distros mailing list

Follow @Openwall on Twitter for new release announcements and other news

distros mailing list

	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2023	30	19	20	27	28	8	8		14	33	13	7
2022	35	14	5	42	40	13	9	12	3	23	5	8
2021	22	24	23	25	42	19	30	26	16	28	11	11
2020	2	11	5	30	67	20	16	33	24	13	22	12
2019	14	2	24	25	14	56	27	12	6	11	45	24
2018	37	51	23	30	14	24	19	46	3	33	9	5
2017	16	16	11	58	225	176	33	9	60	26	36	9
2016	55	20	20	13	32	3	10	8	35	34	7	19
2015	53	29	40	51	17	24	7	5	5	3	22	26
2014	27	26	31	43	24	61	18	18	61	31	46	67
2013	24	41	11	8	22	19	32	25	36	12	35	18
2012	9	46	82	4	30	22	9	35	23	23	59	8
2011												2

Recent messages:

2023/12/31 #1: [vs-plain] list migrated (Solar Designer <solar@...nwall.com>)
2023/12/18 #2: [vs-plain] Re: ... (Solar Designer <solar@...nwall.com>)
2023/12/18 #1: [vs] Re: Re: ... (Marcus Meissner <meissner@...e.de>)
2023/12/13 #1: [vs-plain] Re: Embargoed X.Org Security Advisory: Issues in X server and Xwayland (Peter Hutterer <peter.hutterer@...hat.com>)
2023/12/11 #2: [vs-plain] Re: ... (Vegard Nossum <vegard.nossum@...cle.com>)
2023/12/11 #1: [vs] ... (Fabian Bäumer <fabian.baeumer@....de>)
2023/12/06 #1: [vs-plain] Embargoed X.Org Security Advisory: Issues in X server and Xwayland (Peter Hutterer <peter.hutterer@...hat.com>)
2023/11/29 #1: Re: [vs-plain] : curl pre-notification: CVE-2023-46218 (1/2) (Vegard Nossum <vegard.nossum@...cle.com>)
2023/11/28 #2: [vs-plain] : curl pre-notification: CVE-2023-46219 (2/2) (Daniel Stenberg <daniel@...x.se>)
2023/11/28 #1: [vs-plain] : curl pre-notification: CVE-2023-46218 (1/2) (Daniel Stenberg <daniel@...x.se>)
2023/11/14 #4: [vs] ... (Antonio Gomez Iglesias <antonio.gomez.iglesias@...ux.intel.com>)
2023/11/14 #3: Re: [vs] ... (Solar Designer <solar@...nwall.com>)
2023/11/14 #2: [vs-plain] RE: ... (Anthony Liguori <aliguori@...zon.com>)
2023/11/14 #1: [vs] Re: ... (Solar Designer <solar@...nwall.com>)
2023/11/13 #3: [vs] ... (Antonio Gomez Iglesias <antonio.gomez.iglesias@...ux.intel.com>)
2023/11/13 #2: Re: [vs] ... (Solar Designer <solar@...nwall.com>)
2023/11/13 #1: [vs] ... (Antonio Gomez Iglesias <antonio.gomez.iglesias@...ux.intel.com>)
2023/11/10 #3: Re: [vs] ... (Solar Designer <solar@...nwall.com>)
2023/11/10 #2: [vs-plain] Re: ... (Roxana Bradescu <roxabee@...omium.org>)
2023/11/10 #1: [vs] ... (Antonio Gomez Iglesias <antonio.gomez.iglesias@...ux.intel.com>)
2023/10/27 #5: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (VMware Security Response Center <security@...are.com>)
2023/10/27 #4: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (Solar Designer <solar@...nwall.com>)
2023/10/27 #3: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (VMware Security Response Center <security@...are.com>)
2023/10/27 #2: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (Solar Designer <solar@...nwall.com>)
2023/10/27 #1: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (Alexander Bergmann <abergmann@...e.com>)
