Posted by Jan Schaumann on Oct 04 Hello, I was wondering whether it might make sense to establish a disclosure list for cloud computing / virtual private server hosting providers. The reason that I think this might make sense is that not every cloud computing provider necessarily offers their own OS / Linux distribution, and thus may not be qualified for membership on distros@.
cloud computing provider disclosures
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/39
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Seccomp denylist bypass via 32-bit syscall argument truncation
Posted by Ricardo Branco on Oct 27 Hello, I am writing to share details regarding a seccomp filter bypass pattern affecting several projects (including containerd…
Fwd: groff 1.24.2 released
Posted by Alan Coopersmith on Sep 29 Forwarded Message Subject: groff 1.24.2 released Date: Tue, 29 Sep 2026 02:54:35 -0500 From: G. Branden Robinson To: info-gnu () gnu…
Vulnerabilities in golang.org/x/net
Posted by Alan Coopersmith on Oct 27 Forwarded Message Subject: [security] Vulnerabilities in golang.org/x/net Date: Tue, 27 Oct 2026 19:53:49 +0000 From: announce ()…
Godot 3.x/4.x: remote crash via DTLS receive-callback heap buffer overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot's DTLS networking was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…
Godot 4.x: remote client crash via multiplayer spawn packet sync_len overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot 4.x multiplayer was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…
Multiple vulnerabilities in samtools
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the samtools package. These have all been fixed in a new release 1.25…