oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2024/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 9	² 9	³ 3	⁴ 1
⁵ 8	⁶ 3	⁷ 3	⁸ 4	⁹ 4	¹⁰	¹¹ 1
¹²	¹³ 5	¹⁴ 8	¹⁵	¹⁶ 3	¹⁷	¹⁸
¹⁹ 4	²⁰ 6	²¹ 1	²² 4	²³ 4	²⁴ 1	²⁵
²⁶ 1	²⁷ 6	²⁸ 10	²⁹ 2

Messages by day:

February 1 (9 messages)

Re: runc: CVE-2024-21626: high severity container breakout attack (Solar Designer <solar@...nwall.com>)
Re: Numerous unconfirmed FOSS CVEs disclosed on FD mailing list (Matthew Fernandez <matthew.fernandez@...il.com>)
Re: Numerous unconfirmed FOSS CVEs disclosed on FD mailing list (Christian Brabandt <cb@...bit.org>)
Python standard library defaults to insecure TLS for mail protocols (Hanno Böck <hanno@...eck.de>)
Re: Numerous unconfirmed FOSS CVEs disclosed on FD mailing list (Amos Jeffries <squid3@...enet.co.nz>)
Re: Python standard library defaults to insecure TLS for mail protocols (nightmare.yeah27@...ecat.org)
Re: Re: Python standard library defaults to insecure TLS for mail protocols (Hanno Böck <hanno@...eck.de>)
Re: Python standard library defaults to insecure TLS for mail protocols (Alex Gaynor <alex.gaynor@...il.com>)
Re: Python standard library defaults to insecure TLS for mail protocols (Jeremy Stanley <fungi@...goth.org>)

February 2 (9 messages)

Re: Python standard library defaults to insecure TLS for mail protocols (Steffen Nurpmeso <steffen@...oden.eu>)
Re: Python standard library defaults to insecure TLS for mail protocols (Stuart D Gathman <stuart@...hman.org>)
Re: Re: runc: CVE-2024-21626: high severity container breakout attack (Aleksa Sarai <cyphar@...har.com>)
CVE-2024-23832: Mastodon: Remote user impersonation and takeover (Valtteri Vuorikoski <vuori@...com.org>)
Re: Python standard library defaults to insecure TLS for mail protocols (Kurt H Maier <khm@...ops.net>)
Re: FWD: Kernel vulnerabilities CVE-2021-33630 & CVE-2021-33631 (Armin Kuster <akuster@...sta.com>)
systemd and other system services (in)compatibility with Linux procfs hidepid (was: darkhttpd: timing attack and local leak … (Solar Designer <solar@...nwall.com>)
Re: Python standard library defaults to insecure TLS for mail protocols (nightmare.yeah27@...ecat.org)
Re: Kernel vulnerabilities CVE-2021-33630 & CVE-2021-33631 (Roxana Bradescu <roxabee@...omium.org>)

February 3 (3 messages)

Re: Kernel vulnerabilities CVE-2021-33630 & CVE-2021-33631 (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: Python standard library defaults to insecure TLS for mail protocols (Steffen Nurpmeso <steffen@...oden.eu>)
Re: Re: Python standard library defaults to insecure TLS for mail protocols (Daniel Kahn Gillmor <dkg@...thhorseman.net>)

February 4 (1 message)

Re: Out-of-bounds read & write in the glibc's qsort() (Solar Designer <solar@...nwall.com>)

February 5 (8 messages)

Re: Out-of-bounds read & write in the glibc's qsort() ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: Out-of-bounds read & write in the glibc's qsort() ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: Out-of-bounds read & write in the glibc's qsort() ("Alexander E. Patrakov" <patrakov@...il.com>)
Re: systemd and other system services (in)compatibility with Linux procfs hidepid (was: darkhttpd: timing attack and loc… (Matthias Gerstner <mgerstner@...e.de>)
Re: Out-of-bounds read & write in the glibc's qsort() (Qualys Security Advisory <qsa@...lys.com>)
Re: Out-of-bounds read & write in the glibc's qsort() (Solar Designer <solar@...nwall.com>)
Re: Out-of-bounds read & write in the glibc's qsort() (Adhemerval Zanella Netto <adhemerval.zanella@...aro.org>)
WebKitGTK and WPE WebKit Security Advisory WSA-2024-0001 (Adrian Perez de Castro <aperez@...lia.com>)

