Mozilla VPN: CVE-2023-4104: vpndaemon wrongly implements Polkit authentication(openwall.com)

246 points by rkta 3 years ago | 107 comments

Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

Atop 2.11 heap problems(openwall.com)

157 points by baggy_trough 1 year ago | 70 comments

CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child(openwall.com)

119 points by andreyv 2 years ago | 38 comments

Musl 1.2.4 adds TCP DNS fallback(openwall.com)

223 points by goranmoomin 3 years ago | 112 comments

From xz to ibus: more questionable tarballs(openwall.com)

159 points by nateb2022 2 years ago | 123 comments

Several vulnerabilities have been discovered in the Linux kernel(lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 4 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

OpenSSH 10.6(openssh.org)

97 points by torcete 19 days ago | 23 comments

Release notes for OpenSSH 10.6, noting many AI-assisted security bug reports, more frequent releases, and an upcoming deprecation of scp's -R flag.

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq(lists.thekelleys.org.uk)

358 points by chizhik-pyzhik 5 months ago | 199 comments

Mailing list post by dnsmasq maintainer Simon Kelley announcing six CERT CVEs for long-standing dnsmasq vulnerabilities and a patched 2.92rel2 release.