oss-security mailing list
Recent messages:
- 2026/10/07 #26:
CVE-2026-97146: Apache YuniKorn: Admission control bypass via
system label forgery (Wilfred Spiegelenburg <wilfreds@...che.org>)
- 2026/10/07 #25:
CVE-2026-92393: Apache YuniKorn: Admission control bypass via
workload UPDATE operation (Wilfred Spiegelenburg <wilfreds@...che.org>)
- 2026/10/07 #24:
CVE-2026-78243: Apache YuniKorn: LDAP Group provider panics on
lowercase attribute name (Wilfred Spiegelenburg <wilfreds@...che.org>)
- 2026/10/07 #23:
FW: X.Org Security Advisory: multiple security issues in X.Org X
server (Peter Hutterer <peter.hutterer@...-t.net>)
- 2026/10/07 #22:
CVE-2026-97720: Apache Impala: Impala Executor Webserver Auth
Bypass (Michael Smith <michaelsmith@...che.org>)
- 2026/10/07 #21:
CVE-2026-93684: Apache Impala: Stored XSS in Impala query plans (Michael Smith <michaelsmith@...che.org>)
- 2026/10/07 #20:
CVE-2026-90466: Apache Impala: Path traversal executes JARs
outside trusted paths (Michael Smith <michaelsmith@...che.org>)
- 2026/10/07 #19:
CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently
deletes non-ASCII content (Jan Friedrich <freeandnil@...che.org>)
- 2026/10/07 #18:
CVE-2026-105240: Apache log4net: NUL character truncates
OutputDebugStringAppender records (Jan Friedrich <freeandnil@...che.org>)
- 2026/10/07 #17:
CVE-2026-105243: Apache log4net: Oversize EventLogAppender record
silently discarded (Jan Friedrich <freeandnil@...che.org>)
- 2026/10/07 #16:
CVE-2026-105242: Apache log4net: Request validation failure drops
the event in the aspnet-request converter (Jan Friedrich <freeandnil@...che.org>)
- 2026/10/07 #15:
CVE-2026-105241: Apache log4net: Unencodable content discards a
whole SmtpPickupDirAppender batch (Jan Friedrich <freeandnil@...che.org>)
- 2026/10/07 #14:
CVE-2026-105239: Apache log4net: NUL character truncates
EventLogAppender records (Jan Friedrich <freeandnil@...che.org>)
- 2026/10/07 #13:
CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped
class strings, enabling stored XSS ("Gary D. Gregory" <ggregory@...che.org>)
- 2026/10/07 #12:
CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes
drive unbounded parse-time recursion in ClassParser ("Gary D. Gregory" <ggregory@...che.org>)
- 2026/10/07 #11:
CVE-2026-12405: Foreman Remote Execution: command injection via
effective_user (fixed in 16.6.6, 17.2.2, 18.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #10:
CVE-2026-12423: Foreman: provisioning token validation flaw (fixed in
3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #9:
CVE-2026-12540: Foreman: command injection in foreman-rake
errors:fetch_log (fixed in 3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #8:
CVE-2026-12541: Foreman: command injection in foreman-rake database
tasks (fixed in 3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #7:
CVE-2026-12542: Foreman: command injection in foreman-tail (fixed in
3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #6:
CVE-2026-12544: Foreman: SSTI and unsafe deserialization in
configuration (fixed in 3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #5:
CVE-2026-12545: Hammer CLI: editor command injection (fixed in
3.19.1, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #4:
CVE-2026-56097: Katello: SQL injection in Registry Proxy labels
(fixed in 4.21.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #3:
CVE-2026-56098: Katello: Registry Proxy authorization bypass (fixed
in 4.21.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #2:
CVE-2026-96658: Foreman: Safemode bypass leading to RCE (fixed in
3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/07 #1:
