-2023-31038: Apache Log4cxx: SQL injection when using ODBC appender (Robert Middleton <rmiddleton@...che.org>)

May 8 (4 messages)

CVE-2023-31039: Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution (Wang Weibing <wwbmmm@...che.org>)
CVE-2023-25754: Apache Airflow: Privilege escalation using airflow logs (Jarek Potiuk <potiuk@...che.org>)
Linux kernel io_uring out-of-bounds access to physical memory (Tobias Holl <tobias@...ll.xyz>)
[CVE-2023-32233] Linux kernel use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform a… (Piotr Krysiuk <piotras@...il.com>)

May 9 (2 messages)

CVE-2023-2253: distribution/distribution: Catalog API endpoint can lead to OOM via malicious user input (Cathy Hu <cahu@...e.de>)
Re: Linux kernel io_uring out-of-bounds access to physical memory (Solar Designer <solar@...nwall.com>)

May 10 (8 messages)

Re: CVE-2023-2253: distribution/distribution: Catalog API endpoint can lead to OOM via malicious user input (Cathy Hu <cahu@...e.de>)
New Linux kernel NetFilter flaw gives attackers root privileges (Turritopsis Dohrnii Teo En Ming <tdtemccnp@...il.com>)
Re: New Linux kernel NetFilter flaw gives attackers root privileges (Solar Designer <solar@...nwall.com>)
Re: Linux kernel io_uring out-of-bounds access to physical memory (Solar Designer <solar@...nwall.com>)
[OSSA-2023-003] cinder, glance_store, nova, os-brick: Unauthorized volume access through deleted volume attachments (CVE-202… (Jeremy Stanley <fungi@...goth.org>)
Re: New Linux kernel NetFilter flaw gives attackers root privileges (Piotr Krysiuk <piotras@...il.com>)
Re: New Linux kernel NetFilter flaw gives attackers root privileges (Thadeu Lima de Souza Cascardo <cascardo@...onical.com>)
Re: New Linux kernel NetFilter flaw gives attackers root privileges (Tobias Heider <tobias.heider@...onical.com>)

May 11 (5 messages)

Re: New Linux kernel NetFilter flaw gives attackers root privileges (Solar Designer <solar@...nwall.com>)
Clarification on embargoed testing in a partner cloud (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Clarification on embargoed testing in a partner cloud (Marcus Meissner <meissner@...e.de>)
Re: New Linux kernel NetFilter flaw gives attackers root privileges (David Leadbeater <dgl@....cx>)
Re: New Linux kernel NetFilter flaw gives attackers root privileges (Florian Weimer <fweimer@...hat.com>)

May 12 (3 messages)

CVE-2023-28936: Apache OpenMeetings: insufficient check of invitation hash (Maxim Solodovnik <solomax@...che.org>)
CVE-2023-29032: Apache OpenMeetings: allows bypass authentication (Maxim Solodovnik <solomax@...che.org>)
CVE-2023-29246: Apache OpenMeetings: allows null-byte Injection (Maxim Solodovnik <solomax@...che.org>)

May 14 (3 messages)

Re: semi-public issues on (linux-)distros (Solar Designer <solar@...nwall.com>)
Re: Clarification on embargoed testing in a partner cloud (Solar Designer <solar@...nwall.com>)
Re: Real world vulnerabilities of CWE-1077: Floating Point Comparison with Incorrect Operator? (Solar Designer <solar@...nwall.com>)

May 15 (5 messages)

linux kernel 6.3.0: slab-use-after-free Write in txEnd due to race condition (蓝色的小羊 <1395428693sheep@...il.com>)
CVE-2022-47937: Multiple parsing problems in the Apache Sling Commons JSON module (Robert Munteanu <rombert@...che.org>)
Re: linux kernel 6.3.0: slab-use-after-free Write in txEnd due to race condition (Greg KH <greg@...ah.com>)
libcap-2.69 addresses 2 CVEs ("Andrew G. Morgan" <morgan@...nel.org>)
Re: [CVE-2023-32233] Linux kernel use-after-free in Netfilter nf_tables when processing batch requests can be abused to perfo… (Piotr Krysiuk <piotras@...il.com>)

May 16 (5 messages)

Re: linux kernel 6.3.0: slab-use-after-free Write in txEnd due to race condition (Zheng Hacker <hackerzheng666@...il.com>)
Re: libcap-2.69 addresses 2 CVEs (Solar Designer <solar@...nwall.com>)
Re: Clarification on embargoed testing in a partner cloud (Marc Deslauriers <marc.deslauriers@...onical.com>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Xen Security Advisory 431 v1 (CVE-2022-42336) - Mishandling of guest SSBD selection on AMD hardware (Xen.org security team <security@....org>)

