Dirtyfrag: Universal Linux LPE(openwall.com)
785 points by flipped | 310 comments
An oss-security mailing list post disclosing "Dirty Frag," a Linux local privilege escalation chaining two kernel bugs, released unpatched after the embargo broke.
#oss-security on Hacker News
4 stories tagged oss-security, newest first.
For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)
565 points by ori_b | 477 comments
An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.
Multiple security issues in GNU Screen(openwall.com)
397 points by st_goliath | 236 comments
An oss-security mailing list post from SUSE disclosing multiple security issues in GNU Screen, including a local root exploit in setuid-root Screen 5.0.0 installations.
Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)
4122 points by rkta | 1526 comments
Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.