Skip To Main Content
Dominique Martinet on Muck Rack

Dominique Martinet

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Dominique Martinet’s profile

Articles by Dominique Martinet

Re: Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more

|
By Dominique Martinet
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Wed, 9 Sep 2026 05:43:29 +0900 Dr. Thomas Orgis wrote on Tue, Sep 08, 2026 at 06:52:03PM +0200: Do we need an LLM agent to dig through the reports and give a summary where the vulnerabilities lie and what the mitigation would be?
Open in Who Shared Issue with article?

Re: Announce: OpenSSH 9.8 released

|
By Dominique Martinet, Damien Miller wrote
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Tue, 2 Jul 2024 08:47:22 +0900 Damien Miller wrote on Mon, Jul 01, 2024 at 02:10:04AM -0600: OpenSSH 9.8 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly. Thanks for all the work towards this release. Just a paperwork question as I couldn't find the information anywhere, was there any CVE assigned to the 2nd security issue?
Open in Who Shared Issue with article?

Re: List linux CVEs for a given stable release?

|
By Dominique Martinet, Greg Kroah-Hartman wrote
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Thu, 30 May 2024 13:45:39 +0900 Greg Kroah-Hartman wrote on Wed, May 29, 2024 at 09:23:50PM +0200: The information is there in the json files, so it's just a matter of writing some scripts to check them, but I can't believe there's none so I probably have missed something. Does someone have such a script that'd list the latest CVEs for a given tree?
Open in Who Shared View Duplicates (2) Issue with article?

List linux CVEs for a given stable release?

|
By Dominique Martinet, Hi Greg
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Wed, 29 May 2024 09:53:48 +0900 Hi Greg, (Cc-ing oss-security because I think more people there might be interested than people subscribed to cve () kernel org and I didn't want to cross-post to multiple lists) Up until last month someone had been managing a linuxkernelcves[1][2] site, but it's somehow gone without a trace (DNS emptied, no message I could see announcing it anywhere) [1]...
Open in Who Shared Issue with article?

Re: backdoor in upstream xz/liblzma leading to ssh server compromise

|
By Dominique Martinet, Florian Weimer, Michael.Karcher wrote
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Mon, 1 Apr 2024 03:13:39 +0900 Michael.Karcher wrote on Sun, Mar 31, 2024 at 07:13:35PM +0200: I am *not* a security researcher, nor a reverse engineer. There's lots of stuff I have not analyzed and most of what I observed is purely from observation rather than exhaustively analyzing the backdoor code. I am a reverse engineer, and tried some static analysis on that code.
Open in Who Shared Issue with article?

Re: CVE-2023-6817: Linux kernel: use-after-free in nf_tables

|
By Dominique Martinet
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Sat, 23 Dec 2023 06:44:25 +0900 Xingyuan Mo wrote on Fri, Dec 22, 2023 at 10:16:24AM +0800: I found a use-after-free vulnerability in the implementation of pipapo set in Linux kernel nf_tables, which can lead to DoS or local privilege escalation, with CAP_NET_ADMIN capability required.
Open in Who Shared Issue with article?

Rust programs in distrbutions (Was: CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx)

|
By Dominique Martinet, Michael Orlitzky wrote
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Sat, 30 Sep 2023 09:57:13 +0900 Michael Orlitzky wrote on Fri, Sep 29, 2023 at 07:51:12PM -0400: There are workarounds like putting all of your Rust code in a single dynamic library, but that's obviously not ideal or always feasible. You can also avoid the Rust build tool "cargo" and directly compile dependencies to shared libraries with "rustc", but it's not easy to compile Rust code without "cargo".
Open in Who Shared Issue with article?

Re: IPv6 and Route of Death

|
By Dominique Martinet
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Fri, 19 May 2023 20:35:17 +0900 Solar Designer wrote on Wed, May 17, 2023 at 07:13:51PM +0200: A couple of days late, but since I wanted to read it myself, here's the text content (as rendered by edbrowse, which looks good enough to me, look for 'h3' to jump to next sections e.g. 'h3 The Bug'): -------------- h3 Introduction Sometimes I feel like exploring random areas of code.
Open in Who Shared Issue with article?

Re: [patch] proc.5: tell how to parse /proc/*/stat correctly

|
By Dominique Martinet, on Fri, Or Scanf Isn'T
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Fri, 23 Dec 2022 09:15:45 +0900 Solar Designer wrote on Fri, Dec 23, 2022 at 12:21:12AM +0100: Ah, this came just after the /proc/net/unix discussion in another thread[1] pointing to [2] with one line per entry, and I was still in that mode.
Open in Who Shared Issue with article?

Re: [patch] proc.5: tell how to parse /proc/*/stat correctly

|
By Dominique Martinet, Or Scanf Isn'T
| seclists.org
oss-sec mailing list archives From: Dominique Martinet <asmadeus () codewreck org> Date: Fri, 23 Dec 2022 07:03:17 +0900 Alexey Dobriyan wrote on Thu, Dec 22, 2022 at 07:42:53PM +0300: That's still not enough unless new lines are escaped, which they aren't: $ echo -n 'test) 0 0 0 ' > /proc/$$/comm $ cat /proc/$$/stat 71076 (test) 0 0 0 ) S 71075 71076 71076 34840 71192 4194304 6623 6824 0 0 10 3 2 7 20 0 1 0 36396573 15208448 2888 18446744073709551615 94173281726464 94173282650929...
Open in Who Shared Issue with article?

Rule for releasing fixes for embargoed bugs

|
By Dominique Martinet
| seclists.org
oss-sec mailing list archives Re: Rule for releasing fixes for embargoed bugs From: Dominique Martinet <asmadeus () codewreck org> Date: Fri, 17 Aug 2018 15:14:01 +0200 Marcus Meissner wrote on Fri, Aug 17, 2018: There seems to be some miscommunation here, which should be directly clarified with the security team of the affected distribution(s). You are correct, I will also send them an email.
Open in Who Shared Issue with article?

Rule for releasing fixes for embargoed bugs

|
By Dominique Martinet
| seclists.org
From: Dominique Martinet Date: Fri, 17 Aug 2018 13:45:16 +0200 Hi, I tried asking this question in private and was told there is no clear rule (and opinions vary) on the subject of releasing fixes for bugs still under embargo; and to ask the list, so here we go: When should vendors publish fixes for bugs that are under embargo ?
Open in Who Shared Issue with article?

terminal emulators' processing of escape sequences

|
By Dominique Martinet
| seclists.org
Re: terminal emulators' processing of escape sequences
Open in Who Shared Issue with article?
Show More