Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

Atop 2.11 heap problems(openwall.com)

157 points by baggy_trough 1 year ago | 70 comments

Out-of-bounds read and write in the glibc's qsort()(openwall.com)

132 points by cpeterso 2 years ago | 104 comments

Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)

4122 points by rkta 2 years ago | 1526 comments

Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

From xz to ibus: more questionable tarballs(openwall.com)

159 points by nateb2022 2 years ago | 123 comments