oss-security mailing list - 2025/01

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [year] [list]

oss-security mailing list - 2025/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	²	³ 3	⁴	⁵ 2
⁶ 3	⁷ 1	⁸ 3	⁹	¹⁰	¹¹ 1	¹²
¹³ 1	¹⁴	¹⁵	¹⁶	¹⁷	¹⁸	¹⁹
²⁰	²¹	²²	²³	²⁴	²⁵	²⁶
²⁷	²⁸	²⁹	³⁰	³¹

Messages by day:

January 3 (3 messages)

Another fdroidserver AllowedAPKSigningKeys certificate pinning bypass (Fay Stegerman <flx@...usk.net>)
iTerm2 < 3.5.11 logs input/ouput to /tmp/framer.txt on remote host (Jan Schaumann <jschauma@...meister.org>)
Re: GStreamer 1.24.10 stable security bug-fix release (Alan Coopersmith <alan.coopersmith@...cle.com>)

January 5 (2 messages)

Re: Xen Security Advisory 466 v3 (CVE-2024-53241) - Xen hypercall page unsafe against speculative attacks (Jürgen Groß <jgross@...e.com>)
Re: Xen Security Advisory 466 v3 (CVE-2024-53241) - Xen hypercall page unsafe against speculative attacks (Solar Designer <solar@...nwall.com>)

January 6 (3 messages)

Linux: general protection fault in __vmx_vcpu_run with nested virtualization (Linfeng Sun <slf@....edu.cn>)
Re: Linux: general protection fault in __vmx_vcpu_run with nested virtualization (Greg KH <greg@...ah.com>)
Re: Linux: general protection fault in __vmx_vcpu_run with nested virtualization (Demi Marie Obenour <demi@...isiblethingslab.com>)

January 7 (1 message)

Re: Linux: general protection fault in __vmx_vcpu_run with nested virtualization (Solar Designer <solar@...nwall.com>)

January 8 (3 messages)

CVE-2024-54676: Apache OpenMeetings: Deserialisation of untrusted data in cluster mode (Maxim Solodovnik <solomax@...che.org>)
CVE-2024-45033: Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli (Elad Kalif <eladkal@...che.org>)
"/bin/sh: The Biggest Unix Security Loophole" paper from 1984 (Alan Coopersmith <alan.coopersmith@...cle.com>)

January 11 (1 message)

[vim-security] heap-buffer-overflow in Vim < 9.1.1003 (Christian Brabandt <cb@...bit.org>)

January 13 (1 message)

CVE-2025-22828: Apache CloudStack: Unauthorised access to annotations (Nux <nux@...che.org>)

14 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.