
CachyOS February 2024 Release - Linux.Community
Critical vulnerability affecting most Linux distros allows for bootkits
https://linux.community/post/520530
Fresh curl tomorrow will patch 'worst' security flaw in ages | TheRegister
https://linux.community/post/144549

Fresh curl tomorrow will patch 'worst' security flaw in ages | TheRegister - Linux.Community
“Curl 8.4.0 will hit at around 0600 UTC (0800 CEST, 0700 BST, 0200 EST, 2300
PDT) on October 11 and deal with CVE-2023-38545, which affects both libcurl and
the curl tool, and CVE-2023-38546, which only affects libcurl…”
Has anyone tried the POC’s for this on their systems? Just curious as to your success rate. I’ve been running 3 slightly difference POC’s for the past 4 days and I’m still yet to drop to root on any of the 3 systems I’m trying on.
CVE-2023-4911: Looney Tunables - Local Privilege Escalation in the glibc’s ld.so | Qualys Security Blog
https://linux.community/post/138252

CVE-2023-4911: Looney Tunables - Local Privilege Escalation in the glibc’s ld.so | Qualys Security Blog - Linux.Community
Critical vulnerabilities in Exim threaten over 250k email servers worldwide
https://linux.community/post/127494

Critical vulnerabilities in Exim threaten over 250k email servers worldwide - Linux.Community
“Remote code execution requiring no authentication fixed. 2 other RCEs remain
unpatched…”
Temporary suspension of automatic snap registration following security incident
https://linux.community/post/126263
Temporary suspension of automatic snap registration following security incident - Linux.Community
“On September 28, 2023, the Snap Store team was notified of a potential security
incident. A number of snap users reported several recently published and
potentially malicious snaps…”
CVE-2023-38408: REMOTE CODE EXECUTION IN OPENSSH'S FORWARDED SSH-AGENT
https://linux.community/post/13962
CVE-2023-38408: REMOTE CODE EXECUTION IN OPENSSH'S FORWARDED SSH-AGENT - Linux.Community