oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2023/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 1	²	³
⁴ 2	⁵ 3	⁶ 2	⁷ 1	⁸ 1	⁹ 1	¹⁰
¹¹ 1	¹² 3	¹³ 6	¹⁴ 1	¹⁵ 10	¹⁶ 1	¹⁷ 2
¹⁸ 3	¹⁹ 5	²⁰ 3	²¹ 10	²² 14	²³ 5	²⁴ 2
²⁵ 3	²⁶ 5	²⁷ 1	²⁸ 6	²⁹ 5	³⁰ 4	³¹

Messages by day:

December 1 (1 message)

New CVEs and security fix releases for perl (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 4 (2 messages)

HNS-2023-04 - HN Security Advisory - Buffer overflow vulnerabilities with long path names in TinyDir (Marco Ivaldi <raptor@...eadbeef.info>)
CVE-2023-49070: Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present (Jacques Le Roux <jleroux@...che.org>)

December 5 (3 messages)

WebKitGTK and WPE WebKit Security Advisory WSA-2023-0011 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Security fixes in Go 1.21.5 and Go 1.20.12 releases (Alan Coopersmith <alan.coopersmith@...cle.com>)
SLAM: Spectre based on Linear Address Masking (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 6 (2 messages)

[SECURITY ADVISORY] curl: cookie mixed case PSL bypass (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: HSTS long file name clears contents (Daniel Stenberg <daniel@...x.se>)

December 7 (1 message)

CVE-2023-50164: Apache Struts: File upload component had a directory traversal vulnerability (Lukasz Lenart <lukaszlenart@...che.org>)

December 8 (1 message)

CVE-2023-49284: fish command substitution output can trigger shell expansion (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 9 (1 message)

CVE-2023-41835: Apache Struts: excessive disk usage (Lukasz Lenart <lukaszlenart@...che.org>)

December 11 (1 message)

Buildroot: Talos download hash verification vulnerabilities (Peter Korsgaard <peter@...sgaard.com>)

December 12 (3 messages)

Xen Security Advisory 447 v2 (CVE-2023-46837) - arm32: The cache may not be properly cleaned/invalidated (take two) (Xen.org security team <security@....org>)
CVE-2023-45725: Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents (Nick Vatamaniuc <vatamane@...che.org>)
AlmaLinux Distros List Application (Jonathan Wright <jonathan@...alinux.org>)

December 13 (6 messages)

FW: X.Org Security Advisory: Issues in X.Org X server prior to 21.1.10 and Xwayland prior to 23.2.3 (Peter Hutterer <peter.hutterer@...-t.net>)
CVE-2023-40660: Potential PIN bypass with empty PIN in OpenSC before 0.24.0 (Jakub Jelen <jjelen@...hat.com>)
CVE-2023-40661: Dynamic analyzers reports in pkcs15-init in OpenSC before 0.24.0 (Jakub Jelen <jjelen@...hat.com>)
Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Re: AlmaLinux Distros List Application (Darya Malyavkina <dmalyavkina@...udlinux.com>)
CVE-2023-46750: Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication featur… (Brian Demers <bdemers@...che.org>)

December 14 (1 message)

budgie-extras: multiple predictable /tmp path issues in various applications (Matthias Gerstner <mgerstner@...e.de>)

December 15 (10 messages)

XDG_RUNTIME_DIR "misuse" as $TMPDIR (was: Re: budgie-extras: multiple predictable /tmp path issues in various applicatio… (Steffen Nurpmeso <steffen@...oden.eu>)
CVE-2023-29234: Bypass serialize checks in Apache Dubbo (Albumen Kevin <albumenj@...che.org>)
CVE-2023-46279: Apache Dubbo: Bypass deny serialize list check in Apache Dubbo (Albumen Kevin <albumenj@...che.org>)
CVE-2023-30867: Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability (Huajie Wang <benjobs@...che.org>)
CVE-2023-49898: Apache StreamPark (incubating): Authenticated system users could trigger remote command execution (Huajie Wang <benjobs@...che.org>)
Re: XDG_RUNTIME_DIR "misuse" as $TMPDIR (was: Re: budgie-extras: multiple predictable /tmp path issues in various applic… (Matthias Gerstner <mgerstner@...e.de>)
[ES2023-01] Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation ("Sandro Gauci" <sandro@...blesecurity.com>)
[ES2023-03] RTPEngine susceptible to Denial of Service via DTLS Hello packets during call initiation ("Sandro Gauci" <sandro@...blesecurity.com>)
Re: XDG_RUNTIME_DIR "misuse" as $TMPDIR (was: Re: budgie-extras: multiple predictable /tmp path issues in various applic… (Steffen Nurpmeso <steffen@...oden.eu>)
jq 1.7.1 fixes CVE-2023-50246 & CVE-2023-50268 (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 16 (1 message)

