oss-security  

Messages by Date

• 2024/07/08 Re: [oss-security] ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Will Dormann
• 2024/07/08 Re: [oss-security] ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Florian Weimer
• 2024/07/08 [oss-security] ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Will Dormann
• 2024/07/08 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Solar Designer
• 2024/07/07 [oss-security] CVE-2024-37389: Apache NiFi: Improper Neutralization of Input in Parameter Context Description David Handermann
• 2024/07/05 [oss-security] [ANNOUNCE] Apache CloudStack LTS Security Releases 4.18.2.1 and 4.19.0.2 Abhishek Kumar
• 2024/07/04 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Jacob Bachmeyer
• 2024/07/03 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Qualys Security Advisory
• 2024/07/03 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Yves-Alexis Perez
• 2024/07/03 [oss-security] CVE-2023-52168, CVE-2023-52169: buffer overflow, over-read vulnerabilities in the 7-Zip archiver Maxim Suhanov
• 2024/07/03 [oss-security] CVE-2024-39844: ZNC modtcl RCE Martin Weinelt
• 2024/07/03 [oss-security] CVE-2024-39884: Apache HTTP Server: source code disclosure with handlers configured via AddType Eric Covener
• 2024/07/03 [oss-security] Re: Ghostscript 10.03.1 (2024-05-02) fixed 5 CVEs including CVE-2024-33871 arbitrary code execution Thomas Rinsma
• 2024/07/03 Re: [oss-security] Announce: OpenSSH 9.8 released Christian Fischer
• 2024/07/03 [oss-security] Re: CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Qualys Security Advisory
• 2024/07/03 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Qualys Security Advisory
• 2024/07/03 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Solar Designer
• 2024/07/03 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Jeffrey Walton
• 2024/07/02 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Jacob Bachmeyer
• 2024/07/02 [oss-security] [OSSA-2024-001] OpenStack Cinder, Glance, Nova: Arbitrary file access through custom QCOW2 external data (CVE-2024-32498) Jeremy Stanley
• 2024/07/02 Re: [oss-security] Announce: OpenSSH 9.8 released Dominique Martinet
• 2024/07/01 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Mathias Krause
• 2024/07/01 Re: [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems jvoisin
• 2024/07/01 [oss-security] CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy handler substitution Eric Covener
• 2024/07/01 [oss-security] CVE-2024-38477: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request Eric Covener
• 2024/07/01 [oss-security] CVE-2024-38476: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect Eric Covener
• 2024/07/01 [oss-security] CVE-2024-38475: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. Eric Covener
• 2024/07/01 [oss-security] CVE-2024-38474: Apache HTTP Server weakness with encoded question marks in backreferences Eric Covener
• 2024/07/01 [oss-security] CVE-2024-38473: Apache HTTP Server proxy encoding problem Eric Covener
• 2024/07/01 [oss-security] CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF Eric Covener
• 2024/07/01 [oss-security] CVE-2024-36387: Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 Eric Covener
• 2024/07/01 [oss-security] CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems Qualys Security Advisory
• 2024/07/01 [oss-security] Re: Announce: OpenSSH 9.8 released (fwd) Damien Miller
• 2024/07/01 [oss-security] Announce: OpenSSH 9.8 released Damien Miller
