CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child(openwall.com)

119 points by andreyv 2 years ago | 38 comments

Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)

4122 points by rkta 2 years ago | 1526 comments

Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.

Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

Musl 1.2.4 adds TCP DNS fallback(openwall.com)

223 points by goranmoomin 3 years ago | 112 comments

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

Libpng 1.6.51: Four buffer overflow vulnerabilities fixed(openwall.com)

23 points by ledoge 11 months ago | 5 comments