CVE-2023-41314: Apache Doris: Missing API authentication allowed DoS (Mingyu Chen <morningman@...che.org>)

December 17 (2 messages)

Re: budgie-extras: multiple predictable /tmp path issues in various applications (Florian Weimer <fweimer@...hat.com>)
Re: AlmaLinux Distros List Application (Solar Designer <solar@...nwall.com>)

December 18 (3 messages)

WebKitGTK and WPE WebKit Security Advisory WSA-2023-0012 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Announce: OpenSSH 9.6 released (Damien Miller <djm@....openbsd.org>)
CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack) (Fabian Bäumer <fabian.baeumer@....de>)

December 19 (5 messages)

CVE-2023-46104: Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2023-49736: Apache Superset: SQL Injection on where_in JINJA macro (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2023-49734: Apache Superset: Privilege Escalation Vulnerability (Daniel Gaspar <dpgaspar@...che.org>)
[SECURITY] CVE-2023-43826: Apache Guacamole: Integer overflow in handling of VNC image buffers (Michael Jumper <mjumper@...che.org>)
Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack) (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 20 (3 messages)

Re: AlmaLinux Distros List Application (Jonathan Wright <jonathan@...alinux.org>)
CVE-2023-37544: Apache Pulsar WebSocket Proxy: Improper Authentication for WebSocket Proxy Endpoint Allows DoS (Michael Marshall <mmarshall@...che.org>)
Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack) (Marcus Meissner <meissner@...e.de>)

December 21 (10 messages)

CVE-2023-48291: Apache Airflow: Improper access control to DAG resources (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2023-47265: Apache Airflow: DAG Params alllow to embed unchecked Javascript (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2023-49920: Apache Airflow: Missing CSRF protection on DAG/trigger (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2023-50783: Apache Airflow: Improper access control vulnerability on the "varimport" endpoint (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2023-51656: Apache IoTDB: Unsafe deserialize map in Sync Tool (Haonan Hou <haonan@...che.org>)
New SMTP smuggling attack (Marcus Meissner <meissner@...e.de>)
Re: New SMTP smuggling attack (Claus Assmann <ml+oss@...tp.org>)
Security vulnerability in Debian's cpio 2.13 (Ingo Brückl <ib@...net.de>)
Mayhem: Targeted Corruption of Register and Stack Variables ("Tol, Caner" <mtol@....edu>)
Re: AlmaLinux Distros List Application (Solar Designer <solar@...nwall.com>)

December 22 (14 messages)

Re: Re: New SMTP smuggling attack (Marcus Meissner <meissner@...e.de>)
Re: Re: New SMTP smuggling attack (Stuart Henderson <stu@...cehopper.org>)
Re: New SMTP smuggling attack (Hanno Böck <hanno@...eck.de>)
Re: Re: New SMTP smuggling attack (Marcus Meissner <meissner@...e.de>)
Re: Re: New SMTP smuggling attack (Bjoern Franke <bjo@...afweide.org>)
CVE-2023-6817: Linux kernel: use-after-free in nf_tables (Xingyuan Mo <hdthky0@...il.com>)
Re: Re: New SMTP smuggling attack (Erik Auerswald <auerswal@...x-ag.uni-kl.de>)
Re: Re: New SMTP smuggling attack (Rodrigo Freire <rfreire@...hat.com>)
Re: Re: New SMTP smuggling attack ("Alexander E. Patrakov" <patrakov@...il.com>)
Fwd: [pfx-ann] Postfix stable release 3.8.4 (Solar Designer <solar@...nwall.com>)
Re: Re: New SMTP smuggling attack (Erik Auerswald <auerswal@...x-ag.uni-kl.de>)
Re: Re: New SMTP smuggling attack (Stuart D Gathman <stuart@...hman.org>)
Re: CVE-2023-6817: Linux kernel: use-after-free in nf_tables (Dominique Martinet <asmadeus@...ewreck.org>)
Re: Fwd: [pfx-ann] Postfix stable release 3.8.4 (Solar Designer <solar@...nwall.com>)

