Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

seclists.org

Open Source Security

Get the latest updates from Open Source Security directly as they happen.

Follow now 30 followers

Latest posts

Last updated 1 day ago

CVE-2023-35701: Apache Hive: Arbitrary command execution via JDBC driver

1 day ago

Posted by Stamatis Zampetakis on May 03Severity: moderate Affected versions: - Apache...

Re: escaping terminal control characters (was Re: backdoor in upstream xz/liblzma leading to ssh server compromise)

1 day ago

Posted by Steffen Nurpmeso on May 03Steffen Nurpmeso wrote in <20240502223912.08A3RYp4@steffen%sdaoden.eu&gt |Sam...

Re: escaping terminal control characters (was Re: backdoor in upstream xz/liblzma leading to ssh server compromise)

1 day ago

Posted by Steffen Nurpmeso on May 03Sam James wrote in <87o79nlwxl.fsf ()...

Re: escaping terminal control characters (was Re: backdoor in upstream xz/liblzma leading to ssh server compromise)

1 day ago

Posted by Sam James on May 02Solar Designer <solar () openwall com&gt...

Re: New SMTP smuggling attack

1 day ago

Posted by Solar Designer on May 02Steffen This reads like an excuse...

Re: New SMTP smuggling attack

1 day ago

Posted by Steffen Nurpmeso on May 02Please let me elaborate a little...

CVE-2024-30251: DoS in aiohttp

2 days ago

Posted by Sam Bull on May 02Aiohttp is an HTTP client and...

Multiple vulnerabilities in Jenkins plugins

2 days ago

Posted by Daniel Beck on May 02Jenkins is an open source automation...

CVE-2024-32638: Apache APISIX: Forward-Auth Request Smuggling

2 days ago

Posted by YuanSheng Wang on May 02Severity: low Affected versions: - Apache...

Re: Re: CVEs issued by the Linux kernel CNA

2 days ago

Posted by Greg KH on May 02And, if anyone wants to play...

Re: CVEs issued by the Linux kernel CNA

3 days ago

Posted by Alan Coopersmith on May 01Quantifying this a bit more now...

CVE-2024-32114: Apache ActiveMQ: Jolokia and REST API were not secured with default configuration

3 days ago

Posted by Jean-Baptiste Onofré on May 01Severity: low Affected versions: - Apache...