CVE-2026-96659: Foreman: excessive Viewer permissions on preview
(fixed in 3.19.2, 5.0.1) (Ondrej Gajdusek <ogajduse@...hat.com>)
- 2026/10/06 #3:
Django CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975 (Sarah Boyce <sarahboyce@...ngoproject.com>)
- 2026/10/06 #2:
Announce: OpenSSH 10.6 released (Damien Miller <djm@....openbsd.org>)
- 2026/10/06 #1:
CVE-2026-104380: Punk versions from 0.48 before 0.55 for Perl route
Extended CONNECT requests to any GET route without an … (Timothy Legge <timlegge@...nsec.org>)
- 2026/10/05 #17:
Fwd: [Freeipmi-announce] FreeIPMI 1.6.20 Released (Chad Dougherty <crd@...rew.cmu.edu>)
- 2026/10/05 #16:
libexpat 2.9.0 fixes two vulnerabilities (Sebastian Pipping <sebastian@...ping.org>)
- 2026/10/05 #15:
Re: cloud computing provider disclosures (Jeremy Stanley <fungi@...goth.org>)
- 2026/10/05 #14:
Re: cloud computing provider disclosures (Jan Schaumann <jschauma@...meister.org>)
- 2026/10/05 #13:
CVE-2026-104714: Apache Struts: Shared message formatter exposes
date and time values across concurrent requests (Lukasz Lenart <lukaszlenart@...che.org>)
- 2026/10/05 #12:
CVE-2026-104713: Apache Struts: Unbounded request body read in the
REST plugin (Lukasz Lenart <lukaszlenart@...che.org>)
- 2026/10/05 #11:
CVE-2026-104712: Apache Struts: Disproportionate response size
when rendering BigDecimal request parameters (Lukasz Lenart <lukaszlenart@...che.org>)
- 2026/10/05 #10:
CVE-2026-104711: Apache Struts: OGNL injection in the legacy
RESTful action mapper (Lukasz Lenart <lukaszlenart@...che.org>)
- 2026/10/05 #9:
CVE-2026-19954: Net::Whois::Raw versions before 2.99044 for Perl ship
a pwhois command-line tool that queries WHOIS for th… (Robert Rothenberg <rrwo@...nsec.org>)
- 2026/10/05 #8:
CVE-2017-20285: YAML versions before 1.30 for Perl allow a loaded
document to trigger the DESTROY method of arbitrary classes (Stig Palmquist <stig@...g.io>)
- 2026/10/05 #7:
CVE-2019-25777: YAML versions before 1.27_001 for Perl allow a loaded
perl/glob document to replace any package variable, which c… (Stig Palmquist <stig@...g.io>)
- 2026/10/05 #6:
[cups] Multiple security fixes in incoming new version 2.4.20 (Zdenek Dohnal <zdohnal@...hat.com>)
- 2026/10/05 #5:
openjpeg 2.4.0 through 2.5.4 and git master: heap buffer overflow in
opj_dwt_encode_and_deinterleave_v() (reversible 5/… ("Security @ Red Eagle Tech" <security@r…)
- 2026/10/05 #4:
Re: cloud computing provider disclosures (Katie <katie@...ricane.ca>)
- 2026/10/05 #3:
Re: cloud computing provider disclosures (Aaron Rainbolt <arraybolt3@...il.com>)
- 2026/10/05 #2:
Re: cloud computing provider disclosures (Demi Marie Obenour <demiobenour@...il.com>)
- 2026/10/05 #1:
Re: cloud computing provider disclosures (Jonathan Wright <jonathan@...alinux.org>)
- 2026/10/04 #2:
cloud computing provider disclosures (Jan Schaumann <jschauma@...meister.org>)
- 2026/10/04 #1:
Apache Thrift 0.25.0: 61 CVEs fixed (combined announcement) (Jens Geyer <jensg@...che.org>)
- 2026/10/02 #8:
CVE-2026-103885: Apache Directory LDAP API: Denial of service via
crafted telephone number values (Emmanuel Lécharny <elecharny@...che.org>)
- 2026/10/02 #7:
CVE-2026-103880: Apache Directory LDAP API: Denial of service via
excessive bcrypt cost factor in stored passwords (Emmanuel Lécharny <elecharny@...che.org>)
- 2026/10/02 #6:
CVE-2026-103878: Apache Directory LDAP API: Injection of plaintext
responses during StartTLS (Emmanuel Lécharny <elecharny@...che.org>)
- 2026/10/02 #5:
CVE-2026-103877: Apache Directory LDAP API: Unsafe loading of Java
code from LDAP schema elements (Emmanuel Lécharny <elecharny@...che.org>)
- 2026/10/02 #4:
