oss-sec: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

237 messages starting Apr 02 19 and ending Jun 30 19
Date index | Thread index | Author index

• CVE-2019-0196: mod_http2, read-after-free on a string compare Daniel Ruggeri (Apr 02)
• CVE-2019-0197: mod_http2, possible crash on late upgrade Daniel Ruggeri (Apr 02)
• CVE-2019-0211: Apache HTTP Server privilege escalation from modules' scripts Daniel Ruggeri (Apr 02)
• CVE-2019-0215: mod_ssl access control bypass Daniel Ruggeri (Apr 02)
• CVE-2019-0217: mod_auth_digest access control bypass Daniel Ruggeri (Apr 02)
• CVE-2019-0220: URL normalization inconsistincies Daniel Ruggeri (Apr 02)
• CVE-2019-3882: Linux kernel: DoS through vfio/type1 DMA mappings Vladis Dronov (Apr 03)
• CVE-2019-3837: RHEL6: memory leak in tcp_recvmsg() with NET_DMA Vladis Dronov (Apr 03)
• Multiple vulnerabilities in Jenkins plugins Daniel Beck (Apr 03)
  • Re: Multiple vulnerabilities in Jenkins plugins Daniel Beck (Apr 13)
  • <Possible follow-ups>
  • Multiple vulnerabilities in Jenkins plugins Daniel Beck (Apr 17)
  • Multiple vulnerabilities in Jenkins plugins Daniel Beck (Apr 30)
  • Multiple vulnerabilities in Jenkins plugins Daniel Beck (May 21)
  • Multiple vulnerabilities in Jenkins plugins Daniel Beck (May 31)
  • Multiple vulnerabilities in Jenkins plugins Daniel Beck (Jun 11)
• Linux kernel < 4.8 local generic ASLR bypass for setuid binaries Federico Manuel Bento (Apr 03)
  • Re: Linux kernel < 4.8 local generic ASLR - CVE-ID Vladis Dronov (Apr 15)
    • Re: Linux kernel < 4.8 local generic ASLR - another CVE-ID Vladis Dronov (Apr 18)
      • Re: Linux kernel < 4.8 local generic ASLR - another CVE-ID Solar Designer (May 22)
• XSS in roundup bug tracker 404 page Hanno Böck (Apr 05)
  • Re: XSS in roundup bug tracker 404 page Henri Salo (Apr 07)
• CVE-2019-3887 Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS P J P (Apr 07)
• DLL injection in Go < 1.12.2 [CVE-2019-9634] Jason A. Donenfeld (Apr 08)
• [OSSA-2019-002] neutron-openvswitch-agent: Unable to install new flows on compute nodes when having broken security group rules (CVE-2019-10876) Gage Hugo (Apr 09)
• Multiple vulnerabilities in Jenkins Daniel Beck (Apr 10)
• wpa_supplicant/hostapd: SAE side-channel attacks Jouni Malinen (Apr 10)
• wpa_supplicant/hostapd: EAP-pwd side-channel attack Jouni Malinen (Apr 10)
• hostapd: SAE confirm missing state validation Jouni Malinen (Apr 10)
• wpa_supplicant/hostapd: EAP-pwd missing commit validation Jouni Malinen (Apr 10)
• CVE-2019-0216, CVE-2019-0229 vulnerabilities affecting Apache Airflow <= 1.10.2 webserver component Ash Berlin-Taylor (Apr 10)
• WebKitGTK and WPE WebKit Security Advisory WSA-2019-0002 Michael Catanzaro (Apr 11)
• [CVE-2019-0231] MINA SSLFilter security Issue Emmanuel Lecharny (Apr 14)
• CVE-2019-3893: Foreman: Compute resource credentials exposed during deletion on API Tomer Brisker (Apr 14)
• kernel address leak in drivers/media/dvb-frontends/ascot2e.c - linux 4.14.111 LTS Fuqian Huang (Apr 16)
  • Linux kernel address leaks Solar Designer (Apr 18)
    • Re: Linux kernel address leaks Greg KH (Apr 18)
• 3 pacemaker security flaws Huzaifa Sidhpurwala (Apr 17)
  • Re: 3 pacemaker security flaws Jan Pokorný (Apr 18)
• urllib3: adds system certificates to ssl_context Havoc Pennington (Apr 17)
  • Re: urllib3: adds system certificates to ssl_context Havoc Pennington (Apr 19)
• Announce: OpenSSH 8.0 released Damien Miller (Apr 17)
• CVE-2019-10691: JSON encoder in Dovecot 2.3 incorrecty assert-crashes when encountering invalid UTF-8 characters. Aki Tuomi (Apr 18)
• Security issues in snapcraft snap-confine set*id binary Matthias Gerstner (Apr 18)
  • Re: Security issues in snapcraft snap-confine set*id binary Jamie Strandboge (Apr 25)
• wpa_supplicant/hostapd: EAP-pwd message reassembly issue with unexpected fragment Jouni Malinen (Apr 18)
  • Re: wpa_supplicant/hostapd: EAP-pwd message reassembly issue with unexpected fragment Salvatore Bonaccorso (Apr 26)
