oss-security@lists.openwall.com

4

replies

[SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781

started 2018-09-16 21:59:12 UTC

2018-09-18 01:00:04 UTC

Leo Famulari

0

replies

[SBA-ADV-20180420-01] CVE-2018-13982: Smarty 3.1.32 or below Trusted-Directory Bypass via Path Traversal

started 2018-09-17 22:15:52 UTC

2018-09-17 22:15:52 UTC

SBA Research Advisory

0

replies

haskell-tls: Inconsistencies in answers to RSA errors (possiby Bleichenbacher/ROBOT attack)

started 2018-09-15 19:07:58 UTC

2018-09-15 19:07:58 UTC

Hanno Böck

0

replies

CVE-2018-1330: Libprocess might crash when decoding malformed HTTP requests or malformed JSON payload.

started 2018-09-13 19:52:53 UTC

2018-09-13 19:52:53 UTC

Alex R

0

replies

OpenSC release 0.19.0

started 2018-09-13 18:12:01 UTC

2018-09-13 18:12:01 UTC

Frank Morgner

0

replies

Cleartext passwords external services in Squash TM's web interface

started 2018-09-13 10:48:28 UTC

2018-09-13 10:48:28 UTC

Guillaume Quéré

1

reply

tdesktop leaks user IP address

started 2018-09-11 17:51:23 UTC

2018-09-12 18:33:19 UTC

Daniel Kahn Gillmor

0

replies

[SECURITY] New security advisory CVE-2018-8041 released for Apache Camel

started 2018-09-12 15:05:25 UTC

2018-09-12 15:05:25 UTC

Andrea Cosentino

0

replies

Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5

started 2018-09-11 17:13:56 UTC

2018-09-11 17:13:56 UTC

Larry W. Cashdollar

38

replies

More Ghostscript Issues: Should we disable PS coders in policy.xml by default?

started 2018-08-21 17:46:26 UTC

2018-09-11 11:04:36 UTC

Marcus Meissner

2

replies

[ANNOUNCE] CVE-2018-11775: ActiveMQ Client - Missing TLS Hostname Verification

started 2018-09-10 23:40:05 UTC

2018-09-11 00:07:17 UTC

Solar Designer

0

replies

perl Crypt::JWT vulnerability

started 2018-09-07 04:54:02 UTC

2018-09-07 04:54:02 UTC

Jeremy Choi

1

reply

CVE-2018-6554 and CVE-2018-6555: Linux kernel: irda memory leak and use after free

started 2018-09-04 21:47:06 UTC

2018-09-05 13:47:46 UTC

Vladis Dronov

0

replies

[SECURITY ADVISORY] curl: NTLM password overflow via integer overflow

started 2018-09-05 10:55:21 UTC

2018-09-05 10:55:21 UTC

Daniel Stenberg

0

replies

glusterfs: multiple flaws

started 2018-09-04 13:31:11 UTC

2018-09-04 13:31:11 UTC

Siddharth Sharma

4

replies

Linux kernel: CVE-2018-14619 kernel: crash (possible privesc) in kernel crypto subsystem.

started 2018-08-28 11:49:14 UTC

2018-09-03 14:26:53 UTC

Wade Mealing

0

replies

CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write

started 2018-09-02 23:40:05 UTC

2018-09-02 23:40:05 UTC

P J P

1

reply

[ANNOUNCE] Apache Traffic Server vulnerability with header variable access in the ESI plugin - CVE-2018-8040

started 2018-08-29 03:39:51 UTC

2018-08-29 13:02:12 UTC

Bryan Call

0

replies

[ANNOUNCE] Apache Traffic Server vulnerability with multiple HTTP smuggling and cache poisoning attacks - CVE-2018-8004

started 2018-08-29 13:00:23 UTC

2018-08-29 13:00:23 UTC

Bryan Call

0

replies

[ANNOUNCE] Apache Traffic Server vulnerability with multi-range requests - CVE-2018-8005

started 2018-08-29 12:58:46 UTC

2018-08-29 12:58:46 UTC

Bryan Call

0

replies

[ANNOUNCE] Apache Traffic Server vulnerability with method ACLs - CVE-2018-1318

started 2018-08-29 12:57:09 UTC

2018-08-29 12:57:09 UTC

Bryan Call

0

replies

[ANNOUNCE] Apache Traffic Server vulnerability with an invalid TLS handshake - CVE-2018-8022

started 2018-08-29 03:39:46 UTC

2018-08-29 03:39:46 UTC

Bryan Call

1

reply

CVE-2018-10938: Linux kernel: net: infinite loop in net/ipv4/cipso_ipv4.c:cipso_v4_optptr() allows a remote DoS

started 2018-08-27 14:25:15 UTC

2018-08-28 17:55:30 UTC

Greg KH

0

replies

CVE-2018-15746 Qemu: seccomp: blacklist is not applied to all threads

started 2018-08-28 15:52:34 UTC

2018-08-28 15:52:34 UTC

P J P

1

reply

Linux kernel: FS_IOC_FSSETXATTR will lead to EXT4-fs shut down

started 2018-08-28 13:27:50 UTC

2018-08-28 14:45:37 UTC

Xiami

1

reply

Another OpenSSH "user enumeration"

started 2018-08-27 21:27:30 UTC

2018-08-28 12:55:23 UTC

Marcus Meissner

0

replies

Another "user enumeration" in Dropbear

started 2018-08-28 00:10:55 UTC

2018-08-28 00:10:55 UTC

s***@gmx.ch

5

replies

About OpenSSH "user enumeration" / CVE-2018-15473

started 2018-08-24 05:58:20 UTC

2018-08-26 17:00:58 UTC

Solar Designer

0

replies

[SECURITY] CVE-2018-8028: Bypass ALTER TABLE EXCHANGE PARTITIONS authorization for Hive

started 2018-08-23 21:38:32 UTC

2018-08-23 21:38:32 UTC

Sergio Peña

6

replies

OpenSSH Username Enumeration

started 2018-08-15 21:28:45 UTC

2018-08-23 16:36:05 UTC

Qualys Security Advisory