• 2024/06/29 [oss-security] Linux non-security almost non-issue: stack-out-of-bounds Read in profile_pc Solar Designer
• 2024/06/28 [oss-security] Kerberos 1.21.3 fixes vulnerabilities in GSS message token handling Alan Coopersmith
• 2024/06/28 [oss-security] Fwd: [Security-announce][CVE-2024-5642] Buffer over-read in SSLContext.set_npn_protocols() for Python 3.9 and earlier Alan Coopersmith
• 2024/06/28 Re: [oss-security] Fwd: [siren] Reputation Farming Using Closed Github Issues / PRs Solar Designer
• 2024/06/27 [oss-security] Ghostscript 10.03.1 (2024-05-02) fixed 5 CVEs including CVE-2024-33871 arbitrary code execution Solar Designer
• 2024/06/27 [oss-security] Indirector: High-Precision Branch Target Injection Attacks Exploiting the Indirect Branch Predictor Alan Coopersmith
• 2024/06/27 [oss-security] CVE-2024-5535: OpenSSL: SSL_select_next_proto buffer overread Solar Designer
• 2024/06/26 [oss-security] Multiple vulnerabilities in Jenkins plugins Daniel Beck
• 2024/06/25 Re: [oss-security] Fwd: Node.js security updates for all active release lines, July 2024 Solar Designer
• 2024/06/25 [oss-security] Fwd: [siren] Reputation Farming Using Closed Github Issues / PRs Alan Coopersmith
• 2024/06/25 [oss-security] Fwd: Node.js security updates for all active release lines, July 2024 Rafael Gonzaga
• 2024/06/25 Re: [oss-security] Out-of-bounds read & write in the glibc's qsort() Qualys Security Advisory
• 2024/06/24 Re: [oss-security] Out-of-bounds read & write in the glibc's qsort() Douglas Bagnall
• 2024/06/24 Re: [oss-security] Arbitrary shell command evaluation in Org mode (GNU Emacs) Russ Allbery
• 2024/06/24 Re: [oss-security] Arbitrary shell command evaluation in Org mode (GNU Emacs) Florian Weimer
• 2024/06/23 [oss-security] CVE-2024-27136: Apache JSPWiki: Cross-site scripting vulnerability on upload page Juan Pablo Santos Rodríguez
• 2024/06/23 Re: [oss-security] Arbitrary shell command evaluation in Org mode (GNU Emacs) Russ Allbery
• 2024/06/23 [oss-security] Arbitrary shell command evaluation in Org mode (GNU Emacs) Ihor Radchenko
• 2024/06/22 [oss-security] CVE-2024-29868: Apache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation Dominik Riemer
• 2024/06/21 [oss-security] CVE-2024-38379: Apache Allura: Stored authenticated XSS David Philip Brondsema
• 2024/06/20 [oss-security] CVE-2024-34693: Apache Superset: Server arbitrary file read Daniel Gaspar
• 2024/06/17 [oss-security] Fwd: [Security-announce][CVE-2024-4032] Incorrect IPv4 and IPv6 private ranges Alan Coopersmith
• 2024/06/17 [oss-security] Fwd: [Security-announce][CVE-2024-0397] Memory race condition in ssl.SSLContext certificate store methods Alan Coopersmith
• 2024/06/17 [oss-security] Re: iTerm2 3.5.x title reporting bug David Leadbeater
• 2024/06/15 [oss-security] iTerm2 3.5.x title reporting bug David Leadbeater
• 2024/06/14 Re: [oss-security] Security vulnerability in fprintd Mark Esler
• 2024/06/14 Re: [oss-security] Security vulnerability in fprintd Benjamin Cance
• 2024/06/14 Re: [oss-security] Security vulnerability in fprintd Yaron Shahrabani
• 2024/06/13 Re: [oss-security] Security vulnerability in fprintd Mark Esler
• 2024/06/13 Re: [oss-security] Security vulnerability in fprintd Marco Trevisan
• 2024/06/13 [oss-security] CVE-2024-25142: Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache Jarek Potiuk
• 2024/06/12 Re: [oss-security] Re: CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 Matthew Fernandez