2023/10/25 #2: [vs-plain] Re: Embargoed X.Org Security Advisory: Multiple issues in X.Org X server (Peter Hutterer <peter.hutterer@...hat.com>)
2023/10/25 #1: Re: [vs-plain] Bluetooth Low Energy stuck in unresponsive state after repeated out of order transmission of packets (Roxana Bradescu <roxabee@...omium.org>)
2023/10/24 #4: Re: [vs-plain] Bluetooth Low Energy stuck in unresponsive state after repeated out of order transmission of packets (Roxana Bradescu <roxabee@...omium.org>)
2023/10/24 #3: Re: Fwd: [vs-plain] Bluetooth Low Energy stuck in unresponsive state after repeated out of order transmission of packets (Solar Designer <solar@...nwall.com>)
2023/10/24 #2: Re: Fwd: [vs-plain] Bluetooth Low Energy stuck in unresponsive state after repeated out of order transmission of packets (Solar Designer <solar@...nwall.com>)
2023/10/24 #1: [vs-plain] Re: Embargoed X.Org Security Advisory: Multiple issues in X.Org X server (Peter Hutterer <peter.hutterer@...hat.com>)
2023/10/23 #2: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (Marc Deslauriers <marc.deslauriers@...onical.com>)
2023/10/23 #1: Re: [vs-plain] Embargoed X.Org Security Advisory: Multiple issues in X.Org X server (Peter Hutterer <peter.hutterer@...hat.com>)
2023/10/20 #2: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (VMware Security Response Center <security@...are.com>)
2023/10/20 #1: Fwd: [vs-plain] Bluetooth Low Energy stuck in unresponsive state after repeated out of order transmission of packets (Roxana Bradescu <roxabee@...omium.org>)
2023/10/19 #4: Re: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (Solar Designer <solar@...nwall.com>)
2023/10/19 #3: [vs-plain] Re: file descriptor hijack in VMware Tools CVE-2023-34059 [Corrected] (VMware Security Response Center <security@...are.com>)
2023/10/19 #2: [vs-plain] file descriptor hijack in VMware Tools CVE-2023-34059 (VMware Security Response Center <security@...are.com>)
2023/10/19 #1: [vs-plain] SAML Bypass in VMware Tools CVE-2023-34058 (VMware Security Response Center <security@...are.com>)
2023/10/17 #2: Re: [vs-plain] Embargoed X.Org Security Advisory: Multiple issues in X.Org X server (Vegard Nossum <vegard.nossum@...cle.com>)
2023/10/17 #1: [vs-plain] Embargoed X.Org Security Advisory: Multiple issues in X.Org X server (Peter Hutterer <peter.hutterer@...hat.com>)
2023/10/14 #3: Re: [vs-plain] : the CVE-2034-38545 patched leaked (Vegard Nossum <vegard.nossum@...cle.com>)
2023/10/14 #2: Re: [vs-plain] : the CVE-2034-38545 patched leaked (Daniel Stenberg <daniel@...x.se>)
2023/10/14 #1: Re: [vs-plain] : the CVE-2034-38545 patched leaked (Vegard Nossum <vegard.nossum@...cle.com>)
2023/10/12 #1: Re: [vs-plain] Embargoed OpenSSL security issue (Roxana Bradescu <roxabee@...omium.org>)
2023/10/11 #1: [vs-plain] : the CVE-2034-38545 patched leaked (Daniel Stenberg <daniel@...x.se>)
2023/10/10 #1: [vs-plain] Embargoed OpenSSL security issue (Tomas Mraz <tomas@...nssl.org>)