February 6 (3 messages)

CVE-2024-23673: Apache Sling Servlets Resolver: Malicious code execution via path traversal (Carsten Ziegeler <cziegeler@...che.org>)
Django CVE-2024-24680: Potential denial-of-service in intcomma template filter (Natalia Bidart <nataliabidart@...il.com>)
CVE-2024-1048: grub2-set-bootflag may be abused to fill up /boot, bypass RLIMIT_NPROC (Solar Designer <solar@...nwall.com>)

February 7 (3 messages)

CVE-2023-51437: Apache Pulsar: Timing attack in SASL token signature verification (Michael Marshall <mmarshall@...che.org>)
CVE-2023-39196: Apache Ozone: Missing mutual TLS authentication in one of the service internal Ozone Storage Container Manager… (István Fajth <pifta@...che.org>)
The GNU C Library has been authorized by the CVE Program as a CVE Numbering Authority (CNA) (Carlos O'Donell <carlos@...hat.com>)

February 8 (4 messages)

CVE-2024-23452: Apache bRPC: HTTP request smuggling vulnerability (Wang Weibing <wwbmmm@...che.org>)
libuv 1.48.0 released, fixes CVE-2024-24806 (Alan Coopersmith <alan.coopersmith@...cle.com>)
[ADVISORY] CVE-2023-3966: Open vSwitch: Invalid memory access in Geneve with HW offload. (Ilya Maximets <i.maximets@....org>)
[ADVISORY] CVE-2023-5366: Open vSwitch: OpenFlow match on Neighbor Discovery Target may be ignored (Ilya Maximets <i.maximets@....org>)

February 9 (4 messages)

CVE-2023-50386: Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets (Houston Putman <houston@...che.org>)
CVE-2023-50298: Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions (Houston Putman <houston@...che.org>)
CVE-2023-50292: Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticate… (Houston Putman <houston@...che.org>)
CVE-2023-50291: Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords (Houston Putman <houston@...che.org>)

February 11 (1 message)

Re: libuv 1.48.0 released, fixes CVE-2024-24806 (Salvatore Bonaccorso <carnil@...ian.org>)

February 13 (5 messages)

ISC has disclosed six vulnerabilities in BIND 9 (CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-6516, CVE-2023-50387, … (Michał Kępień <michal@....org>)
Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities (Yorgos Thessalonikefs <yorgos@...etlabs.nl>)
Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities (Solar Designer <solar@...nwall.com>)
Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities (Solar Designer <solar@...nwall.com>)

February 14 (8 messages)

PowerDNS Security Advisory 2024-01: crafted DNSSEC records in a zone can lead to a denial of service in Recursor (Otto Moerbeek <otto.moerbeek@...erdns.com>)
CVE-2024-23952: Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-202… (Daniel Gaspar <dpgaspar@...che.org>)
Re: CVE-2024-23952: Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-… (Solar Designer <solar@...nwall.com>)
Secure Boot bypass in EDK2 based Virtual Machine firmware (Mate Kukri <mate.kukri@...onical.com>)
Re: Secure Boot bypass in EDK2 based Virtual Machine firmware (Yves-Alexis Perez <corsac@...ian.org>)
Re: Secure Boot bypass in EDK2 based Virtual Machine firmware (Yves-Alexis Perez <corsac@...ian.org>)
Re: Secure Boot bypass in EDK2 based Virtual Machine firmware (Mate Kukri <mate.kukri@...onical.com>)
Re: Secure Boot bypass in EDK2 based Virtual Machine firmware (Mate Kukri <mate.kukri@...onical.com>)

February 16 (3 messages)

CVE-2024-23807: Apache Xerces C++: Use-after-free on external DTD scan (Arnout Engelen <engelen@...che.org>)
Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities (Solar Designer <solar@...nwall.com>)

February 19 (4 messages)

CVE-2024-25710: Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file ("Gary D. Gregory" <ggregory@...che.org>)
CVE-2024-26308: Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file ("Gary D. Gregory" <ggregory@...che.org>)
CVE-2024-22369: Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository (Andrea Cosentino <acosentino@...che.org>)
CVE-2024-23114: Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository (Andrea Cosentino <acosentino@...che.org>)

February 20 (6 messages)