CVE-2026-103552: Apache Directory LDAP API: A unbound client can
send a deeply nested search filter that overflows the … (Emmanuel Lécharny <elecharny@...che.or…)
- 2026/10/02 #3:
CVE-2026-102731: Apache Directory LDAP API: Denial of service via
excessive memory allocation in BER decode (Emmanuel Lécharny <elecharny@...che.org>)
- 2026/10/02 #2:
CVE-2026-59265: Apache OpenOffice: Opening a malicious document
can lead to system takeover (Dave Fisher <wave@...che.org>)
- 2026/10/02 #1:
CVE-2026-102795: Apache Traffic Server: SNI to Host header
matching policy is not properly enforced (supersedes CVE-2026-41… (Masakazu Kitajo <maskit@...che.org>)
- 2026/10/01 #30:
CVE-2026-93546: Apache HTTP Server: mod_dav_fs namespace overflow (Eric Covener <covener@...che.org>)
- 2026/10/01 #29:
CVE-2026-79768: Apache HTTP Server: mod_userdir information
disclosure (Eric Covener <covener@...che.org>)
- 2026/10/01 #28:
CVE-2026-73637: Apache HTTP Server: mod_auth_digest DoS attack (Eric Covener <covener@...che.org>)
- 2026/10/01 #27:
CVE-2026-73636: Apache HTTP Server: mod_auth_digest one-time-nonce
replay attack (Eric Covener <covener@...che.org>)
- 2026/10/01 #26:
CVE-2026-63718: Apache HTTP Server: mod_proxy_uwsgi
Transfer-Encoding response smuggling (Eric Covener <covener@...che.org>)
- 2026/10/01 #25:
CVE-2026-63686: Apache HTTP Server: mod_xml2enc crash on charset
conversion failure (Eric Covener <covener@...che.org>)
- 2026/10/01 #24:
CVE-2026-63292: Apache HTTP Server: mod_vhost_alias stack overflow
(Eric Covener <covener@...che.org>)
- 2026/10/01 #23:
CVE-2026-63045: Apache HTTP Server: mod_proxy_ftp PASV address
handling (Eric Covener <covener@...che.org>)
- 2026/10/01 #22:
CVE-2026-59797: Apache HTTP Server: mod_ssl SSLRequire allows
.htaccess ap_expr file-function (Eric Covener <covener@...che.org>)
- 2026/10/01 #21:
CVE-2026-59685: Apache HTTP Server: Out-of-Bounds Write in
ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTE… (Eric Covener <covener@...che.org>)
- 2026/10/01 #20:
CVE-2026-58415: Apache HTTP Server: mod_dav_fs property database
read access (Eric Covener <covener@...che.org>)
- 2026/10/01 #19:
CVE-2026-57941: Apache HTTP Server: mod_http2 use-after-free /
wild write via shared session->bbtmp re-entrancy (Eric Covener <covener@...che.org>)
- 2026/10/01 #18:
CVE-2026-56449: Apache HTTP Server: mod_proxy_html: crash in
dump_content (Eric Covener <covener@...che.org>)
- 2026/10/01 #17:
CVE-2026-56154: Apache HTTP Server: mod_rewrite use-after-free via
%{LA-U:HTTP:...} (Eric Covener <covener@...che.org>)
- 2026/10/01 #16:
CVE-2026-56153: Apache HTTP Server: mod_charset_lite: Heap
overflow in finish_partial_char (Eric Covener <covener@...che.org>)
- 2026/10/01 #15:
CVE-2026-48005: Apache HTTP Server: mod_auth_digest
reauthentication attack (Eric Covener <covener@...che.org>)
- 2026/10/01 #14:
CVE-2026-47360: Apache HTTP Server: mod_session: Session cookie
not removed during internal redirect (Eric Covener <covener@...che.org>)
- 2026/10/01 #13:
CVE-2026-46729: Apache HTTP Server: mod_heartmonitor denial of
service (Eric Covener <covener@...che.org>)
- 2026/10/01 #12:
CVE-2026-42528: Apache HTTP Server: mod_dav shared lock overflow (Eric Covener <covener@...che.org>)
- 2026/10/01 #11:
CVE-2026-42356: Apache HTTP Server: limited RCE for some internal
redirects to non-CGI files in CGI directories (Eric Covener <covener@...che.org>)
- 2026/10/01 #10:
CVE-2026-102505: Imager versions before 1.037 for Perl overflow a
heap buffer fetching float samples from a paletted image in i_g… (Stig Palmquist <stig@...g.io>)
- 2026/10/01 #9:
CVE-2026-102504: Imager versions before 1.037 for Perl exit the
