oss-security mailing list - 2024/07

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2024/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 13	² 2	³ 11	⁴ 2	⁵ 1	⁶	⁷
⁸ 8	⁹ 5	¹⁰ 8	¹¹ 7	¹² 3	¹³ 7	¹⁴
¹⁵ 4	¹⁶ 11	¹⁷ 7	¹⁸ 4	¹⁹ 3	²⁰	²¹
²² 5	²³ 6	²⁴ 5	²⁵ 2	²⁶ 3	²⁷ 1	²⁸ 3
²⁹ 3	³⁰ 2	³¹ 2

Messages by day:

July 1 (13 messages)

Announce: OpenSSH 9.8 released (Damien Miller <djm@....openbsd.org>)
Re: Announce: OpenSSH 9.8 released (fwd) (Damien Miller <djm@...drot.org>)
CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
CVE-2024-36387: Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 (Eric Covener <covener@...che.org>)
CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF (Eric Covener <covener@...che.org>)
CVE-2024-38473: Apache HTTP Server proxy encoding problem (Eric Covener <covener@...che.org>)
CVE-2024-38474: Apache HTTP Server weakness with encoded question marks in backreferences (Eric Covener <covener@...che.org>)
CVE-2024-38475: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. (Eric Covener <covener@...che.org>)
CVE-2024-38476: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via interna… (Eric Covener <covener@...che.org>)
CVE-2024-38477: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request (Eric Covener <covener@...che.org>)
CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy handler substitution (Eric Covener <covener@...che.org>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (jvoisin <julien.voisin@...tri.org>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Mathias Krause <minipli@...ecurity.net>)

July 2 (2 messages)

Re: Announce: OpenSSH 9.8 released (Dominique Martinet <asmadeus@...ewreck.org>)
[OSSA-2024-001] OpenStack Cinder, Glance, Nova: Arbitrary file access through custom QCOW2 external data (CVE-2024-32498) (Jeremy Stanley <fungi@...goth.org>)

July 3 (11 messages)

Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Jacob Bachmeyer <jcb62281@...il.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Jeffrey Walton <noloader@...il.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Solar Designer <solar@...nwall.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
Re: Announce: OpenSSH 9.8 released (Christian Fischer <christian.fischer@...enbone.net>)
Re: Ghostscript 10.03.1 (2024-05-02) fixed 5 CVEs including CVE-2024-33871 arbitrary code execution (Thomas Rinsma <thomas@...ean.io>)
CVE-2024-39884: Apache HTTP Server: source code disclosure with handlers configured via AddType (Eric Covener <covener@...che.org>)
CVE-2024-39844: ZNC modtcl RCE (Martin Weinelt <martin@...uxlounge.net>)
CVE-2023-52168, CVE-2023-52169: buffer overflow, over-read vulnerabilities in the 7-Zip archiver (Maxim Suhanov <dfirblog@...il.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Yves-Alexis Perez <corsac@...ian.org>)

July 4 (2 messages)

Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Qualys Security Advisory <qsa@...lys.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Jacob Bachmeyer <jcb62281@...il.com>)

July 5 (1 message)

[ANNOUNCE] Apache CloudStack LTS Security Releases 4.18.2.1 and 4.19.0.2 (Abhishek Kumar <shwstppr@...che.org>)

July 8 (8 messages)

CVE-2024-37389: Apache NiFi: Improper Neutralization of Input in Parameter Context Description (David Handermann <exceptionfactory@...che.org>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Solar Designer <solar@...nwall.com>)
ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Will Dormann <will.dormann@...lygence.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Florian Weimer <fweimer@...hat.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Will Dormann <will.dormann@...lygence.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Simon McVittie <smcv@...ian.org>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Will Dormann <will.dormann@...lygence.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch ("David A. Wheeler" <dwheeler@...eeler.com>)

July 9 (5 messages)

Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Florian Weimer <fweimer@...hat.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Damien Miller <djm@...drot.org>)
Django CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, and CVE-2024-39614 (Natalia Bidart <nataliabidart@...il.com>)
CVE-2024-3596: RADIUS/UDP vulnerable to improved MD5 collision attack (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Solar Designer <solar@...nwall.com>)

July 10 (8 messages)

Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Nick Tait <ntait@...hat.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Pete Allor <pallor@...hat.com>)
linux-distros application for CentOS Project's Hyperscale SIG (Michel Lind <michel@...hel-slm.name>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Yves-Alexis Perez <corsac@...ian.org>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Mark Esler <mark.esler@...onical.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Will Dormann <will.dormann@...lygence.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Steffen Nurpmeso <steffen@...oden.eu>)

