From xz to ibus: more questionable tarballs(openwall.com)

159 points by nateb2022 2 years ago | 123 comments

Mozilla VPN: CVE-2023-4104: vpndaemon wrongly implements Polkit authentication(openwall.com)

246 points by rkta 3 years ago | 107 comments

Atop 2.11 heap problems(openwall.com)

157 points by baggy_trough 1 year ago | 70 comments

Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

Musl 1.2.4 adds TCP DNS fallback(openwall.com)

223 points by goranmoomin 3 years ago | 112 comments

Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)

4122 points by rkta 2 years ago | 1526 comments

Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.