2023/10/03 #6: [vs-plain] Re: Embargoed X.Org Security Advisory: Multiple issues in libX11 & libXpm (Alan Coopersmith <alan.coopersmith@...cle.com>)
2023/10/03 #5: Re: [vs-plain] : CVE-2023-38545 curl (1/2) (Vegard Nossum <vegard.nossum@...cle.com>)
2023/10/03 #4: Re: [vs-plain] Re: Embargoed X.Org Security Advisory: Multiple issues in libX11 & libXpm (Marc Deslauriers <marc.deslauriers@...onical.com>)
2023/10/03 #3: [vs-plain] Re: Embargoed X.Org Security Advisory: Multiple issues in libX11 & libXpm (Julien Cristau <jcristau@...ian.org>)
2023/10/03 #2: [vs-plain] : CVE-2023-38546 curl cookie injection with none file (2/2) (Daniel Stenberg <daniel@...x.se>)
2023/10/03 #1: [vs-plain] : CVE-2023-38545 curl SOCKS5 heap buffer overflow (1/2) (Daniel Stenberg <daniel@...x.se>)
2023/09/30 #3: [vs-plain] Re: Embargoed X.Org Security Advisory: Multiple issues in libX11 & libXpm (Alan Coopersmith <alan.coopersmith@...cle.com>)
2023/09/30 #2: Re: [vs] CVE-2023-43641 (GHSL-2023-197) (Solar Designer <solar@...nwall.com>)
2023/09/30 #1: Re: [vs] CVE-2023-43641 (GHSL-2023-197) (Kevin Backhouse <kevinbackhouse@...hub.com>)
2023/09/26 #5: [vs-plain] Embargoed X.Org Security Advisory: Multiple issues in libX11 & libXpm (Alan Coopersmith <alan.coopersmith@...cle.com>)
2023/09/26 #4: [vs-plain] Re: CVE-2023-43641 (GHSL-2023-197) (Solar Designer <solar@...nwall.com>)
2023/09/26 #3: [vs] repost of CVE-2023-43641 (GHSL-2023-197) (Solar Designer <solar@...nwall.com>)
2023/09/26 #2: Re: [vs] CVE-2023-43641 (GHSL-2023-197) (John Haxby <john.haxby@...cle.com>)
2023/09/26 #1: [vs] CVE-2023-43641 (GHSL-2023-197) (Kevin Backhouse <kevinbackhouse@...hub.com>)
2023/09/19 #2: Re: [vs] ... (Alexander Bergmann <abergmann@...e.com>)
2023/09/19 #1: [vs] ... (Michał Kępień <michal@....org>)
2023/09/12 #2: Re: [vs-plain] EMBARGOED CVE-2023-4504 cups, libppd (Vegard Nossum <vegard.nossum@...cle.com>)
2023/09/12 #1: [vs-plain] EMBARGOED CVE-2023-4504 cups, libppd: Postscript parsing heap-based buffer overflow (Zdenek Dohnal <zdohnal@...hat.com>)
2023/09/06 #2: [vs] Re: : curl: CVE-2023-38039: HTTP headers eat all memory (Vegard Nossum <vegard.nossum@...cle.com>)
2023/09/06 #1: [vs-plain] : curl: CVE-2023-38039: HTTP headers eat all memory (Daniel Stenberg <daniel@...x.se>)
2023/07/31 #2: Re: [vs-plain] CVE-2023-38497 (Vegard Nossum <vegard.nossum@...cle.com>)
2023/07/31 #1: [vs-plain] CVE-2023-38497: Cargo does not respect the umask when extracting dependencies ("Pietro Albini" <pietro@...troalbini.org>)
2023/07/22 #4: Re: [vs-plain] CVE-2023-20593: A use-after-free in AMD Zen2 Processors (Tavis Ormandy <taviso@...il.com>)
2023/07/22 #3: Re: [vs-plain] CVE-2023-20593: A use-after-free in AMD Zen2 Processors (Solar Designer <solar@...nwall.com>)
2023/07/22 #2: [vs-plain] CVE-2023-20593: A use-after-free in AMD Zen2 Processors (Tavis Ormandy <taviso@...il.com>)
2023/07/22 #1: [vs-plain] CVE-2023-20593: A use-after-free in AMD Zen2 Processors (Tavis Ormandy <taviso@...il.com>)