• 2024/06/12 [oss-security] Re: CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 Tavis Ormandy
• 2024/06/12 [oss-security] CVE-2024-36265: Apache Submarine Server Core: authorization bypass Arnout Engelen
• 2024/06/12 [oss-security] CVE-2024-36264: Apache Submarine Commons Utils: default secret Arnout Engelen
• 2024/06/12 [oss-security] CVE-2024-36263: Apache Submarine Server Core: SQL injection Arnout Engelen
• 2024/06/11 [oss-security] CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 Zdenek Dohnal
• 2024/06/10 [oss-security] CVE-2024-36471: Apache Allura: sensitive information exposure via DNS rebinding David Philip Brondsema
• 2024/06/09 Re: [oss-security] vte 0.76.3 released with fix for CVE-2024-37535 Solar Designer
• 2024/06/09 [oss-security] vte 0.76.3 released with fix for CVE-2024-37535 Alan Coopersmith
• 2024/06/06 [oss-security] PHP security releases 8.3.8, 8.2.20, and 8.1.29 Alan Coopersmith
• 2024/06/06 [oss-security] [SBA-ADV-20240202-02] CVE-2024-5658: CraftCMS Plugin - Two-Factor Authentication through 3.3.3 - TOTP Token Stays Valid After Use SBA Research Security Advisory
• 2024/06/06 [oss-security] [SBA-ADV-20240202-01] CVE-2024-5657: CraftCMS Plugin - Two-Factor Authentication 3.3.1 to 3.3.3 - Password Hash Disclosure SBA Research Security Advisory
• 2024/06/05 [oss-security] Re: libarchive 3.7.4 released with 2 security fixes Tavis Ormandy
• 2024/06/04 [oss-security] libarchive 3.7.4 released with 2 security fixes Alan Coopersmith
• 2024/06/04 [oss-security] Go 1.22.4 and Go 1.21.11 released with 2 security fixes (CVE-2024-24789, CVE-2024-24790) Alan Coopersmith
• 2024/06/03 [oss-security] CVE-2024-36104: Apache OFBiz: Path traversal leading to a RCE Jacques Le Roux
• 2024/05/30 [oss-security] Security vulnerability in fprintd Yaron Shahrabani
• 2024/05/30 Re: [oss-security] List linux CVEs for a given stable release? Greg Kroah-Hartman
• 2024/05/30 Re: [oss-security] List linux CVEs for a given stable release? Dominique Martinet
• 2024/05/29 Re: [oss-security] List linux CVEs for a given stable release? Greg Kroah-Hartman
• 2024/05/28 [oss-security] List linux CVEs for a given stable release? Dominique Martinet
• 2024/05/28 [oss-security] OpenSSL Security Advisory Matt Caswell
• 2024/05/27 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Charles Fol
• 2024/05/27 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Florian Weimer
• 2024/05/27 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Solar Designer
• 2024/05/27 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Erik Auerswald
• 2024/05/27 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Florian Weimer
• 2024/05/27 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Charles Fol
• 2024/05/26 [oss-security] path traversal in tar extract in intel cve-bin-tool houjingyi
• 2024/05/24 [oss-security] Multiple vulnerabilities in Jenkins plugins Kevin Guerroudj
• 2024/05/24 [oss-security] gnome-remote-desktop: D-Bus system service in GNOME release 46 local information leaks (CVE-2024-5148) Matthias Gerstner
• 2024/05/23 [oss-security] Intel CPU Hardware Features and Behaviors Related to Speculative Execution Alan Coopersmith
• 2024/05/21 [oss-security] asterisk security releases 18.23.1, 20.8.1, & 21.3.1 Alan Coopersmith
• 2024/05/21 [oss-security] WebKitGTK and WPE WebKit Security Advisory WSA-2024-0003 Adrian Perez de Castro
• 2024/05/20 Re: [oss-security] Article: State of Sandboxing in Linux Solar Designer