July 11 (7 messages)

Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Michel Lind <michel@...hel-slm.name>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Neil Hanlon <neil@...ug.pw>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Yves-Alexis Perez <corsac@...sac.net>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch ("David A. Wheeler" <dwheeler@...eeler.com>)
Re: Fwd: Node.js security updates for all active release lines, July 2024 (Solar Designer <solar@...nwall.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Yves-Alexis Perez <corsac@...ian.org>)

July 12 (3 messages)

backtrace_symbols() misuse by Ceph and its supposedly-safe use (Alexander Patrakov <patrakov@...il.com>)
CVE-2024-36522: Apache Wicket: Remote code execution via XSLT injection (Martin Tzvetanov Grigorov <mgrigorov@...che.org>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Steffen Nurpmeso <steffen@...oden.eu>)

July 13 (7 messages)

Re: backtrace_symbols() misuse by Ceph and its supposedly-safe use (Jacob Bachmeyer <jcb62281@...il.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Jacob Bachmeyer <jcb62281@...il.com>)
Re: backtrace_symbols() misuse by Ceph and its supposedly-safe use (Simon McVittie <smcv@...ian.org>)
CVE-2023-41916: Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that a… (Heping Wang <peacewong@...che.org>)
CVE-2023-49566: Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability (Heping Wang <peacewong@...che.org>)
CVE-2023-46801: Apache Linkis DataSource: Remote code execution vulnerability in apache Linkis 1.4.0 (Heping Wang <peacewong@...che.org>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Steffen Nurpmeso <steffen@...oden.eu>)

July 15 (4 messages)

Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Jacob Bachmeyer <jcb62281@...il.com>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Jonathan Wright <jonathan@...alinux.org>)
CVE-2023-52290: Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability (Huajie Wang <benjobs@...che.org>)

July 16 (11 messages)

Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Steffen Nurpmeso <steffen@...oden.eu>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Steffen Nurpmeso <steffen@...oden.eu>)
Xen Security Advisory 458 v2 (CVE-2024-31143) - double unlock in x86 guest IRQ handling (Xen.org security team <security@....org>)
Xen Security Advisory 459 v2 (CVE-2024-31144) - Xapi: Metadata injection attack against backup/restore functionality (Xen.org security team <security@....org>)
CVE-2024-39887: Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2024-39863: Apache Airflow: Potential XSS Vulnerability (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2024-39877: Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler (Ephraim Anierobi <ephraimanierobi@...che.org>)
Landlock news #4 (Mickaël Salaün <mic@...ikod.net>)
CVE-2024-30471: Apache StreamPipes: Potential creation of multiple identical accounts (Dominik Riemer <riemer@...che.org>)
CVE-2024-31411: Apache StreamPipes: Potential remote code execution (RCE) via file upload (Dominik Riemer <riemer@...che.org>)
CVE-2024-31979: Apache StreamPipes: Possibility of SSRF in pipeline element installation process (Dominik Riemer <riemer@...che.org>)

July 17 (7 messages)

CVE-2023-52291: Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution (Huajie Wang <benjobs@...che.org>)
CVE-2024-29737: Apache StreamPark (incubating): maven build params could trigger remote command execution (Huajie Wang <benjobs@...che.org>)
[kubernetes] CVE-2024-5321: Incorrect permissions on Windows containers logs (Craig Ingram <cjingram@...gle.com>)
CVE-2024-29120: Apache StreamPark: Information leakage vulnerability (Huajie Wang <benjobs@...che.org>)
Python Infrastructure Admin Token Leaked Through Docker Hub ("Andrii Polkovnychenko [EXT]" <andreyp@...og.com>)
CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (Eric Covener <covener@...che.org>)
CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (Eric Covener <covener@...che.org>)

July 18 (4 messages)

CVE-2024-29178: Apache StreamPark: FreeMarker SSTI RCE Vulnerability (Huajie Wang <benjobs@...che.org>)
CVE-2024-29736: Apache CXF: SSRF vulnerability via WADL stylesheet parameter (Colm O hEigeartaigh <coheigea@...che.org>)
CVE-2024-32007: Apache CXF Denial of Service vulnerability in JOSE (Colm O hEigeartaigh <coheigea@...che.org>)
CVE-2024-41172: Unrestricted memory consumption in CXF HTTP clients (Colm O hEigeartaigh <coheigea@...che.org>)

