oss-security (Openwall)
Printed in Security Desk · seclists.org
Publishes about 35 a week · last piece Oct 17, 2026
How often
about 35 a week, by the archive: 109 pieces since Sep 25, 2026.
12 weeks agothis week
Latest pieces
- Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
- Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
- Text::CSV_XS versions before 1.65 for Perl (8 CVEs)
- Fwd: X.Org Security Advisory: multiple security issues in X.Org X client libraries
- Infinity Core: Linux Kernel Core LPEs
- CVE-2026-104715: cifs-utils 4.2-7.8 mount-option injection in mount.cifs
- CVE-2026-90910: Apache Answer: Reaction API authorization bypass for restricted content
- CVE-2026-86589: Apache Answer: User Center integration does not revoke first-login sessions after central account suspension
- CVE-2026-79633: Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
- CVE-2026-79624: Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation
- CVE-2026-79620: Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata
- Re: Incomplete fix for Emacs CVE-2026-79992
- NSD 4.15.3 security release
- Multiple TLS libraries: X.509 Name Constraints enforcement bypasses (CVE-2026-34073, CVE-2026-3833, CVE-2026-5263, CVE-2026-33810; CERT/CC VU#573195, VU#948176, VU#410595)
- Upcoming Node.js security release 2026/10/21
In these topics
Pick one in My Edition to read it with its neighbors.