@oss_security

@Openwall oss-security mailing list thread summaries, currently maintained by @solardiz. Originally setup and maintained as an automated feed by @eugeneteo.

openwall.com/lists/oss-security/
Joined August 2009
  • Tweets23.9K
  • Following9
  • Followers4.7K
Declaring tweet bankruptcy: this account summarized almost every topic from the oss-security mailing list until July 22, 2026 inclusive, but not anymore. The manual tweets became more numerous lately and so negatively impacted other efforts. Further tweets will be very selective.
1
6
1,093
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill openwall.com/lists/oss-secur… bugs have been around for 10-21 years DirtyAH6 theoretically (unlikely/with difficulty) remote-groomable to remote root
5
1
16
2,306
22 recent Linux kernel CVEs with exploits brought to our attention by @nebusecurity openwall.com/lists/oss-secur…
1
10
27
2,847
OpenRGB: Remote System Compromise via Custom Network Protocol openwall.com/lists/oss-secur… Suite for controlling RGB LED lighting devices on Linux, MacOS, Windows. The daemon runs as root and implements a TCP networking protocol listening on wildcard IP 0.0.0.0 port 6742 by default.
1
3
1,141
Emacs arbitrary code execution upon opening a file openwall.com/lists/oss-secur… a related older finding and "a workaround patch" and "bigger rework" in upstream repo are referenced Emacs zero-click local command execution via TRAMP openwall.com/lists/oss-secur… fix by maintainer attached
1
558
rsync 3.5.0 released with fixes for 33 CVEs openwall.com/lists/oss-secur…
7
8
1,706
CVE-2026-61899: Apache Tapestry: Possible classpath file download through URL manipulation openwall.com/lists/oss-secur… Severity: critical Tapestry is a component-oriented framework for creating highly scalable web applications in Java
1
636
CVE-2026-64561,Zapscape: Linux kernel: Guest-to-Host Escape in KVM/x86 openwall.com/lists/oss-secur… UAF in the shadow MMU emulation, specifically in the recursive "zap" path that runs when shadow pages are reclaimed. Exploit included.
4
8
1,062
CVE-2026-64564: Linux kernel: SCTP ASCONF transport UAF leading to local privilege escalation and container escape openwall.com/lists/oss-secur… Enterprise Linux distros blacklist the SCTP module by default by now
3
8
1,228
rust-in-peace: results from agent-assisted Rust OSS vulnerability research openwall.com/lists/oss-secur… by @scadasl - 63 findings independently confirmed with a dynamic proof-of-concept - 71 reports sent to maintainers - 33 fixes merged or otherwise resolved ...
1
1
6
586
CVE-2026-61484: Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS openwall.com/lists/oss-secur… Severity: critical Lucy search engine library provides full-text search for dynamic programming languages. It is a "loose C" port of Apache Lucene.
7
687
iwd <= 3.12: Stack buffer overflow and more openwall.com/lists/oss-secur… An adjacent attacker can overflow iwd's stack with a spoofed 802.11k request once 17 BSS entries are cached. Hardened builds abort; a representative unhardened ARM32 layout permits saved-LR control.
1
4
461
CVE-2026-66066: Rails: Arbitrary file read and remote code execution in Active Storage variant processing openwall.com/lists/oss-secur… read arbitrary files from the server, including the process environment. That environment typically holds secret_key_base and often credentials
4
705
13 Xen Security Advisories posted on July 28, 2026 openwall.com/lists/oss-secur… Exposure and impact varies, including "unprivileged guest may be able to elevate its privileges to that of the host."
3
503
CVE-2026-64531,OVSwrap: Linux kernel: Local root vuln in Open vSwitch datapath openwall.com/lists/oss-secur… where: - OVS kernel datapath and conntrack/FTP-helper support are present, and - unprivileged user/network namespaces are enabled, or the attacker otherwise has CAP_NET_ADMIN
1
8
1,313
432 Linux kernel CVEs openwall.com/lists/oss-secur… published between 2026-07-19T09:09 and 2026-07-20T16:27 "not feasible to attempt to prioritize individual kernel changes" "You might attempt to process" "Alternatively, you might shrug and wait" "Another approach might be to sit back"
1
2
490
AI+manual analysis of all those Linux kernel CVEs and more by @kerneltoast from @CtrlIQ openwall.com/lists/oss-secur… "none of the 481 CVEs appear to be a true industry-wide emergency, with the caveat that some less-common setups are indeed at risk", a few "Most serious findings"
1
2
597
Knot Resolver 6.3.0 DNS-over-QUIC heap buffer overflow (RCE) openwall.com/lists/oss-secur… reported to CZ.NIC on 2026-06-08 and fixed in Knot Resolver 6.4.1, released on 2026-07-22
2
6
768
Perl CPAN July 2026 disclosures CVE-2026-56016: CGI::Session::ID::md5 before 4.49 generate predictable session ids from low-entropy sources openwall.com/lists/oss-secur… CVE-2025-15646: HTML::Gumbo before 0.19 disclose heap memory via type confusion openwall.com/lists/oss-secur…
1
1
9
2,230
more replies
Perl CPAN Net::DNS through 1.55 CVE-2026-64193: Remote execution injection via EDNS EXTENDED ERROR openwall.com/lists/oss-secur… CVE-2026-64194: DoS via deep DNS compression pointer chains openwall.com/lists/oss-secur…
1
1
353
Perl CPAN CVE-2026-13089: OIDC::Lite through 0.12.1 allow ID Token signature verification bypass via a token-controlled algorithm allowlist openwall.com/lists/oss-secur… CVE-2026-16634: TOML::XS before 0.06 bundle an unsupported and vulnerable version of tomlc99 openwall.com/lists/oss-secur…
196
CVE-2026-53362,CVE-2026-53366: Linux kernel: OOB write in UDP MSG_SPLICE_PAGES fragment-boundary handling openwall.com/lists/oss-secur… LPE. The IPv6 variant needs CONFIG_IPV6=y. IPv4 needs USERNS. Affected from v6.1.
1
1
4
753
"CVE-2026-53362,CVE-2026-53366: Linux kernel: OOB write in UDP MSG_SPLICE_PAGES fragment-boundary handling" exploits and detailed blog post openwall.com/lists/oss-secur…
192
CVE-2026-64600,RefluXFS: Linux kernel: Local Privilege Escalation via XFS reflink direct-I/O race openwall.com/lists/oss-secur… @Qualys Security Advisory by Mythos Foreword Summary Am I affected? Background: XFS, reflink, and copy-on-write Analysis Exploitation Acknowledgments Timeline
Qualys@qualysJul 22
The Qualys Threat Research Unit (TRU) has disclosed RefluXFS, a critical race condition in the Linux kernel's XFS filesystem (v4.11+) affecting about 16.4 million enterprise systems worldwide including RHEL, Amazon Linux, and Fedora. It's been present since kernel version 4.11 circa 2017. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on affected systems, including deployments running SELinux in Enforcing mode. This discovery emerged from a structured research initiative between Qualys and Anthropic, where we integrated Claude Mythos Preview into our manual audit workflow to accelerate our research while maintaining strict human oversight. Read the technical breakdown, affected distributions, and detection details on our blog: blog.qualys.com/vulnerabilit… #LinuxSecurity #CyberSecurity #RefluXFS
1
5
882
Load more