May 17 (9 messages)

curl: CVE-2023-28319: UAF in SSH sha256 fingerprint check (Daniel Stenberg <daniel@...x.se>)
curl: CVE-2023-28320: siglongjmp race condition (Daniel Stenberg <daniel@...x.se>)
curl: CVE-2023-28321: IDN wildcard match (Daniel Stenberg <daniel@...x.se>)
curl: CVE-2023-28322: more POST-after-PUT confusion (Daniel Stenberg <daniel@...x.se>)
CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Till Kamppeter <till.kamppeter@...il.com>)
IPv6 and Route of Death (Jeffrey Walton <noloader@...il.com>)
Re: IPv6 and Route of Death (Barry Greene <bgreene@...ki.org>)
Re: IPv6 and Route of Death (Solar Designer <solar@...nwall.com>)
Re: IPv6 and Route of Death (Erik Auerswald <auerswal@...x-ag.uni-kl.de>)

May 18 (1 message)

Re: IPv6 and Route of Death (Andrew Worsley <amworsley@...il.com>)

May 19 (1 message)

Re: IPv6 and Route of Death (Dominique Martinet <asmadeus@...ewreck.org>)

May 21 (11 messages)

CVE-2023-31058: Apache InLong: JDBC URL bypassing by adding blanks (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31062: Apache InLong: Privilege escalation vulnerability for InLong (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31064: Apache InLong: Insecurity direct object references cancelling applications (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31065: Apache InLong: Insufficient Session Expiration in InLong (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31066: Apache InLong: Insecure direct object references for inlong sources (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31098: Apache InLong: Weak Password Implementation in InLong (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31101: Apache InLong: Users who joined later can see the data of deleted users (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31103: Apache InLong: Attackers can change the immutable name and type of cluster (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31206: Apache InLong: Attackers can change the immutable name and type of nodes (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31453: Apache InLong: IDOR make users can delete others' subscription (Charles Zhang <dockerzhang@...che.org>)
CVE-2023-31454: Apache InLong: IDOR make users can bind any cluster (Charles Zhang <dockerzhang@...che.org>)

May 22 (2 messages)

CVE-2023-28709 Apache Tomcat - Fix for CVE-2023-24998 was incomplete (Mark Thomas <markt@...che.org>)
c-ares multiple vulnerabilities: CVE-2023-32067, CVE-2023-31147, CVE-2023-31130, CVE-2023-31124 (Brad House <brad@...d-house.com>)

May 23 (1 message)

CVE-2023-33246: Apache RocketMQ: RocketMQ may have a remote code execution vulnerability when using the update configurat… (Rongtong Jin <jinrongtong@...che.org>)

May 24 (7 messages)

Re: Clarification on embargoed testing in a partner cloud (Moritz Mühlenhoff <jmm@...til.org>)
Re: Clarification on embargoed testing in a partner cloud (Solar Designer <solar@...nwall.com>)
Fwd: Forthcoming OpenSSL Releases (Solar Designer <solar@...nwall.com>)
Re: Clarification on embargoed testing in a partner cloud (Anthony Liguori <anthony@...emonkey.ws>)
Re: Clarification on embargoed testing in a partner cloud (Jeremy Stanley <fungi@...goth.org>)
Re: Clarification on embargoed testing in a partner cloud (Brian Behlendorf <brian@...lendorf.com>)
Attestation, reproducible builds, and bootstrapping (Ludovic Courtès <ludo@....org>)

May 25 (2 messages)

CVE-2022-46907: Apache JSPWiki Cross-site scripting on several plugins (Juan Pablo Santos Rodríguez <juanpablo@...che.org>)
[kubernetes] CVE-2023-2878: secrets-store-csi-driver discloses service account tokens in logs (Monis Khan <i@...is.app>)

May 26 (1 message)

CVE-2023-33234: Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration (Elad Kalif <eladkal@...che.org>)

May 29 (4 messages)

Stack overflow in imagemagick coders/tiff.c (Bastien Roucariès <rouca@...ian.org>)
CVE-2023-30601: Apache Cassandra: Privilege escalation when enabling FQL/Audit logs (Marcus Eriksson <marcuse@...che.org>)
Re: Stack overflow in imagemagick coders/tiff.c (Bastien Roucariès <rouca@...ian.org>)
Update CVE-2021-3610: ImageMagick (Bastien Roucariès <rouca@...ian.org>)

May 30 (2 messages)

OpenSSL Security Advisory (Tomas Mraz <tomas@...nssl.org>)
WebKitGTK and WPE WebKit Security Advisory WSA-2023-0004 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

99 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.