oss-security mailing list

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

oss-security mailing list - 2023/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 3	² 2	³	⁴	⁵ 6
⁶ 6	⁷ 2	⁸ 12	⁹ 4	¹⁰ 2	¹¹	¹² 2
¹³	¹⁴ 9	¹⁵ 1	¹⁶ 1	¹⁷ 2	¹⁸ 1	¹⁹ 3
²⁰ 3	²¹	²² 3	²³ 1	²⁴ 2	²⁵ 1	²⁶ 1
²⁷ 5	²⁸ 6	²⁹ 2	³⁰ 6

Messages by day:

November 1 (3 messages)

CVE-2023-5631: XSS vulnerability in Roundcube webmail (Valtteri Vuorikoski <vuori@...com.org>)
Django: CVE-2023-46695: Potential denial of service vulnerability in UsernameField on Windows (Mariusz Felisiak <felisiak.mariusz@...il.com>)
Re: CVE-2023-5631: XSS vulnerability in Roundcube webmail (Kapetanakis Giannis <bilias@....physics.uoc.gr>)

November 2 (2 messages)

Session File Relative Path Traversal in sudo-rs (Alan Coopersmith <alan.coopersmith@...cle.com>)
Bluez, Intel wireless devices: Bluetooth Low Energy stuck in unresponsive state after repeated out of order transmission of … (Solar Designer <solar@...nwall.com>)

November 5 (6 messages)

CVE-2023-1078: Linux: rds_rm_zerocopy_callback() bugs (Solar Designer <solar@...nwall.com>)
Re: Linux Kernel: hid: type confusions on hid report_list entry (Solar Designer <solar@...nwall.com>)
Re: Linux Kernel: hid: NULL pointer dereference in hid_betopff_play() (Solar Designer <solar@...nwall.com>)
Re: Linux Kernel: sctp: KASLR leak in inet_diag_msg_sctpasoc_fill() (Solar Designer <solar@...nwall.com>)
Linux: BPF: issues with copy_from_user_nofault() (Solar Designer <solar@...nwall.com>)
Re: CVE-2022-46176: Cargo does not check SSH host keys (Solar Designer <solar@...nwall.com>)

November 6 (6 messages)

Re: Session File Relative Path Traversal in sudo-rs (Jakub Wilk <jwilk@...lk.net>)
OpenSSL Security Advisory (Richard Levitte <levitte@...nssl.org>)
Re: Session File Relative Path Traversal in sudo-rs ("Todd C. Miller" <Todd.Miller@...o.ws>)
announcing sponsorship; distros list statistics for 2023 (Solar Designer <solar@...nwall.com>)
Re: CVE-2022-46176: Cargo does not check SSH host keys (Pietro Albini <pietro@...troalbini.org>)
CVE-2023-46851: Apache Allura: sensitive information exposure via import (Dave Brondsema <dave@...ndsema.net>)

November 7 (2 messages)

HNS-2023-03 - HN Security Advisory - Multiple vulnerabilities in Zephyr RTOS (Marco Ivaldi <raptor@...eadbeef.info>)
CVE-2023-46819: Apache OFBiz: Execution of Solr plugin queries without authentication (Jacques Le Roux <jleroux@...che.org>)

November 8 (12 messages)

CVE-2023-39913: Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK: Potential untru… (Richard Eckart de Castilho <rec@...che.…)
!CVE: A new platform to track security issues not acknowledged by vendors (!CVE Team <contact@...cve.org>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (Solar Designer <solar@...nwall.com>)
CVE-2023-46857 - Weak SVG asset filtering mechanism in Squidex leads to XSS (Harry Maraziaris <cmaraziaris@...sus-labs.com>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (Vegard Nossum <vegard.nossum@...cle.com>)
Re: Linux: BPF: issues with copy_from_user_nofault() (Alexei Starovoitov <alexei.starovoitov@...il.com>)
CVE-2023-47248: PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file (Antoine Pitrou <apitrou@...che.org>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors ("David A. Wheeler" <dwheeler@...eeler.com>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (Jean Luc Picard <atari2600a@...il.com>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (Brian Peters <brianrpeters@...il.com>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (Mats Wichmann <mats@...hmann.us>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (Solar Designer <solar@...nwall.com>)

November 9 (4 messages)

Re: Linux: BPF: issues with copy_from_user_nofault() (Hsin-Wei Hung <hsinweih@....edu>)
Re: Linux: BPF: issues with copy_from_user_nofault() (Solar Designer <solar@...nwall.com>)
Xen Security Advisory 443 v4 (CVE-2023-34325,CVE-2022-4949) - Multiple vulnerabilities in libfsimage disk handling (Xen.org security team <security@....org>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors ("Mike O'Connor" <mjo@...o.mi.org>)

November 10 (2 messages)

Re: !CVE: A new platform to track security issues not acknowledged by vendors (!CVE Team <contact@...cve.org>)
Re: !CVE: A new platform to track security issues not acknowledged by vendors (!CVE Team <contact@...cve.org>)

November 12 (2 messages)

CVE-2023-47037: Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access) (Ephraim Anierobi <ephraimanierobi@...che.org>)
CVE-2023-42781: Apache Airflow: Permission verification bypass allows viewing dagruns of other dags (Ephraim Anierobi <ephraimanierobi@...che.org>)

November 14 (9 messages)