2023/07/15 #1: [vs] Re: : curl: CVE-2023-32001 (Vegard Nossum <vegard.nossum@...cle.com>)
2023/07/12 #1: [vs-plain] : curl: CVE-2023-32001: fopen race condition (Daniel Stenberg <daniel@...x.se>)
2023/06/20 #2: Re: [vs-plain] ... (Robert Frohl <rfrohl@...e.com>)
2023/06/20 #1: [vs] ... (Michał Kępień <michal@....org>)
2023/06/14 #1: Re: [vs-plain] EMBARGOED CVE-2023-34241 (Vegard Nossum <vegard.nossum@...cle.com>)
2023/06/13 #2: [vs-plain] EMBARGOED CVE-2023-34241 use-after-free in cupsdAcceptClient() (Zdenek Dohnal <zdohnal@...hat.com>)
2023/06/13 #1: [vs-plain] Re: Embargoed X.Org Security Advisory: Buffer overflows in InitExt.c in libX11 prior to 1.8.6 [CVE-2023-3138… (Alan Coopersmith <alan.coopersmith@...c…)
2023/06/09 #1: [vs-plain] Embargoed X.Org Security Advisory: Buffer overflows in InitExt.c in libX11 prior to 1.8.6 [CVE-2023-3138] (Alan Coopersmith <alan.coopersmith@...cle…)
2023/06/07 #1: Re: [vs-plain] CVE-2023-34095: Buffer overflows via scanf (Seth Arnold <seth.arnold@...onical.com>)
2023/06/06 #1: [vs-plain] CVE-2023-34095: Buffer overflows via scanf (Till Kamppeter <till.kamppeter@...il.com>)
2023/05/25 #2: [vs-plain] Re: EMBARGOED CVE-2023-32324 heap buffer overflow in cupsd (Zdenek Dohnal <zdohnal@...hat.com>)
2023/05/25 #1: [vs-plain] Re: EMBARGOED CVE-2023-32324 heap buffer overflow in cupsd (Zdenek Dohnal <zdohnal@...hat.com>)
2023/05/23 #2: Re: [vs-plain] EMBARGOED CVE-2023-32324 heap buffer overflow in cupsd (Vegard Nossum <vegard.nossum@...cle.com>)
2023/05/23 #1: [vs-plain] EMBARGOED CVE-2023-32324 heap buffer overflow in cupsd (Zdenek Dohnal <zdohnal@...hat.com>)
2023/05/20 #4: Re: [vs-plain] c-ares security vulns (Solar Designer <solar@...nwall.com>)
2023/05/20 #3: Re: [vs-plain] c-ares security vulns (Brad House <brad@...d-house.com>)
2023/05/20 #2: Re: [vs-plain] c-ares security vulns (Solar Designer <solar@...nwall.com>)
2023/05/20 #1: [vs-plain] c-ares security vulns (Brad House <brad@...d-house.com>)
2023/05/16 #1: [vs-plain] Embargoed OpenSSL security issue (Matt Caswell <matt@...nssl.org>)
2023/05/15 #2: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Till Kamppeter <till.kamppeter@...il.com>)
2023/05/15 #1: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Gabriele Sonnu <gsonnu@...e.de>)
2023/05/12 #2: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Till Kamppeter <till.kamppeter@...il.com>)
2023/05/12 #1: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Solar Designer <solar@...nwall.com>)
2023/05/11 #3: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Till Kamppeter <till.kamppeter@...il.com>)
2023/05/11 #2: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Solar Designer <solar@...nwall.com>)
2023/05/11 #1: Re: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Seth Arnold <seth.arnold@...onical.com>)
2023/05/10 #1: [vs-plain] CVE-2023-24805: RCE in cups-filters, beh CUPS backend (Till Kamppeter <till.kamppeter@...il.com>)

3803 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.