• 2024/05/20 [oss-security] Article: State of Sandboxing in Linux Ali Polatel
• 2024/05/17 Re: [oss-security] Linux: Disabling network namespaces Mickaël Salaün
• 2024/05/16 [oss-security] CVE-2024-34058: Nethserver 7 & 8 stored cross-site scripting (XSS) in WebTop package Andrea Intilangelo
• 2024/05/16 [oss-security] OpenSSL Security Advisory [corrected CVE id] Tomas Mraz
• 2024/05/16 [oss-security] OpenSSL Security Advisory Tomas Mraz
• 2024/05/15 [oss-security] CVE-2024-21823: Intel DSA and Intel IAA advisory Alan Coopersmith
• 2024/05/14 [oss-security] git: 5 vulnerabilities fixed Johannes Schindelin
• 2024/05/14 [oss-security] CVE-2024-32077: Apache Airflow: XSS vulnerability in Task Instance Log/Log Details Ephraim Anierobi
• 2024/05/13 Re: [oss-security] Microsoft Device Firmware Configuration Interface (DFCI) in Linux efivars directory Jacob Bachmeyer
• 2024/05/13 Re: [oss-security] Microsoft Device Firmware Configuration Interface (DFCI) in Linux efivars directory Jacob Bachmeyer
• 2024/05/13 [oss-security] PowerDNS Security Advisory 2024-03: Transfer requests received over DoH can lead to a denial of service in DNSdist Remi Gacogne
• 2024/05/11 [oss-security] Re: lsof "can't stat() fuse.${name} filesystem /run/user/1000/${dir}" Simon McVittie
• 2024/05/11 Re: [oss-security] Microsoft Device Firmware Configuration Interface (DFCI) in Linux efivars directory Solar Designer
• 2024/05/11 [oss-security] Microsoft Device Firmware Configuration Interface (DFCI) in Linux efivars directory Corey Lopez
• 2024/05/10 [oss-security] [vim-security] buffer-overlow in xxd with colored output < v9.1.0404 Christian Brabandt
• 2024/05/09 Re: [oss-security] New SMTP smuggling attack Erik Auerswald
• 2024/05/09 [oss-security] CVE-2024-34365: Apache Karaf Cave: Cave SSRF and arbitrary file access Arnout Engelen
• 2024/05/09 [oss-security] [kubernetes] CVE-2024-3744: azure-file-csi-driver discloses service account tokens in logs Rita Zhang
• 2024/05/09 Re: [oss-security] New SMTP smuggling attack Mark Esler
• 2024/05/09 [oss-security] CVE-2024-26579: Apache Inlong JDBC Vulnerability Charles Zhang
• 2024/05/09 [oss-security] CVE-2024-32113: Apache OFBiz: Path traversal leading to RCE Jacques Le Roux
• 2024/05/08 [oss-security] Xen Security Advisory 457 v3 (CVE-2024-27393) - Linux/xen-netfront: Memory leak due to missing cleanup function Xen . org security team
• 2024/05/08 [oss-security] [security] Go 1.22.3 and Go 1.21.10 are released Alan Coopersmith
• 2024/05/08 Re: [oss-security] CVE-2024-26925: Linux: nf_tables: locking issue in the nf_tables_abort() function Salvatore Bonaccorso
• 2024/05/08 [oss-security] Xen Security Advisory 457 v2 - Linux/xen-netfront: Memory leak due to missing cleanup function Xen . org security team
• 2024/05/07 [oss-security] Xen Security Advisory 457 v1 - Linux/xen-netback: Memory leak due to missing cleanup function Xen . org security team
• 2024/05/07 [oss-security] Xen Security Advisory 456 v3 (CVE-2024-2201) - x86: Native Branch History Injection Xen . org security team
• 2024/05/07 [oss-security] CVE-2024-26925: Linux: nf_tables: locking issue in the nf_tables_abort() function HexRabbit Chen
• 2024/05/07 [oss-security] GLib (2.26.0+): GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing Philip Withnall
• 2024/05/07 [oss-security] Re: Buildroot: incorrect permissons on /dev/shm Peter Korsgaard
• 2024/05/07 [oss-security] HNS-2024-07 - HN Security Advisory - Multiple vulnerabilities in RIOT OS Marco Ivaldi
