oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2023/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 2	³ 2	⁴ 1	⁵ 3	⁶ 2	⁷ 1	⁸
⁹	¹⁰ 4	¹¹ 1	¹² 3	¹³ 4	¹⁴	¹⁵
¹⁶ 8	¹⁷ 7	¹⁸ 4	¹⁹ 1	²⁰ 1	²¹ 1	²²
²³ 1	²⁴ 3	²⁵ 5	²⁶	²⁷ 1	²⁸	²⁹
³⁰ 6	³¹ 8

Messages by day:

January 2 (2 messages)

Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption (Arnout Engelen <engelen@...che.org>)
Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption (Salvatore Bonaccorso <carnil@...ian.org>)

January 3 (2 messages)

CVE-2022-45143 Apache Tomcat - JsonErrorReportValve injection (Mark Thomas <markt@...che.org>)
Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption (John Helmert III <ajak@...too.org>)

January 4 (1 message)

Linux kernel: Unauthenticated remote DOS in ksmbd NTLMv2 authentication (Hrvoje Mišetić <misetichrvoje@...il.com>)

January 5 (3 messages)

Code execution through MIME-type association of Mono interpreter and security expectations of MIME type associations (Gabriel Corona <gabriel.corona@...e.fr>)
Re: Code execution through MIME-type association of Mono interpreter and security expectations of MIME type association… (Demi Marie Obenour <demi@...isiblething…)
Re: Code execution through MIME-type association of Mono interpreter and security expectations of MIME type association… (Gabriel Corona <gabriel.corona@...e.fr>)

January 6 (2 messages)

CVE-2022-45787: Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider (Benoit Tellier <btellier@...che.org>)
CVE-2022-45935: Apache James server: Temporary File Information Disclosure (Benoit Tellier <btellier@...che.org>)

January 7 (1 message)

CVE-2022-46769: Apache Sling App CMS: XSS in CMS Site Group Detail (Dan Klco <dklco@...che.org>)

January 10 (4 messages)

Type Confusion in Linux Kernel (Kyle Zeng <zengyhkyle@...il.com>)
Re: Type Confusion in Linux Kernel (John Helmert III <ajak@...too.org>)
CVE-2022-46176: Cargo does not check SSH host keys ("Pietro Albini" <pietro@...troalbini.org>)
Re: Type Confusion in Linux Kernel (Kyle Zeng <zengyhkyle@...il.com>)

January 11 (1 message)

Re: Linux kernel: Unauthenticated remote DOS in ksmbd NTLMv2 authentication (Will <willsroot@...tonmail.com>)

January 12 (3 messages)

CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe (Tal Lossos <tallossos@...il.com>)
Re: CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe (Greg KH <greg@...ah.com>)
Re: CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe (John Helmert III <ajak@...too.org>)

January 13 (4 messages)

Re: CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe (Greg KH <greg@...ah.com>)
CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup (Davide Ornaghi <d.ornaghi97@...il.com>)
CVE-2023-22602: Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specia… (Brian Demers <bdemers@...che.org>)
Re: CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup (Solar Designer <solar@...nwall.com>)

January 16 (8 messages)

CVE-2022-43717: Apache Superset: Cross-Site Scripting on dashboards (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-43718: Apache Superset: Cross-Site Scripting vulnerability on upload forms (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-43719: Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-43720: Apache Superset: Improper rendering of user input (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-43721: Apache Superset: Open Redirect Vulnerability (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-45438: Apache Superset: Dashboard metadata information leak (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-41703: Apache Superset: SQL injection vulnerability in adhoc clauses (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2022-47630 Trusted Firmware-A - Out-of-bounds read in X.509 parser (Sandrine Bailleux <sandrine.bailleux@....com>)

January 17 (7 messages)

[OSSA-2023-001] Swift: Arbitrary file access through custom S3 XML entities (CVE-2022-47950) (Jeremy Stanley <fungi@...goth.org>)
Fwd: X.Org Security Advisory: Issues handling XPM files in libXpm prior to 3.5.15 (Alan Coopersmith <alan.coopersmith@...cle.com>)
Linux Kernel: hid: type confusions on hid report_list entry (Pietro Borrello <borrello@...g.uniroma1.it>)
Git 2.39.1 and friends (Junio C Hamano <junio@...ox.com>)
CVE-2006-20001: Apache HTTP Server: mod_dav out of bounds read, or write of zero byte (Eric Covener <covener@...che.org>)
CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp Possible request smuggling (Eric Covener <covener@...che.org>)
CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting (Eric Covener <covener@...che.org>)