• Linux kernel < 4.14.111 drivers/media/dvb-frontends/cxd2841er.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/media/dvb-frontends/helene.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/media/dvb-frontends/horus3a.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/media/pci/saa7164/saa7164-core.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/message/fusion/mptbase.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/net/ethernet/chelsio/libcxgb/libcxgb_ppm.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/message/fusion/mptscsih.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/net/ethernet/netronome/nfp/nfp_net_debugfs.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/net/wan/lmc/lmc_main.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/nfc/nfcmrvl/usb.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/scsi/cxgbi/cxgb3i/cxgb3i.c kernel address dumps to user space Fuqian Huang (Apr 18)
• Linux kernel < 4.14.111 drivers/scsi/cxgbi/cxgb4i/cxgb4i.c kernel address dumps to user space Fuqian Huang (Apr 18)
• [CVE-2019-0218] Apache Pony Mail (incubating) Reflected XSS Daniel Gruno (Apr 20)
• Nokogiri security update v1.10.3 Mike Dalessio (Apr 22)
  • Re: Nokogiri security update v1.10.3 Florian Weimer (Apr 23)
    • Re: Nokogiri security update v1.10.3 Mike Dalessio (Apr 23)
• Issues fixed in previous releases of Apache Zeppelin 0.7.3 and 0.8.0 (CVE-2017-12619 CVE-2018-1317 CVE-2018-1328) Apache Security Team (Apr 23)
• fprintd: found storing user fingerprints without encryption Seong-Joong Kim (Apr 23)
  • Re: fprintd: found storing user fingerprints without encryption Seong-Joong Kim (May 07)
    • Re: Re: fprintd: found storing user fingerprints without encryption Roman Drahtmueller (May 08)
      • Re: Re: fprintd: found storing user fingerprints without encryption Noel Kuntze (May 08)
      • Re: Re: fprintd: found storing user fingerprints without encryption Seong-Joong Kim (May 08)
      • Re: Re: fprintd: found storing user fingerprints without encryption Noel Kuntze (May 08)
      • Message not available
      • Re: Re: fprintd: found storing user fingerprints without encryption Seong-Joong Kim (May 08)
      • Re: Re: fprintd: found storing user fingerprints without encryption Roman Drahtmueller (May 08)
      • Re: Re: fprintd: found storing user fingerprints without encryption Seong-Joong Kim (May 08)
      • Re: Re: fprintd: found storing user fingerprints without encryption halfdog (May 10)
      • Re: Re: fprintd: found storing user fingerprints without encryption Seong-Joong Kim (May 10)
      • Re: Re: fprintd: found storing user fingerprints without encryption Seong-Joong Kim (May 11)
      • Re: fprintd: found storing user fingerprints without encryption halfdog (May 14)
      • Re: fprintd: found storing user fingerprints without encryption halfdog (May 14)
• [SECURITY] CVE-2019-0223: Apache Qpid Proton TLS Man in the Middle Vulnerability Robbie Gemmell (Apr 23)
• CVE-2018-11802: Apache Solr authorization bug vulnerability disclosure Noble Paul (Apr 24)
  • Re: CVE-2018-11802: Apache Solr authorization bug vulnerability disclosure Ishan Chattopadhyaya (Apr 24)
• CVE Request: golang-seccomp incorrectly handles multiple syscall arguments Jamie Strandboge (Apr 24)
  • Re: CVE Request: golang-seccomp incorrectly handles multiple syscall arguments Jamie Strandboge (Apr 24)
    • Re: CVE Request: golang-seccomp incorrectly handles multiple syscall arguments Jamie Strandboge (Apr 25)
• Multiple BIND vulnerabilities disclosed (CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468) Michael McNally (Apr 24)
  • Re: Multiple BIND vulnerabilities disclosed (CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468) Peter Korsgaard (Apr 25)
    • Re: Multiple BIND vulnerabilities disclosed (CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468) andreas (Apr 27)
      • Re: Multiple BIND vulnerabilities disclosed (CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468) Peter Korsgaard (Apr 27)
      • Re: Multiple BIND vulnerabilities disclosed (CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468) andreas (Apr 27)
• CVE-2019-3900 Kernel: vhost_net: infinite loop while receiving packets leads to DoS P J P (Apr 25)
• Linux kernel: no permission check during open() time of /proc/[pid]/maps in kernels < 3.18 Matthias Gerstner (Apr 25)
