oss-security mailing list - 2025/06

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [year] [list]

oss-security mailing list - 2025/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 7	³ 11	⁴ 6	⁵ 5	⁶ 12	⁷ 5	⁸
⁹	¹⁰	¹¹	¹²	¹³	¹⁴	¹⁵
¹⁶	¹⁷	¹⁸	¹⁹	²⁰	²¹	²²
²³	²⁴	²⁵	²⁶	²⁷	²⁸	²⁹
³⁰

Messages by day:

June 2 (7 messages)

Roundcube webmail: Post-Auth RCE via PHP Object Deserialization reported by firs0v (Hanno Böck <hanno@...eck.de>)
Re: CVE-2025-40909: Perl threads have a working directory race condition where file operations may target unintended paths (Florian Weimer <fweimer@...hat.com>)
Re: Roundcube webmail: Post-Auth RCE via PHP Object Deserialization reported by firs0v (Anton Luka Šijanec <anton@...anec.eu>)
Re: Local information disclosure in apport and systemd-coredump (Jelle van der Waa <jelle@...aa.nl>)
Re: CVE-2025-40909: Perl threads have a working directory race condition where file operations may target unintended paths (Florian Weimer <fweimer@...hat.com>)
Re: CVE-2025-40909: Perl threads have a working directory race condition where file operations may target unintended paths (Leon Timmermans <fawaka@...il.com>)
Re: Re: CVE-2025-40909: Perl threads have a working directory race condition where file operations may target unintended p… (Vincent Lefevre <vincent@...c17.net>)

June 3 (11 messages)

Re: Re: CVE-2025-40909: Perl threads have a working directory race condition where file operations may target unintended p… (Vincent Lefevre <vincent@...c17.net>)
Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Demi Marie Obenour <demiobenour@...il.com>)
Re: Local information disclosure in apport and systemd-coredump (Solar Designer <solar@...nwall.com>)
Re: Local information disclosure in apport and systemd-coredump (Vegard Nossum <vegard.nossum@...cle.com>)
Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Attila Szasz <szasza.contact@...il.com>)
CVE-2025-46548: Apache Pekko Management, Apache Pekko Management, Apache Pekko Management: management API basic authenticat… (Arnout Engelen <engelen@...che.org>)
Samba 4.21.6 fixes CVE-2025-0620 in SMB session re-authentication (Alan Coopersmith <alan.coopersmith@...cle.com>)
CVE-2024-47081: Netrc credential leak in PSF requests library (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: Local information disclosure in apport and systemd-coredump (Marco Benatto <mbenatto@...hat.com>)
Re: CVE-2024-47081: Netrc credential leak in PSF requests library (Dave Walker <email@...iey.com>)

June 4 (6 messages)

Re: CVE-2024-47081: Netrc credential leak in PSF requests library (Demi Marie Obenour <demiobenour@...il.com>)
[SECURITY AVISORY] curl: CVE-2025-5399: WebSocket endless loop (Daniel Stenberg <daniel@...x.se>)
Re: Local information disclosure in apport and systemd-coredump (David Fernandez Gonzalez <david.fernandez.gonzalez@...cle.com>)
Re: Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Greg KH <gregkh@...uxfoundation.org>)
CVE-2025-48432: Django: Potential log injection via unescaped request path (Natalia Bidart <nataliabidart@...ngoproject.com>)
Re: CVE-2024-47081: Netrc credential leak in PSF requests library (Jakub Wilk <jwilk@...lk.net>)

June 5 (5 messages)

Re: Local information disclosure in apport and systemd-coredump (Solar Designer <solar@...nwall.com>)
Re: Local information disclosure in apport and systemd-coredump (Solar Designer <solar@...nwall.com>)
Re: Local information disclosure in apport and systemd-coredump (Solar Designer <solar@...nwall.com>)
CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters … (Timothy Legge <timlegge@...nsec.org>)
Go 1.24.4 and Go 1.23.10 fix CVE-2025-4673, CVE-2025-0913, CVE-2025-22874 (Alan Coopersmith <alan.coopersmith@...cle.com>)

June 6 (12 messages)

Re: CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a cra… (Sam James <sam@...too.org>)
Re: Local information disclosure in apport and systemd-coredump (Solar Designer <solar@...nwall.com>)
Re: CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encount… (Timothy Legge <timlegge@...nsec.org>)
Re: Local information disclosure in apport and systemd-coredump (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Solar Designer <solar@...nwall.com>)
Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Solar Designer <solar@...nwall.com>)
Re: Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Eli Schwartz <eschwartz@...too.org>)
Vulnerability in Jenkins Gatling Plugin (Daniel Beck <ml@...kweb.net>)
Re: Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Jacob Bachmeyer <jcb62281@...il.com>)
Re: Local information disclosure in apport and systemd-coredump (Vegard Nossum <vegard.nossum@...cle.com>)
Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Attila Szasz <szasza.contact@...il.com>)
Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros (Attila Szasz <szasza.contact@...il.com>)

June 7 (5 messages)

Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros (Greg KH <greg@...ah.com>)
Re: Linux kernel: HFS+ filesystem implementation issues, exposure in distros (Simon McVittie <smcv@...ian.org>)
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros (Sasha Levin <sashal@...nel.org>)
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros (Bastian Blank <bblank@...nkmo.de>)
Re: Re: Re: Linux kernel: HFS+ filesystem implementation, issues, exposure in distros (Sasha Levin <sashal@...nel.org>)

46 messages

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.