December 23 (5 messages)

Re: Re: New SMTP smuggling attack (Harry Sintonen <sintonen@....fi>)
Re: Re: New SMTP smuggling attack (Valtteri Vuorikoski <vuori@...com.org>)
Re: linux-distros membership application of openEuler (Solar Designer <solar@...nwall.com>)
[ES2023-02] FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation ("Sandro Gauci" <sandro@...blesecurity.com>)
Re: linux-distros membership application of openEuler (Igor Seletskiy <i@...udlinux.com>)

December 24 (2 messages)

Re: Re: New SMTP smuggling attack (Marcus Meissner <meissner@...e.de>)
Re: linux-distros membership application of openEuler ("Alexander E. Patrakov" <patrakov@...il.com>)

December 25 (3 messages)

Re: Re: New SMTP smuggling attack (kai <kai@...tland.ru>)
Re: linux-distros membership application of openEuler (Solar Designer <solar@...nwall.com>)
Re: linux-distros membership application of openEuler (Steffen Nurpmeso <steffen@...oden.eu>)

December 26 (5 messages)

Re: linux-distros membership application of openEuler (Solar Designer <solar@...nwall.com>)
CVE-2023-50968: Apache OFBiz: Arbitrary file properties reading and SSRF attack (Nicolas Malin <nmalin@...che.org>)
CVE-2023-51467: Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability (Deepak Dixit <deepak@...che.org>)
CVE-2023-51385, CVE-2023-6004: OpenSSH, libssh: Security weakness in ProxyCommand handling (Solar Designer <solar@...nwall.com>)
Re: New SMTP smuggling attack (Claus Assmann <ml+oss@...tp.org>)

December 27 (1 message)

xarchiver: Path traversal with crafted cpio archives (Ingo Brückl <ib@...net.de>)

December 28 (6 messages)

Re: linux-distros membership application of openEuler (Greg KH <greg@...ah.com>)
Re: linux-distros membership application of openEuler (Demi Marie Obenour <demi@...isiblethingslab.com>)
CVE-2023-47804: Apache OpenOffice: Macro URL arbitrary script execution (Arrigo Marchiori <ardovm@...che.org>)
CVE-2023-1183: Apache OpenOffice: Arbitrary file write in Apache OpenOffice Base (Arrigo Marchiori <ardovm@...che.org>)
CVE-2022-43680: Apache OpenOffice: "Use after free" fixed in libexpat (Arrigo Marchiori <ardovm@...che.org>)
CVE-2012-5639: Apache OpenOffice: Loading internal / external resources without warning (Arrigo Marchiori <ardovm@...che.org>)

December 29 (5 messages)

CVE-2023-49299: Apache DolphinScheduler: Arbitrary js execute as root for authenticated users (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2023-51766: Exim: SMTP smuggling (Solar Designer <solar@...nwall.com>)
xarchiver: Path traversal with crafted cpio archives (Ingo Brückl <ib@...net.de>)
CVE-2023-7101: Spreadsheet::ParseExcel for Perl is vulnerable to arbitrary code execution (Stig Palmquist <stig@...g.io>)
Re: Re: New SMTP smuggling attack (Alan Coopersmith <alan.coopersmith@...cle.com>)

December 30 (4 messages)

Re: Re: New SMTP smuggling attack (Marcus Meissner <meissner@...e.de>)
inetutils ftpd, rcp, rlogin, rsh, rshd, uucpd: Avoid potential privilege escalations by checking set*id() return values (Solar Designer <solar@...nwall.com>)
Re: Re: New SMTP smuggling attack (Claus Assmann <ml+oss@...tp.org>)
Re: inetutils ftpd, rcp, rlogin, rsh, rshd, uucpd: Avoid potential privilege escalations by checking set*id() return values (Solar Designer <solar@...nwall.com>)

101 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.