  • Re: Linux kernel: no permission check during open() time of /proc/[pid]/maps in kernels < 3.18 Solar Designer (Apr 25)
• [CVE-2019-0186] The input fields of the Chat Room demo are vulnerable to Cross-Site Scripting (XSS) attacks Neil Griffin (Apr 25)
• Linux kernel: multiple issues Jann Horn (Apr 29)
  • Re: Linux kernel: multiple issues Salvatore Bonaccorso (Apr 29)
    • Re: Linux kernel: multiple issues Salvatore Bonaccorso (Apr 30)
• [CVE-2019-9826] phpBB Native Fulltext Search denial of service Colin Snover (Apr 29)
• [SECURITY] New security advisory CVE-2019-0194 released for Apache Camel Andrea Cosentino (Apr 30)
• Cross Site Scripting | Alkacon OpenCMS v10.5.4 and before Pramod Rana (Apr 30)
• Spoofing OpenPGP and S/MIME Signatures in Emails (multiple clients) Marcus Brinkmann (Apr 30)
• Multiple vulnerabilities in Dovecot 2.3 Aki Tuomi (Apr 30)
• [SECURITY] CVE-2019-0213: Apache Archiva Stored XSS Martin (Apr 30)
• [SECURITY] CVE-2019-0214: Apache Archiva arbitrary file write and delete on the server Martin (Apr 30)
• [ANNOUNCE] CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability fix Lou DeGenaro (May 01)
• CVE-2019-11683: "GRO packet of death" issue in the Linux kernel Andrey Konovalov (May 02)
  • Re: CVE-2019-11683: "GRO packet of death" issue in the Linux kernel Greg KH (May 05)
• [CVE-2018-17201]: Apache Commons Imaging information disclosure vulnerability Bruno P. Kinoshita (May 03)
• [CVE-2018-17202]: Apache Commons Imaging information disclosure vulnerability Bruno P. Kinoshita (May 03)
• XSS via EXIF tag in Serendipity blog Hanno Böck (May 03)
  • Re: XSS via EXIF tag in Serendipity blog Henri Salo (May 10)
• Open source tool | Lets Map Your Network Pramod Rana (May 05)
• CSV Injection | Alkacon OpenCMS v10.5.4 and before Pramod Rana (May 05)
• Cross Site Scripting | WolfCMS v0.8.3.1 and before Pramod Rana (May 05)
• [SECURITY] New security advisory for CVE-2019-0226 released for Apache Karaf Jean-Baptiste Onofré (May 06)
• [CVE-2018-11800] and [CVE-2018-11801] Apache Fineract SQL Injection Vulnerabilities fixed in v1.3.0 Michael Vorburger (May 09)
• Re: System Down: A systemd-journald exploit Qualys Security Advisory (May 10)
• Xen Security Advisory 297 v1 (CVE-2018-12126,CVE-2018-12127,CVE-2018-12130,CVE-2019-11091) - Microarchitectural Data Sampling speculative side channel Xen . org security team (May 14)
• Singularity 3.1.0: CVE-2019-11328: namespace privilege escalation and arbitrary file corruption Matthias Gerstner (May 16)
• Potential DoS vulnerability in CGit Wire Snark (May 19)
  • Re: Potential DoS vulnerability in CGit Wire Snark (May 19)
  • Re: Potential DoS vulnerability in CGit Jason A. Donenfeld (May 19)
• [CVE-2019-10076] Apache JSPWiki Cross-site scripting vulnerability Juan Pablo Santos Rodríguez (May 19)
• [CVE-2019-10077] Apache JSPWiki Cross-site scripting vulnerability Juan Pablo Santos Rodríguez (May 19)
• [CVE-2019-10078] Apache JSPWiki Cross-site scripting vulnerability Juan Pablo Santos Rodríguez (May 19)
• [CVE-2019-0201] Information disclosure vulnerability in Apache ZooKeeper Andor Molnar (May 20)
• WebKitGTK and WPE WebKit Security Advisory WSA-2019-0003 Michael Catanzaro (May 20)
• CVE-2019-12155 QEMU: qxl: null pointer dereference while releasing spice resources P J P (May 22)
• [SECURITY ADVISORY] curl: Integer overflows in curl_url_set Daniel Stenberg (May 22)
• [SECURITY ADVISORY] curl: TFTP receive buffer overflow Daniel Stenberg (May 22)
• CVE-2019-12247 QEMU: qemu-guest-agent: integer overflow while running guest-exec command P J P (May 22)
• CVE-2019-10142 linux kernel: integer overflow in ioctl handling of fsl hypervisor Wade Mealing (May 22)
  • Re: CVE-2019-10142 linux kernel: integer overflow in ioctl handling of fsl hypervisor Greg KH (May 22)
• [SECURITY] New security advisory CVE-2019-0188 released for Apache Camel Andrea Cosentino (May 24)
• [SECURITY][ERRATA-CORRIGE] New security advisory CVE-2019-0188 released for Apache Camel Andrea Cosentino (May 24)
• CVE-2018-15664: docker (all versions) is vulnerable to a symlink-race attack Aleksa Sarai (May 27)
• CVE-2018-8029: Apache Hadoop Privilege escalation vulnerability Akira Ajisaka (May 30)
