oss-security mailing list - 2024/10

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [year] [list]

oss-security mailing list - 2024/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹	² 1	³ 6	⁴ 5	⁵	⁶
⁷	⁸	⁹	¹⁰	¹¹	¹²	¹³
¹⁴	¹⁵	¹⁶	¹⁷	¹⁸	¹⁹	²⁰
²¹	²²	²³	²⁴	²⁵	²⁶	²⁷
²⁸	²⁹	³⁰	³¹

Messages by day:

October 2 (1 message)

Multiple vulnerabilities in Jenkins and Jenkins plugins (Daniel Beck <ml@...kweb.net>)

October 3 (6 messages)

CVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK) (Martin Tzvetanov Grigorov <mgrigorov@...che.org>)
CVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader ("Gary D. Gregory" <ggregory@...che.org>)
PowerDNS Security Advisory 2024-04 (Otto Moerbeek <otto.moerbeek@...erdns.com>)
cups-browsed vulnerable to DDoS amplification attack (Larry Cashdollar <larry0@...com>)
Re: cups-browsed vulnerable to DDoS amplification attack ("Peter van Dijk" <peter@...ts.nl>)
Re: cups-browsed vulnerable to DDoS amplification attack (Larry Cashdollar <larry0@...com>)

October 4 (5 messages)

Re[2]: cups-browsed vulnerable to DDoS amplification attack (larry0@...com)
CVE-2024-47191: Local root exploit in the PAM module pam_oath.so (Johannes Segitz <jsegitz@...e.de>)
CVE-2024-42415: Integer Overflow in GNOME libgsf (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: CVE-2024-42415: Integer Overflow in GNOME libgsf (Alan Coopersmith <alan.coopersmith@...cle.com>)
CVE-2024-8508 in Unbound DNS server prior to 1.21.1 (Alan Coopersmith <alan.coopersmith@...cle.com>)

12 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.