January 18 (4 messages)

Re: CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe (Salvatore Bonaccorso <carnil@...ian.org>)
null pointer dereference in Linux kernel (Kyle Zeng <zengyhkyle@...il.com>)
Linux Kernel: hid: NULL pointer dereference in hid_betopff_play() (Pietro Borrello <borrello@...g.uniroma1.it>)
Re: null pointer dereference in Linux kernel (Rohit Keshri <rkeshri@...hat.com>)

January 19 (1 message)

CVE-2023-22809: Sudoedit can edit arbitrary files (Matthieu Barjole <matthieu.barjole@...acktiv.com>)

January 20 (1 message)

Security Advisory 2023-01 for PowerDNS Recursor 4.8.0 (CVE-2023-22617) (Otto Moerbeek <otto.moerbeek@...erdns.com>)

January 21 (1 message)

CVE-2023-22884: Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow (Jarek Potiuk <potiuk@...che.org>)

January 23 (1 message)

Linux Kernel: sctp: KASLR leak in inet_diag_msg_sctpasoc_fill() (Pietro Borrello <borrello@...g.uniroma1.it>)

January 24 (3 messages)

Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
[OSSA-2023-002] Cinder, Glance, Nova: Arbitrary file access through custom VMDK flat descriptor (CVE-2022-47951) (Jeremy Stanley <fungi@...goth.org>)
Re: Directory traversal in sharutils/uudecode and python uu module (Alan Coopersmith <alan.coopersmith@...cle.com>)

January 25 (5 messages)

Xen Security Advisory 425 v1 (CVE-2022-42330) - Guests can cause Xenstore crash via soft reset (Xen.org security team <security@....org>)
ISC has disclosed three vulnerabilities in BIND 9 (CVE-2022-3094, CVE-2022-3736, CVE-2022-3924) (Michał Kępień <michal@....org>)
Data operand dependent timing on Intel and Arm CPUs (Eric Biggers <ebiggers@...nel.org>)
Re: Data operand dependent timing on Intel and Arm CPUs (Solar Designer <solar@...nwall.com>)
Linux Kernel: hid: Use-After-Free in bigben_set_led() (Pietro Borrello <borrello@...g.uniroma1.it>)

January 27 (1 message)

Re: Data operand dependent timing on Intel and Arm CPUs (Eric Biggers <ebiggers@...nel.org>)

January 30 (6 messages)

CVE-2023-24829: Apache IoTDB: apache/iotdb-web-workbench: forge the JWTToken to access workbench (Jialin Qiao <qiaojialin@...che.org>)
CVE-2023-24830: Apache IoTDB: apache/iotdb-web-workbench: create a user without authorization (Jialin Qiao <qiaojialin@...che.org>)
Re: Data operand dependent timing on Intel and Arm CPUs (Mark Hack <markhack@...khack.com>)
Re: Data operand dependent timing on Intel and Arm CPUs (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: Data operand dependent timing on Intel and Arm CPUs (John Runyon <me@....im>)
Re: Data operand dependent timing on Intel and Arm CPUs (Mark Hack <markhack@...khack.com>)

January 31 (8 messages)

CVE-2022-44644: Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability (Heping Wang <peacewong@...che.org>)
CVE-2022-44645: Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability (Heping Wang <peacewong@...che.org>)
CVE-2022-24963: Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions (Eric Covener <covener@...che.org>)
CVE-2022-25147: Apache Portable Runtime (APR): out-of-bounds writes in the apr_base64 family of functions (Eric Covener <covener@...che.org>)
CVE-2022-28331: Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function (Eric Covener <covener@...che.org>)
pesign: Local privilege escalation on pesign systemd service (Marco Benatto <mbenatto@...hat.com>)
Re: CVE-2022-24963: Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: CVE-2022-24963: Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions (Zube <Zube@...t.colostate.edu>)

69 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.