Xen Security Advisory 445 v3 (CVE-2023-46835) - x86/AMD: mismatch in IOMMU quarantine page table levels (Xen.org security team <security@....org>)
Xen Security Advisory 446 v2 (CVE-2023-46836) - x86: BTC/SRSO fixes not fully effective (Xen.org security team <security@....org>)
[kubernetes] CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windo… (Craig Ingram <cjingram@...gle.com>)
CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar) (Antonio Gomez Iglesias <antonio.gomez.iglesias@...el.com>)
Re: CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar) (Demi Marie Obenour <demi@...isiblethingslab.com>)
Re: CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar) (Solar Designer <solar@...nwall.com>)
Re: CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar) (HW42 <hw42@...umj.de>)
Re: CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar) (Solar Designer <solar@...nwall.com>)
Re: CVE-2023-23583: Intel - Denial of Service - Privilege Escalation (Reptar) (Antonio Gomez Iglesias <antonio.gomez.iglesias@...el.com>)

November 15 (1 message)

WebKitGTK and WPE WebKit Security Advisory WSA-2023-0010 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

November 16 (1 message)

[vim-security] several minor security issues in Vim v9.0.2106-v9.0.2112 (Christian Brabandt <cb@...bit.org>)

November 17 (2 messages)

hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c (Matthias Gerstner <mgerstner@...e.de>)
CVE-2023-37580 (and others): XSS vulnerabilities in Zimbra Collaboration Suite (Valtteri Vuorikoski <vuori@...com.org>)

November 18 (1 message)

Re: hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c (Roxana Bradescu <roxabee@...omium.org>)

November 19 (3 messages)

CVE-2023-46302: Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization (Xiang Chen <cdmikechen@...che.org>)
Re: hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c ("Mike O'Connor" <mjo@...o.mi.org>)
CVE-2022-46337: Apache Derby: LDAP injection vulnerability in authenticator ("Richard N. Hillegas" <rhillegas@...che.org>)

November 20 (3 messages)

Re: hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c (Matthias Gerstner <mgerstner@...e.de>)
GNUTLS-SA-2023-10-23, CVE-2023-5981: timing sidechannel in RSA-PSK key exchange (Alan Coopersmith <alan.coopersmith@...cle.com>)
GIMP 2.10.36 fixed multiple image format parser vulnerabilities (Alan Coopersmith <alan.coopersmith@...cle.com>)

November 22 (3 messages)

CVE-2023-37924: Apache Submarine: SQL injection from unauthorized login (Xiang Chen <cdmikechen@...che.org>)
CVE-2022-45875: Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin (Wenjun Ruan <wenjun@...che.org>)
[vim-security] use-after-free in ex_substitute in Vim < v9.0.2121 (Christian Brabandt <cb@...bit.org>)

November 23 (1 message)

CVE-2023-43123: Apache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary fi… (Julien Nioche <jnioche@...che.org>)

November 24 (2 messages)

CVE-2023-48796: Apache dolphinscheduler sensitive information disclosure (Zhenxu Ke <kezhenxu94@...che.org>)
CVE-2023-49068: Apache DolphinScheduler: Information Leakage Vulnerability (Zihao Xiang <zihaoxiang@...che.org>)

November 25 (1 message)

Re: CVE-2023-49068: Apache DolphinScheduler: Information Leakage Vulnerability (John Helmert III <ajak@...too.org>)

November 26 (1 message)

Re: CVE-2023-34059 - File Descriptor Hijack vulnerability in open-vm-tools (John Helmert III <ajak@...too.org>)

November 27 (5 messages)

Re: CVE-2023-34059 - File Descriptor Hijack vulnerability in open-vm-tools (Matthias Gerstner <mgerstner@...e.de>)
CVE-2023-40610: Apache Superset: Privilege escalation with default examples database (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2023-42501: Apache Superset: Unnecessary read permissions within the Gamma role (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2023-43701: Apache Superset: Stored XSS on API endpoint (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2023-49145: Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt (David Handermann <exceptionfactory@...che.org>)

November 28 (6 messages)

CVE-2022-41678: Apache ActiveMQ: Deserialization vulnerability on Jolokia that allows authenticated users to perform RC… (Jean-Baptiste Onofré <jbonofre@...che.…)
CVE-2023-46589: Apache Tomcat: HTTP request smuggling via malformed trailer headers (Mark Thomas <markt@...che.org>)
CVE-2023-42502: Apache Superset: Open Redirect Vulnerability (Daniel Gaspar <dpgaspar@...che.org>)
Fwd: Samba 4.19.3 Available for Download - addresses CVE-2018-14628 (Alan Coopersmith <alan.coopersmith@...cle.com>)
CVE-2023-42505: Apache Superset: Sensitive information disclosure on db connection details (Daniel Gaspar <dpgaspar@...che.org>)
CVE-2023-42504: Apache Superset: Lack of rate limiting allows for possible denial of service (Daniel Gaspar <dpgaspar@...che.org>)

November 29 (2 messages)

Multiple vulnerabilities in Jenkins plugins (Daniel Beck <ml@...kweb.net>)
Python Cryptography advisory: CVE-2023-49083 NULL-dereference when loading PKCS7 certificates (Alan Coopersmith <alan.coopersmith@...cle.com>)

November 30 (6 messages)

Re: hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c (Matthias Gerstner <mgerstner@...e.de>)
Re: hplip: security issues in `hpps` program due to fixed /tmp path usage in prnt/hpps/hppsfilter.c (Alex Murray <alex.murray@...onical.com>)
CVE-2022-45135: Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction (Cédric Damioli <cdamioli@...che.org>)
CVE-2023-49620: Apache DolphinScheduler: Authenticated users could delete UDFs in resouece center they were not authorize… (Jiajie Zhong <zhongjiajie@...che.org>)
CVE-2023-49733: Apache Cocoon's StreamGenerator is vulnerable to XXE injection (Cédric Damioli <cdamioli@...che.org>)
CVE-2023-49735: Apache Tiles: Unvalidated input may lead to path traversal and XXE (Arnout Engelen <engelen@...che.org>)

86 messages

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.