Collaborate Disseminate
An Indian security researcher has discovered a highly critical flaw in X.Org Server package that impacts OpenBSD and most Linux distributions, including Debian, Ubuntu, CentOS, Red Hat, and Fedora.
Xorg X server is a popular open-source implementation… Continue reading New Privilege Escalation Flaw Affects Most Linux Distributions
We’ve all seen this kind of entries in our firewall log, which Peter Hansteen has termed the Hail Mary Cloud (or, at least, a milder version of it):
rule 5/0(match): block in on eth0: 115.238.245.2.33090 > 123.456.789.012… Continue reading pf: Filter by Class C network
On Linux, Firejail (https://firejail.wordpress.com/) offers an easy way to sandbox web browsers and other programs.
Is there an easy way to sandbox a web browser on OpenBSD ?
(reserve question: is there a non-easy way ?)
… Continue reading Is there something similar to Firejail for OpenBSD?
A new attack prompted OpenBSD’s developers to disable hyperthreading by default. Continue reading Hyperthreading under scrutiny with new TLBleed crypto key leak
Security-oriented BSD operating system OpenBSD has decided to disable support for Intel’s hyper-threading performance-boosting feature, citing security concerns over Spectre-style timing attacks.
Introduced in 2002, Hyper-threading is Intel’s implemen… Continue reading OpenBSD Disables Intel Hyper-Threading to Prevent Spectre-Class Attacks
I have one specific package (moodle) which is not available on newer versions of aforementioned OS (last version of moodle was available on OpenBSD 5.3) which is more than 4 years old. Knowing of OpenBSD impressive security … Continue reading Could be a security risk installing old version of OpenBSD on Internet server?
A domain name system server implementation is at risk of remote code execution, information exposure and denial-of-service attacks after a seven vulnerability were disclosed by Google and patched by the maintainers of Dnsmasq. Continue reading Google Warns of DoS and RCE Bugs in Dnsmasq
According to this article, OpenBSD is implementing a feature that will create a unique kernel every time a user reboots or upgrades his computer.
It is called KARL, “Kernel Address Randomized Link”. This works by relinking … Continue reading OpenBSD is implementing KARL. How does this improve security?
Update: Find working Exploits and Proof-of-Concepts at the bottom of this article.
Security researchers have discovered more than a decade-old vulnerability in several Unix-based operating systems — including Linux, OpenBSD, NetBSD, FreeBSD and Solaris — which can be exploited by attackers to escalate their privileges to root, potentially leading to a full system takeover.
Dubbed Stack Clash
Continue reading A Decade Old Unix/Linux/BSD Root Privilege-Escalation Bug Discovered
“Stack Clash” poses threat to Linux, FreeBSD, OpenBSD, and other OSes. Continue reading Serious privilege escalation bug in Unix OSes imperils servers everywhere