Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by on Mon
Re: Home Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven)
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 10 Nov 2026 05:54:40 +0100 On Mon, Nov 09, 2026 at 02:00:35PM -0800, Gregory Mullen wrote: Coordination: none, and that is not an oversight you caught. [name] publishes day-of, without advance notice, as a stated policy. You may dislike the policy; it is not hidden, and it is not a secret. Are there list policies published anywhere?
Osborn’s Independence Continues To Be Scrutinized In Nebraska Senate Race
LINCOLN — Registered nonpartisan Nebraska U.S. Senate candidate Dan Osborn has vowed repeatedly he wouldn’t caucus with either party if he pulled off the upset in the bitter race against incumbent Republican Sen. Pete Ricketts. He did so again at a virtual press conference on Monday with Brian Bengs and Seth Bodnar, who are running for Senate as independents in South Dakota and Montana.
What To Know About Mail-In Voting For The 2026 Midterms
What to Know About Mail-In Voting for the 2026 Midterms This week, the Supreme Court rejected the Trump administration’s plans to impose new rules for mail-in voting for the midterm elections in November. In a March executive order, President Donald Trump had instructed the U.S. Postal Service to create rules for election officials sending mail-in ballots to voters. If a state didn’t comply with the new rules, the Postal Service wouldn’t deliver the ballots to voters.
New Challenges To Trump Mail-In Voting Order Arrive After US Supreme Court Ruling
Democrat-led states and voting rights groups re-filed lawsuits Wednesday to block the Trump administration from executing a new regulation to restrict mail-in voting, while a federal judge lifted a nationwide pause on the policy in line with this week’s U.S. Supreme Court decision that handed the administration a procedural win.
One Year After Pillen Announced McCook ICE Jail, Protests Continue, Governor Doubles Down
McCOOK — The sun was still rising as nearly 60 “mothers and others” boarded an Omaha bus and headed across the state to protest what goes on at the ICE detention facility in rural McCook. Their nearly 10-hour round trip marked a year since Gov. Jim Pillen announced the deal he made with U.S. Immigration and Customs Enforcement to convert the state’s rehabilitative-focused Work Ethic Camp into a 300-bed jail for migrants.
BusyBox dpkg applet: OS command injection
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Mon, 24 Aug 2026 07:01:07 +0200 Hi, Anmol Bakshi brought the below with original Subject line saying "BusyBox dpkg applet: OS command injection -> root RCE (CWE-78)" to linux-distros on July 13. We quickly determined that no privilege boundary is crossed, so the coordinated disclosure request was withdrawn.
AI slop "Combined chain advisory — fallback.efi/SBAT/memdisk bypass"
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 18 Aug 2026 07:19:30 +0200 Hi, trexnegr0 (Jeremy Erazo) and/or his AI assistant brought this to the distros list, to Red Hat security team, and to some others on June 21. There was some discussion (see excerpts below) and it appeared that there's no security relevance here.
US And Iran Trade Missile Barrages As Hopes Dim For A Quick Resolution To The Five-Month Conflict
CAIRO (AP) — The United States and Iran each fired barrages of missiles Thursday, as the pattern of back-and-forth strikes took hold again and hope dimmed for a quick end to the five-month conflict. Following a few days of respite, fears of a wider war have grown, with renewed fighting threatening to engulf even more countries: Jordan said Thursday it intercepted Iranian missiles for the second consecutive day, while Kuwait said a strike in the northern part of the country killed one person.
Re: Linux kernel: KVM: Merge branch 'kvm-chainsaw' into HEAD
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Mon, 27 Jul 2026 18:25:31 +0200 On Mon, Jul 27, 2026 at 09:46:12AM -0400, Reid Sutherland wrote: For your information. https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=a204badd8432f93b7e862e7dac6db0fe3d65f370 Thanks, but can you please explain why exactly you think this is noteworthy for oss-security?
Nebraskan Accused In Plot To Kill President Blossomed In College Before Troubling Turn, Friends Say
In his public musings and activities online, the change Abraham Hermosillo Alvarez hoped to sow seemed nonviolent. The 31-year-old Omahan made connections on TikTok, the video-sharing app, where he posted and chatted with other users about holding local governments accountable for ICE operations, filing public records requests and, most recently, “building a people-owned supply chain” to eliminate economic dependence on big corporations.