July 19 (3 messages)

[ANNOUNCE] Apache CloudStack CVE-2024-41107: SAML Signature Exclusion (Abhishek Kumar <shwstppr@...che.org>)
CVE-2024-41107: Apache CloudStack: SAML Signature Exclusion (Rohit Yadav <rohit@...che.org>)
Re: Fwd: Node.js security updates for all active release lines, July 2024 (Yogesh Mittal <ymittal@...hat.com>)

July 22 (5 messages)

CVE-2024-23321: Apache RocketMQ: Unauthorized Exposure of Sensitive Data (Rongtong Jin <jinrongtong@...che.org>)
CVE-2024-34457: Apache StreamPark IDOR Vulnerability (Huajie Wang <benjobs@...che.org>)
CVE-2024-38503: Apache Syncope: HTML tags can be injected into Console or Enduser text fields (Francesco Chicchiriccò <ilgrosso@...che.org>)
CVE-2024-29070: Apache StreamPark: session not invalidated after logout (Huajie Wang <benjobs@...che.org>)
GNU C Library version 2.40 released with 5 CVE fixes (Alan Coopersmith <alan.coopersmith@...cle.com>)

July 23 (6 messages)

ISC has disclosed four vulnerabilities in BIND 9 (CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076) (Aram Sargsyan <aram@....org>)
[OSSA-2024-002] OpenStack Nova: Incomplete file access fix and regression for QCOW2 backing files and VMDK flat descriptors … (Jeremy Stanley <fungi@...goth.org>)
CVE-2024-41178: Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files (Andrew Lamb <alamb@...che.org>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Solar Designer <solar@...nwall.com>)
CVE-2024-39676: Apache Pinot: Unauthorized endpoint exposed sensitive information (Yupeng Fu <yupeng@...che.org>)
Re: linux-distros application for CentOS Project's Hyperscale SIG (Michel Lind <michel@...hel-slm.name>)

July 24 (5 messages)

[SECURITY ADVISORY] curl: CVE-2024-6197: freeing stack buffer in utf8asn1str (Daniel Stenberg <daniel@...x.se>)
[SECURITY ADVISORY] curl: CVE-2024-6874: macidn punycode buffer overread (Daniel Stenberg <daniel@...x.se>)
CVE-2023-48362: Apache Drill: XXE Vulnerability in XML Format Reader (James Turton <dzamo@...che.org>)
inux kernel: virtio-net host dos (John Haxby <john.haxby@...cle.com>)
Re: [SECURITY ADVISORY] curl: CVE-2024-6197: freeing stack buffer in utf8asn1str (Demi Marie Obenour <demi@...isiblethingslab.com>)

July 25 (2 messages)

[ANNOUNCE] Apache Traffic Server is vulnerable to request smuggling and DoS (Masakazu Kitajo <maskit@...che.org>)
CVE-2024-25090: Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in u… ("David M. Johnson" <snoopdave@...che.or…)

July 26 (3 messages)

GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow (Solar Designer <solar@...nwall.com>)
Re: GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow (Alan Coopersmith <alan.coopersmith@...cle.com>)

July 27 (1 message)

Re: linux kernel: virtio-net host dos (Salvatore Bonaccorso <carnil@...ian.org>)

July 28 (3 messages)

Re: GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow (Solar Designer <solar@...nwall.com>)
Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems (Solar Designer <solar@...nwall.com>)
Re: Announce: OpenSSH 9.8 released (Solar Designer <solar@...nwall.com>)

July 29 (3 messages)

Re: GStreamer Security Advisory 2024-0003: Orc compiler stack-based buffer overflow (Florian Weimer <fweimer@...hat.com>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Yves-Alexis Perez <corsac@...ian.org>)
Fwd: [Security-announce] [CVE-2024-3219] Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connect… (Alan Coopersmith <alan.coopersmith@...c…)

July 30 (2 messages)

CVE-2023-48396: Apache SeaTunnel Web: Authentication bypass (Jun Gao <gaojun2048@...che.org>)
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch (Will Dormann <will.dormann@...lygence.com>)

July 31 (2 messages)

[SECURITY ADVISORY] curl: CVE-2024-7264 ASN.1 date parser overread (Daniel Stenberg <daniel@...x.se>)
Re: ISC has disclosed four vulnerabilities in BIND 9 (CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076) (Valtteri Vuorikoski <vuori@...com.org>)

128 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.