Dirtyfrag: Universal Linux LPE(openwall.com)
785 points by flipped | 310 comments
An oss-security mailing list post disclosing "Dirty Frag," a Linux local privilege escalation chaining two kernel bugs, released unpatched after the embargo broke.
openwall.com on Hacker News
14 stories on the front page, newest first. Scroll down to watch the site change over time.
For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)
565 points by ori_b | 477 comments
An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.
Multiple security issues in GNU Screen(openwall.com)
397 points by st_goliath | 236 comments
An oss-security mailing list post from SUSE disclosing multiple security issues in GNU Screen, including a local root exploit in setuid-root Screen 5.0.0 installations.
Atop 2.11 heap problems(openwall.com)
157 points by baggy_trough | 70 comments
Rsync vulnerabilities(openwall.com)
100 points by pavodive | 14 comments
Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)
4122 points by rkta | 1526 comments
Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.
