What this server has with the tag: posts by people here, and posts from elsewhere that reached it. There's more of it on mastodon.social, infosec.exchange.
Yet another reason to _always_ isolate your containers in VMs on a locked down bridge. Side-by-siding containers directly on the host with 'rootless' is not true isolation. Docker networks can also be a hot mess, and the given project's own firewalling can scribble/overstep that of host firewall.
If lacking the knowledge to isolate properly, just stick with one Docker project per VPS.
Thanks @themadhatter for the heads-up on this one. Woke up to it.
#git command https remote is affected by the #brotli buffer overflow vulnerability CVE-2026-111497 since it enables compression support:
https://github.com/git/git/blob/7e34d8174dcda3435d1404c9a30bef46afe6c13e/http.c#L2284
https://github.com/git/git/blob/7e34d8174dcda3435d1404c9a30bef46afe6c13e/remote-curl.c#L980
Make sure to update brotli as soon as possible.
For some reason the CVE-2026-111497 buffer overflow vulnerability in the #brotli decoder is mostly associated with #nodejs, but this is far more wider issue. Brotli compression is supported by many client side applications processing HTTP responses. While some of them have sandboxes and quick update cycle (read: web browsers), many don't. In particular many devices and applications using #curl / libcurl are affected and must be updated ASAP.
https://github.com/advisories/GHSA-9v8h-qqgm-4m35
https://nvd.nist.gov/vuln/detail/cve-2026-111497
Tis the year for kernel vulns, or at least discovering very old ones. Here's an overview of an exploit, its mitigations, atop a 37yr old bug in #OpenBSD
No information disclosure needed. It leans on deterministic kernel memory allocations, scoping therein for function pointers with shared mem attachments to fork until the counter wraps, overflowing to negative integer. Chained w separate out-of-bounds kernel writes, it earns local priv esc to root.
Time to patch, esp for those of us running VMs on metal:
https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html
Debian has released 6.12.113-1, not sure about other distros at the current moment.
We don't often think of refrigeration as critical infrastructure, lest of all when we talk of 'cyber attacks' targeting the nuts and bolts of living.
But here we are reminded of this as legacy & unpatched network-enabled refrigeration units in over 300 supermarkets in France had their thermals attacked, raising temperatures internally (to the point of sparking fires in some cases), and spoiling food within them.
Perpetrator & rationale remain unknown.
allheim has been updated.