• 2024/05/07 [oss-security] CVE-2024-28148: Apache Superset: Incorrect datasource authorization on explore REST API Daniel Gaspar
• 2024/05/07 [oss-security] CVE-2023-49606, CVE-2023-40533: memory safety vulnerabilities in tinyproxy <=1.11.1 Valtteri Vuorikoski
• 2024/05/06 [oss-security] Re: [PATCH] package/skeleton-init-sysv: Set sticky bit on /dev/shm Peter Korsgaard
• 2024/05/06 [oss-security] The GNU C Library security advisories update for 2024-05-06 Carlos O'Donell
• 2024/05/06 [oss-security] Re: [Buildroot] Buildroot: incorrect permissons on /dev/shm Yann E. MORIN
• 2024/05/06 Re: [oss-security] Fwd: uriparser 0.9.8 released, includes security fixes Solar Designer
• 2024/05/06 [oss-security] Re: Buildroot: incorrect permissons on /dev/shm Ben Hutchings
• 2024/05/06 [oss-security] Fwd: uriparser 0.9.8 released, includes security fixes Sebastian Pipping
• 2024/05/03 [oss-security] CVE-2023-35701: Apache Hive: Arbitrary command execution via JDBC driver Stamatis Zampetakis
• 2024/05/03 Re: [oss-security] escaping terminal control characters (was Re: backdoor in upstream xz/liblzma leading to ssh server compromise) Steffen Nurpmeso
• 2024/05/03 Re: [oss-security] escaping terminal control characters (was Re: backdoor in upstream xz/liblzma leading to ssh server compromise) Steffen Nurpmeso
• 2024/05/02 Re: [oss-security] escaping terminal control characters (was Re: backdoor in upstream xz/liblzma leading to ssh server compromise) Sam James
• 2024/05/02 Re: [oss-security] New SMTP smuggling attack Solar Designer
• 2024/05/02 Re: [oss-security] New SMTP smuggling attack Steffen Nurpmeso
• 2024/05/02 [oss-security] CVE-2024-30251: DoS in aiohttp Sam Bull
• 2024/05/02 [oss-security] Multiple vulnerabilities in Jenkins plugins Daniel Beck
• 2024/05/02 [oss-security] CVE-2024-32638: Apache APISIX: Forward-Auth Request Smuggling YuanSheng Wang
• 2024/05/02 Re: [oss-security] Re: CVEs issued by the Linux kernel CNA Greg KH
• 2024/05/01 [oss-security] Re: CVEs issued by the Linux kernel CNA Alan Coopersmith
• 2024/05/01 [oss-security] CVE-2024-32114: Apache ActiveMQ: Jolokia and REST API were not secured with default configuration Jean-Baptiste Onofré
• 2024/04/30 Re: [oss-security] New SMTP smuggling attack Steffen Nurpmeso
• 2024/04/30 Re: [oss-security] New SMTP smuggling attack Erik Auerswald
• 2024/04/30 [oss-security] Re: New SMTP smuggling attack nightmare . yeah27
• 2024/04/30 [oss-security] Re: Telegram Web app XSS / Session Hijacking 1-click Pedro Batista
• 2024/04/30 Re: [oss-security] New SMTP smuggling attack Mark Esler
• 2024/04/30 Re: [oss-security] Update on the distro-backdoor-scanner effort Jacob Bachmeyer
• 2024/04/30 Re: [oss-security] libksieve (used by kmail/kontact) sent password as username Salvatore Bonaccorso
• 2024/04/29 Re: [oss-security] Update on the distro-backdoor-scanner effort Gabriel Ravier
• 2024/04/29 Re: [oss-security] Re: Linux: Disabling network namespaces John Johansen
• 2024/04/29 Re: [oss-security] Linux: Disabling network namespaces John Johansen
• 2024/04/29 [oss-security] CVE-2024-27322: Deserialization vulnerability in R before 4.4.0 Alan Coopersmith
• 2024/04/29 Re: [oss-security] Update on the distro-backdoor-scanner effort Vegard Nossum
• 2024/04/29 Re: [oss-security] Update on the distro-backdoor-scanner effort Jacob Bachmeyer
• 2024/04/28 [oss-security] Telegram Web app XSS / Session Hijacking 1-click Pedro Batista