CVE-2023-49250: Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2023-51770: Apache DolphinScheduler: Arbitrary File Read Vulnerability (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2023-50270: Apache DolphinScheduler: Session do not expire after password change (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2023-49109: Remote Code Execution in Apache Dolphinscheduler (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2024-25141: Apache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflo… (Elad Kalif <eladkal@...che.org>)
CVEs issued by the Linux kernel CNA (Alan Coopersmith <alan.coopersmith@...cle.com>)

February 21 (1 message)

Re: CVEs issued by the Linux kernel CNA (Marcus Meissner <meissner@...e.de>)

February 22 (4 messages)

CVE-2024-22393: Apache Answer: Pixel Flood Attack by uploading the large pixel file (Enxin Xie <linkinstar@...che.org>)
CVE-2024-23349: Apache Answer: XSS vulnerability when submitting summary (Enxin Xie <linkinstar@...che.org>)
CVE-2024-26578: Apache Answer: Repeated submission at registration created duplicate users with the same name (Enxin Xie <linkinstar@...che.org>)
Re: CVEs issued by the Linux kernel CNA (Solar Designer <solar@...nwall.com>)

February 23 (4 messages)

Re: CVEs issued by the Linux kernel CNA (Greg KH <greg@...ah.com>)
c-ares CVE-2024-25629 (Brad House <brad@...d-house.com>)
CVE-2024-23320: Apache DolphinScheduler: Arbitrary js execution as root for authenticated users (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2024-22371: Apache Camel issue on ExchangeCreatedEvent (Otavio Rodolfo Piske <orpiske@...che.org>)

February 24 (1 message)

Re: CVEs issued by the Linux kernel CNA (eduardo vela <evn@...glers.com>)

February 26 (1 message)

CVE-2023-51518: Apache James server: Privilege escalation via JMX pre-authentication deserialisation (Benoit Tellier <btellier@...che.org>)

February 27 (6 messages)

CVE-2023-50379: Apache Ambari: authenticated users could perform command injection to perform RCE (Brahma Reddy Battula <brahma@...che.org>)
Xen Security Advisory 451 v2 (CVE-2023-46841) - x86: shadow stack vs exceptions from emulation stubs (Xen.org security team <security@....org>)
CVE-2024-27905: Apache Aurora: padding oracle can allow construction an authentication cookie (Arnout Engelen <engelen@...che.org>)
CVE-2023-51747: SMTP smuggling in Apache James (Benoit Tellier <btellier@...che.org>)
CVE-2024-21742: Apache James Mime4J: Mime4J DOM header injection (Benoit Tellier <btellier@...che.org>)
CVE-2023-50380: Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server (Brahma Reddy Battula <brahma@...che.org>)

February 28 (10 messages)

Performance Co-Pilot (pcp): Unsafe use of Directories in /var/lib/pcp and /var/log/pcp breaks pcp Service User Isolation … (Matthias Gerstner <mgerstner@...e.de>)
CVE-2024-22857: Heap Based Buffer overflow in zlog library (Ali Raza Mumtaz <raza.mumtaz@...yx.com>)
CVE-2024-27315: Apache Superset: Improper error handling on alerts (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2024-24773: Apache Superset: Improper validation of SQL statements allows for unauthorized access to data (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2024-24772: Apache Superset: Improper Neutralisation of custom SQL on embedded context (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2024-24779: Apache Superset: Improper data authorization when creating a new dataset (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2024-26016: Apache Superset: Improper authorization validation on dashboards and charts import (Daniel Gaspar <dpgaspar@...che.org>)
Re: CVE-2024-22857: Heap Based Buffer overflow in zlog library (Solar Designer <solar@...nwall.com>)
CVE-2024-23946: Apache OFBiz: Path traversal or file inclusion (Jacques Le Roux <jleroux@...che.org>)
CVE-2024-25065: Apache OFBiz: Path traversal allowing authentication bypass. (Jacques Le Roux <jleroux@...che.org>)

February 29 (2 messages)

CVE-2024-27906: Apache Airflow: Dag Code and Import Error Permissions Ignored (Ephraim Anierobi <ephraimanierobi@...che.org>)
Re: CVE-2024-22857: Heap Based Buffer overflow in zlog library (Ali Raza Mumtaz <raza.mumtaz@...yx.com>)

100 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.