Festivals & Fireworks to Celebrate July 4th in St. Louis
It's time to celebrate Independence Day in St. Louis and our nation's 250th birthday! Check out these family-friendly celebrations that include carnivals, fantastic fireworks, drone shows, parades and lots more. Celebrate 250 in St. Louis Head to the Gateway Arch for the annual Celebrate St. Louis, this year renamed to Celebrate 250 to commemorate our nation's 250th birthday.
Troubled Reflecting Pool Faces Fresh Scrutiny Over Vandalism Claims And Duck Deaths
WASHINGTON (AP) — The saga over the Lincoln Memorial Reflecting Pool took a turn as President Donald Trump said Tuesday that six people have been arrested over recent damage. The president’s troubled $14-million-plus rehabilitation project has become a visceral flashpoint over law enforcement, aesthetics and environmental concerns ahead of the country's 250th anniversary celebrations.
Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Sun, 14 Jun 2026 00:32:41 +0200 Hi David, On Mon, Jun 08, 2026 at 07:46:07PM -0400, David A. Wheeler wrote: All: I propose that we create a *separate* mailing list, say "oss-security-vulnerability-reports", for run-of-the-mill vulnerability reports about open source software (OSS). Run-of-the-mill reports would then go there and *not* to this mailing list "oss-security".
US Military Conducts Another Strike Against Iran After Trump Says Iran Is 'Negotiating On Fumes'
WASHINGTON (AP) — U.S. forces carried out new defensive strikes on Iran on Wednesday after President Donald Trump asserted that Iran is “negotiating on fumes” and insisted that November’s midterm elections in the United States won’t make him rush into a deal to end the nearly three-month-old conflict.
Blanche Doesn't Rule Out Considering Payments For Violent Jan. 6 Rioters As He Defends $1.8B Fund
WASHINGTON (AP) — Acting Attorney General Todd Blanche on Tuesday wouldn't rule out the possibility that people who carried out violence during the Jan. 6, 2021 riot at the U.S. Capitol will be considered for payouts from a new $1.776 billion fund to pay individuals who believe they were targeted politically.
Re: CVE request: io_uring zcrx freelist OOB write
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Thu, 7 May 2026 19:48:11 +0200 On Mon, May 04, 2026 at 07:02:30AM +0100, Pavel Begunkov wrote: On 5/3/26 12:00, Mohamed salem Eddah wrote: I am reporting a security issue in the Linux kernel involving an out-of-bounds heap write in io_uring/zcrx.c. This issue appears to have been addressed in commit 770594e (“io_uring/zcrx: warn on freelist violations”, April 21, 2026), however it was not assigned a CVE and does...
Re: CVE-2026-29169: Apache HTTP Server: mod_dav_lock indirect lock crash
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 5 May 2026 20:27:25 +0200 On Mon, May 04, 2026 at 02:15:25PM +0000, Eric Covener wrote: Severity: low Affected versions: - Apache HTTP Server through 2.4.66 Description: A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.
Re: [pfx] Postfix stable release 3.11.2 and legacy releases 3.10.9, 3.9.10, 3.8.16
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 5 May 2026 05:39:24 +0200 On Mon, May 04, 2026 at 05:38:55PM +0100, Sam James wrote: Sam James <sam () gentoo org> writes: The most significant one here seems to be the first entry under "Fixed in Postfix 3.8, 3.9, 3.10:".
Re: CVE-2026-31431: CopyFail: linux local privilege scalation
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Mon, 4 May 2026 20:15:24 +0200 On Mon, May 04, 2026 at 01:07:25PM -0400, Demi Marie Obenour wrote: On 5/4/26 07:28, Richard Kettlewell wrote: On 02/05/2026 23:32, Demi Marie Obenour wrote: Can you provide benchmarks showing that the accelerator is faster than the CPU on realistic workloads?
Brett Lindstrom Flirts With Nonpartisan Nebraska Gubernatorial Bid
Brett Lindstrom Flirts With Nonpartisan Nebraska Gubernatorial Bid Former State Sen. Brett Lindstrom of Omaha (left) talks with University of Nebraska Regent Jim Scheer of Norfolk, a former state senator and legislative speaker who served with Lindstrom, June 6, 2025. (Zach Wendling / Nebraska Examiner) LINCOLN — Former Omaha State Sen. Brett Lindstrom’s political hiatus after leaving the Republican Party may prove short-lived.
