Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

Atop 2.11 heap problems(openwall.com)

157 points by baggy_trough 1 year ago | 70 comments

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

Libpng 1.6.51: Four buffer overflow vulnerabilities fixed(openwall.com)

23 points by ledoge 11 months ago | 5 comments

CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child(openwall.com)

119 points by andreyv 2 years ago | 38 comments

From xz to ibus: more questionable tarballs(openwall.com)

159 points by nateb2022 2 years ago | 123 comments

Several vulnerabilities have been discovered in the Linux kernel(lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques(pwning.tech)

372 points by Unroll0201 2 years ago | 102 comments

GitHub repository with a universal local privilege escalation proof-of-concept exploit for CVE-2024-1086 in Linux nf_tables, affecting kernels v5.14 to v6.6.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

Multiple security issues in GNU Screen(openwall.com)

397 points by st_goliath 1 year ago | 236 comments

An oss-security mailing list post from SUSE disclosing multiple security issues in GNU Screen, including a local root exploit in setuid-root Screen 5.0.0 installations.

Linux Crisis Tools(brendangregg.com)

450 points by samber 2 years ago | 100 comments

Brendan Gregg blog post listing Linux "crisis tools" packages (procps, sysstat, bpfcc-tools, etc.) to preinstall on servers for diagnosing performance outages.

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.