oss-security mailing list - 2024/07

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [year] [list]

oss-security mailing list - 2024/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 13	² 2	³ 11	⁴ 2	⁵ 1	⁶	⁷
⁸	⁹	¹⁰	¹¹	¹²	¹³	¹⁴
¹⁵	¹⁶	¹⁷	¹⁸	¹⁹	²⁰	²¹
²²	²³	²⁴	²⁵	²⁶	²⁷	²⁸
²⁹	³⁰	³¹

Messages by day:

July 1 (13 messages)

Announce: OpenSSH 9.8 released (Damien Miller <djm@....openbsd.org>)
Re: Announce: OpenSSH 9.8 released (fwd) (Damien Miller <djm@...drot.org>)
CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
CVE-2024-36387: Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 (Eric Covener <covener@...che.org>)
CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF (Eric Covener <covener@...che.org>)
CVE-2024-38473: Apache HTTP Server proxy encoding problem (Eric Covener <covener@...che.org>)
CVE-2024-38474: Apache HTTP Server weakness with encoded question marks in backreferences (Eric Covener <covener@...che.org>)
CVE-2024-38475: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. (Eric Covener <covener@...che.org>)
CVE-2024-38476: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via interna… (Eric Covener <covener@...che.org>)
CVE-2024-38477: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request (Eric Covener <covener@...che.org>)
CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy handler substitution (Eric Covener <covener@...che.org>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (jvoisin <julien.voisin@...tri.org>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Mathias Krause <minipli@...ecurity.net>)

July 2 (2 messages)

Re: Announce: OpenSSH 9.8 released (Dominique Martinet <asmadeus@...ewreck.org>)
[OSSA-2024-001] OpenStack Cinder, Glance, Nova: Arbitrary file access through custom QCOW2 external data (CVE-2024-32498) (Jeremy Stanley <fungi@...goth.org>)

July 3 (11 messages)

Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Jacob Bachmeyer <jcb62281@...il.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Jeffrey Walton <noloader@...il.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Solar Designer <solar@...nwall.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
Re: Announce: OpenSSH 9.8 released (Christian Fischer <christian.fischer@...enbone.net>)
Re: Ghostscript 10.03.1 (2024-05-02) fixed 5 CVEs including CVE-2024-33871 arbitrary code execution (Thomas Rinsma <thomas@...ean.io>)
CVE-2024-39884: Apache HTTP Server: source code disclosure with handlers configured via AddType (Eric Covener <covener@...che.org>)
CVE-2024-39844: ZNC modtcl RCE (Martin Weinelt <martin@...uxlounge.net>)
CVE-2023-52168, CVE-2023-52169: buffer overflow, over-read vulnerabilities in the 7-Zip archiver (Maxim Suhanov <dfirblog@...il.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Yves-Alexis Perez <corsac@...ian.org>)

July 4 (2 messages)

Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Jacob Bachmeyer <jcb62281@...il.com>)

July 5 (1 message)

[ANNOUNCE] Apache CloudStack LTS Security Releases 4.18.2.1 and 4.19.0.2 (Abhishek Kumar <shwstppr@...che.org>)

29 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.