• CVE-2019-3846：Marvell Wifi Driver mwifiex mwifiex_update_bss_desc_with_ie Heap Overflow huangwen (May 30)
• [ANNOUNCE] Security regression in Kubernetes kubelet v1.13.6 and v1.14.2 only - CVE-2019-11245 Brandon Philips (May 31)
  • Re: [ANNOUNCE] Security regression in Kubernetes kubelet v1.13.6 and v1.14.2 only - CVE-2019-11245 Tim Pepper (Jun 08)
• Marvell Wifi Driver mwifiex_uap_parse_tail_ies Heap Overflow huangwen (Jun 01)
  • Re: Marvell Wifi Driver mwifiex_uap_parse_tail_ies Heap Overflow Solar Designer (Jun 04)
• kernel: CVE-2018-16871 nfs: NULL pointer dereference due to an anomalized NFS message sequence Wade Mealing (Jun 02)
• Django: CVE-2019-12308 AdminURLFieldWidget XSS (plus patched bundled jQuery for CVE-2019-11358) Carlton Gibson (Jun 03)
• Crash / fix in bzip2 Federico Mena Quintero (Jun 03)
  • Re: Crash / fix in bzip2 Thomas Deutschmann (Jun 04)
• CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Heiko Schlittermann (Jun 04)
  • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Simon McVittie (Jun 04)
    • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Heiko Schlittermann (Jun 04)
  • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Heiko Schlittermann (Jun 04)
  • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Solar Designer (Jun 04)
    • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Heiko Schlittermann (Jun 04)
    • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Heiko Schlittermann (Jun 05)
      • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Heiko Schlittermann (Jun 05)
      • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Qualys Security Advisory (Jun 05)
      • Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit Qualys Security Advisory (Jun 06)
• Re: Using quilt on untrusted RPM spec files Vladimir D. Seleznev (Jun 04)
• pam-u2f: CVE-2019-12210: debug_file file descriptor leak, CVE-2019-12209: symlink attack on u2f_keys leading to possible information leak Matthias Gerstner (Jun 05)
• CVE-2019-12749: DBusServer DBUS_COOKIE_SHA1 authentication bypass Simon McVittie (Jun 11)
• X41 D-Sec GmbH Security Advisory X41-2019-001: Heap-based buffer overflow in Thunderbird X41 D-Sec GmbH Advisories (Jun 13)
  • Re: X41 D-Sec GmbH Security Advisory X41-2019-001: Heap-based buffer overflow in Thunderbird Brandon Perry (Jun 14)
    • Re: X41 D-Sec GmbH Security Advisory X41-2019-001: Heap-based buffer overflow in Thunderbird zugtprgfwprz (Jun 14)
      • Re: X41 D-Sec GmbH Security Advisory X41-2019-001: Heap-based buffer overflow in Thunderbird Stuart D. Gathman (Jun 14)
• X41 D-Sec GmbH Security Advisory X41-2019-002: Heap-based buffer overflow in Thunderbird X41 D-Sec GmbH Advisories (Jun 13)
• X41 D-Sec GmbH Security Advisory X41-2019-003: Stack-based buffer overflow in Thunderbird X41 D-Sec GmbH Advisories (Jun 13)
• X41 D-Sec GmbH Security Advisory X41-2019-004: Type confusion in Thunderbird X41 D-Sec GmbH Advisories (Jun 13)
• Apache::Session's use of md5 and more Raphael Geissert (Jun 15)
  • Re: Apache::Session's use of md5 and more Solar Designer (Jun 15)
    • Re: Apache::Session's use of md5 and more Raphael Geissert (Jun 17)
• Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alex Gaynor (Jun 15)
  • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Greg KH (Jun 15)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Yves-Alexis Perez (Jun 21)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Simon McVittie (Jun 21)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Moritz Muehlenhoff (Jun 21)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Ian Zimmerman (Jun 21)
      • Re: Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Simon McVittie (Jun 21)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Greg KH (Jun 21)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Yves-Alexis Perez (Jun 21)
  • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 15)
  • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Hanno Böck (Jun 15)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alex Gaynor (Jun 15)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 15)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz David A. Wheeler (Jun 15)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alan Coopersmith (Jun 15)
  • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Solar Designer (Jun 16)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 16)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Solar Designer (Jun 16)
  • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Robert Watson (Jun 17)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alexander Potapenko (Jun 17)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Jakub Wilk (Jun 23)
  • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Marcus Meissner (Jun 17)
    • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Dmitry Vyukov (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Stuart D. Gathman (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Matthew Fernandez (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz David A. Wheeler (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Simon McVittie (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alex Gaynor (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Seth Arnold (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alex Gaynor (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alexander Potapenko (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Matthew Fernandez (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Jeff Law (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Pascal Cuoq (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Jeff Law (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Jeffrey Walton (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Florian Weimer (Jun 25)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Martin Carpenter (Jun 26)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Alexander Potapenko (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz Bob Friesenhahn (Jun 24)
      • Re: Thousands of vulnerabilities, almost no CVEs: OSS-Fuzz John Haxby (Jun 24)
• GraphicsMagick 1.3.32 security fixes, plus one of special mention Bob Friesenhahn (Jun 15)
• Linux and FreeBSD Kernel: Multiple TCP-based remote denial of service issues Security Report (Jun 17)
  • Re: Linux and FreeBSD Kernel: Multiple TCP-based remote denial of service issues Greg KH (Jun 17)
    • Re: Linux and FreeBSD Kernel: Multiple TCP-based remote denial of service issues Loganaden Velvindron (Jun 17)
      • Re: Linux and FreeBSD Kernel: Multiple TCP-based remote denial of service issues Nicholas Luedtke (Jun 18)
• [CVE-2019-10085] Apache Allura XSS vulnerability Dave Brondsema (Jun 18)
• [ANNOUNCE] Incomplete fixes for CVE-2019-1002101, kubectl cp potential directory traversal - CVE-2019-11246 Joel Smith (Jun 21)
• PowerDNS Security Advisories 2019-04 and 2019-05 Erik Winkels (Jun 21)
• curl: Windows OpenSSL engine code injection Daniel Stenberg (Jun 23)
  • Re: curl: Windows OpenSSL engine code injection Jakub Wilk (Jun 23)
• CVE-2019-12817: Linux kernel: powerpc: Unrelated processes may be able to read/write to each other's virtual memory Michael Ellerman (Jun 24)
• linux-distros membership application - Microsoft Sasha Levin (Jun 26)
  • Re: linux-distros membership application - Microsoft Greg KH (Jun 27)
  • Re: linux-distros membership application - Microsoft Solar Designer (Jun 27)
    • Re: linux-distros membership application - Microsoft Greg KH (Jun 27)
      • Re: linux-distros membership application - Microsoft Tyler Hicks (Jun 27)
      • Re: linux-distros membership application - Microsoft Greg KH (Jun 27)
    • Re: linux-distros membership application - Microsoft Anthony Liguori (Jun 27)
      • Re: linux-distros membership application - Microsoft Tyler Hicks (Jun 27)
      • Re: linux-distros membership application - Microsoft John Haxby (Jun 27)
    • Re: linux-distros membership application - Microsoft Sasha Levin (Jun 27)
      • Re: linux-distros membership application - Microsoft Solar Designer (Jun 28)
      • Re: linux-distros membership application - Microsoft Sasha Levin (Jun 28)
      • Re: linux-distros membership application - Microsoft Simon Lees (Jun 30)
• Irssi 1.2.1/1.1.3/1.0.8: CVE-2019-13045 Ailin Nemui (Jun 29)

Previous period

Next period