• 2024/04/28 [oss-security] Suspicious hook-loading mechanism in hyprland Sam James
• 2024/04/28 Re: [oss-security] Update on the distro-backdoor-scanner effort Hank Leininger
• 2024/04/28 Re: [oss-security] Update on the distro-backdoor-scanner effort Hank Leininger
• 2024/04/27 Re: [oss-security] Update on the distro-backdoor-scanner effort Morten Linderud
• 2024/04/27 Re: [oss-security] Update on the distro-backdoor-scanner effort Jacob Bachmeyer
• 2024/04/26 Re: [oss-security] Update on the distro-backdoor-scanner effort Sam James
• 2024/04/26 Re: [oss-security] Update on the distro-backdoor-scanner effort Simon McVittie
• 2024/04/26 [oss-security] Update on the distro-backdoor-scanner effort Hank Leininger
• 2024/04/25 [oss-security] libksieve (used by kmail/kontact) sent password as username Jonas Schäfer
• 2024/04/24 [oss-security] Security Issues and Abandonment of PHP ECC library (mdanter/ecc, phpecc/phpecc) Paragon Initiative Enterprises Security Team
• 2024/04/24 [oss-security] CVE-2024-0582 - Linux kernel use-after-free vulnerability in io_uring, writeup and exploit strategy Oriol Castejón
• 2024/04/24 Re: [oss-security] The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence Florian Weimer
• 2024/04/24 [oss-security] PowerDNS Recursor Security Advisory 2024-02: if recursive forwarding is configured, crafted responses can lead to a denial of service in Recursor Peter van Dijk
• 2024/04/23 Re: [oss-security] Linux: Disabling network namespaces Simon McVittie
• 2024/04/23 [oss-security] Re: 83 bogus CVEs assigned to Robot Operating System (ROS) Yash Patel
• 2024/04/23 [oss-security] Re: 83 bogus CVEs assigned to Robot Operating System (ROS) Mark Esler
• 2024/04/23 [oss-security] Re: 83 bogus CVEs assigned to Robot Operating System (ROS) Yash Patel
• 2024/04/23 [oss-security] 83 bogus CVEs assigned to Robot Operating System (ROS) Mark Esler
• 2024/04/23 Re: [oss-security] Linux: Disabling network namespaces Demi Marie Obenour
• 2024/04/22 [oss-security] Re: Linux: Disabling network namespaces Priedhorsky, Reid
• 2024/04/22 Re: [oss-security] Linux: Disabling network namespaces Jordan Glover
• 2024/04/22 [oss-security] CVE-2024-27349: Apache HugeGraph-Server: Bypass whitelist in Auth mode Imba Jin
• 2024/04/22 [oss-security] CVE-2024-27348: Apache HugeGraph-Server: Command execution in gremlin Imba Jin
• 2024/04/22 [oss-security] CVE-2024-27347: Apache HugeGraph-Hubble: SSRF in Hubble connection page Imba Jin
• 2024/04/22 [oss-security] Wordpress Responsive theme: arbitrary HTML content injection (CVE-2024-2848) Hanno Böck
• 2024/04/21 Re: [oss-security] Linux: Disabling network namespaces Solar Designer
• 2024/04/21 Re: [oss-security] Linux: Disabling network namespaces Solar Designer
• 2024/04/21 Re: [oss-security] PoC for fdroidserver AllowedAPKSigningKeys certificate pinning bypass Jeffrey Walton
• 2024/04/21 Re: [oss-security] Linux: Disabling network namespaces Simon McVittie
• 2024/04/21 Re: [oss-security] Linux: Disabling network namespaces Simon McVittie
• 2024/04/20 [oss-security] [Update] PoC for fdroidserver AllowedAPKSigningKeys certificate pinning bypass Fay Stegerman
• 2024/04/20 Re: [oss-security] Linux: Disabling network namespaces Jordan Glover
• 2024/04/20 Re: [oss-security] Linux: Disabling network namespaces Solar Designer
• 2024/04/19 [oss-security] Re: Linux: Disabling network namespaces nightmare . yeah27
• 2024/04/19 Re: [oss-security] Linux: Disabling network namespaces Simon McVittie

• Earlier messages
• Later messages