process reading a raw image with an out-of-range raw_datachannels… (Stig Palmquist <stig@...g.io>)
- 2026/10/01 #8:
CVE-2026-94276: Apache APISIX: Openid-connect introspection
validation issue (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #7:
CVE-2026-94269: Apache APISIX: Servlet-style normalization creates
a route/upstream authorization mismatch (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #6:
CVE-2026-94250: Apache APISIX: Batch response aggregation can
exhaust worker memory (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #5:
CVE-2026-94220: Apache APISIX: session fixation issue in
feishu-auth and dingtalk-auth plugin (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #4:
CVE-2026-94212: Apache APISIX: unauthenticated impersonation issue
in saml-auth (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #3:
CVE-2026-82806: Apache APISIX: cross-request permission pollution
via static permission list mutation (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #2:
CVE-2026-78242: Apache APISIX: data-mask may fail to redact
request headers in logger output (Abhishek Choudhary <shreemaanabhishek@...che.org>)
- 2026/10/01 #1:
CVE-2026-88789: Apache Camel Quarkus: Camel Quarkus: Forced Xalan
TransformerFactory drops upstream external-DTD/styles… (James Netherton <jamesnetherton@...che.…)
- 2026/09/30 #18:
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (Adrian Perez de Castro <aperez@...lia.com>)
- 2026/09/30 #17:
CPython [CVE-2026-19445] Use-after-free of a
server-side SSLContext when sni_callback switches contexts (Alan Coopersmith <alan.coopersmith@...cle.com>)
- 2026/09/30 #16:
CPython [CVE-2026-19553] SSLContext.wrap_bio() missing
validation of server_hostname parameter (Alan Coopersmith <alan.coopersmith@...cle.com>)
- 2026/09/30 #15:
CVE-2026-80490: Algorithm::AhoCorasick::XS versions through 0.04 for
Perl read the haystack string length before the scala… (Robert Rothenberg <rrwo@...nsec.org>)
- 2026/09/30 #14:
CVE-2026-95616: Apache WSS4J: Unauthenticated denial of service
via integer overflow in DER parsing of X.509 certificat… (Colm O hEigeartaigh <coheigea@...che.or…)
- 2026/09/30 #13:
CVE-2026-92899: Apache WSS4J: UsernameToken replay protection
bypassed by re-encoding the Nonce (Colm O hEigeartaigh <coheigea@...che.org>)
- 2026/09/30 #12:
CVE-2026-92121: Apache WSS4J: WS-SecurityPolicy signature checks
skipped in the streaming code after an STR-Transform r… (Colm O hEigeartaigh <coheigea@...che.or…)
- 2026/09/30 #11:
CVE-2026-89238: Apache WSS4J: WSS4J EncryptedHeader child
confusion causing wrong protected-header selection (Colm O hEigeartaigh <coheigea@...che.org>)
- 2026/09/30 #10:
CVE-2026-88920: Apache WSS4J: SAML Sender-Vouches Authentication
Bypass (Colm O hEigeartaigh <coheigea@...che.org>)
- 2026/09/30 #9:
CVE-2026-87830: Apache WSS4J: Streaming WS-SecurityPolicy
validation may skip element-protection checks. (Colm O hEigeartaigh <coheigea@...che.org>)
- 2026/09/30 #8:
CVE-2026-85532: Apache WSS4J: Insufficient Validation of
Derived-Key Parameters (Colm O hEigeartaigh <coheigea@...che.org>)
- 2026/09/30 #7:
CVE-2026-102511: Apache PLC4X: ADS discovery accepts spoofed
responses and derives the connection target from them (Christofer Dutz <cdutz@...che.org>)
- 2026/09/30 #6:
CVE-2026-102510: Apache PLC4X: Go binding: unbounded allocation
and framing failures on wire-controlled lengths (Christofer Dutz <cdutz@...che.org>)
- 2026/09/30 #5:
CVE-2026-102509: Apache PLC4X: Pre-authentication resource
exhaustion in the OPC UA driver and the Java SPI parser (Christofer Dutz <cdutz@...che.org>)
34564 messages
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
