From xz to ibus: more questionable tarballs(openwall.com)

159 points by nateb2022 2 years ago | 123 comments

Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)

4122 points by rkta 2 years ago | 1526 comments

Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.

Atop 2.11 heap problems(openwall.com)

157 points by baggy_trough 1 year ago | 70 comments

Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child(openwall.com)

119 points by andreyv 2 years ago | 38 comments

Libpng 1.6.51: Four buffer overflow vulnerabilities fixed(openwall.com)

23 points by ledoge 11 months ago | 5 comments

Several Linux kernel vulnerabilities accidentally posted to public mailing list(phoronix.com)

223 points by mrkn1 4 days ago | 89 comments

Phoronix news article reporting that Trend Micro's Zero Day Initiative accidentally posted several unpatched Linux kernel vulnerability reports to the public LKML.

Several vulnerabilities have been discovered in the Linux kernel(lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

My first contribution to Linux(vkoskiv.com)

633 points by vkoskiv 1 year ago | 76 comments

A blog post recounting the author's experience upstreaming their first Linux kernel patch, fixing a hardware issue on a 2005 Fujitsu Lifebook S2110.

Maybe you shouldn't install new software for a bit(xeiaso.net)

813 points by psxuaw 5 months ago | 427 comments

Short blog post by Xe Iaso noting new Linux kernel vulnerabilities and advising a week-long pause on installing new software due to supply chain attack risk.

Multiple security issues in GNU Screen(openwall.com)

397 points by st_goliath 1 year ago | 236 comments

An oss-security mailing list post from SUSE disclosing multiple security issues in GNU Screen, including a local root exploit in setuid-root Screen 5.0.0 installations.