Man Accused Of Trying To Kill Trump At Correspondents' Gala Agrees To Remain Jailed For Now
Man Accused Of Trying To Kill Trump At Correspondents' Gala Agrees To Remain Jailed For Now This image contained in a court filing by the Department of Justice, April 29, 2026, shows Cole Tomas Allen (left) inside his hotel room, on Saturday, April 25, 2026 in Washington, using his cellphone to take a photograph of himself in themirror. An enhanced version of the image is right.
Re: KVM shadow EPT stale rmap use-after-free
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 31 Mar 2026 06:03:17 +0200 Hi, On Mon, Mar 30, 2026 at 11:34:02AM +0530, Sandipan Roy wrote: Alexander Bulekov(bkov () amazon com) and Fred Griffoul (fgriffo () amazon com) reported a use-after-free in KVM's shadow paging code. Thank you all for finding and handling this issue, including bringing it to oss-security.
Mikel “Micky” Roberts
Body Mikel “Micky” Roberts passed peacefully Friday, March 20, 2026, at the age of 67. He was born on January 17, 1959 to Joe Kenneth Roberts and Lorretta Fay (Williams) Roberts in Lamesa, Texas. He married Rhonda Cooper on April 14, 2022 in Brownfield. Micky was the kind of man who rose with the sun and didn’t stop until long after it set. Farming wasn’t just his work — it was his rhythm, his pride, and the way he showed love to the people around him.
Re: FreeRDP fixes 12 CVEs in 3.22.0 release
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 10 Feb 2026 04:37:24 +0100 On Mon, Feb 09, 2026 at 03:31:46PM -0800, Alan Coopersmith wrote: - @Keryer reported an issue affecting client and proxy: CVE-2026-23948 - @ehdgks0627 did some more fuzzying and found quite a number of client side bugs.
Jerry D. Harris
Jerry D. Harris, longtime Lamesa, Texas native, passed from this earth on January 15, 2026. He was at home surrounded by loved ones. Harris farmed and ginned cotton in west Texas for over 60 years. He was born in Lamesa, on June 1, 1943, he grew up on a cotton farm west of the Ten Mile Community and graduated from Klondike High School. Jerry served the agricultural industry through countless leadership roles, and he was recognized for his service by a wide array of organizations.
What Does The New Childhood Vaccine Schedule Actually Mean For Your Family?
The federal government is reducing the number of vaccines it formally recommends to all children in the United States, which public health experts say is an abrupt, potentially dangerous change that will sow confusion among families. The Centers for Disease Control and Prevention said Monday that the agency now recommends vaccines against 11 diseases instead of the 17 previously suggested under America’s childhood vaccine schedule.
Evangelina Ortiz Padilla
A Catholic funeral Mass was celebrated for Evangelina Ortiz Padilla, age 85, of Lamesa, TX, at 2:00 p.m. on Monday, December 29, 2025, at St. Margaret Mary Catholic Church, with Father Sylvester Osouza officiating. The burial committal will follow to the Dawson County Cemetery. Funeral arrangements are under the trusted care and direction of Gonzales Funeral Home.
Trump Warns Maduro Against Playing 'Tough' As US Escalates Pressure Campaign On Venezuela
WEST PALM BEACH, Fla. (AP) — President Donald Trump on Monday delivered a new warning to Venezuelan President Nicolás Maduro as the U.S. Coast Guard steps up efforts to interdict oil tankers in the Caribbean Sea as part of the Republican administration's escalating pressure campaign on the government in Caracas.
Robert Blane Dyess
Robert Blane Dyess, 64, a lifelong resident of Gail, Texas, passed away on December 21, 2025, with his devoted wife by his side, resting in the peace and promise of his faith. A memorial service will be held Tuesday, December 23, 2025, at the First Baptist Church of Gail at 2pm, with Brother Randy Hardman officiating. Blane was born on February 20, 1961, in Lubbock, Texas, to Robert W. Dyess and Patricia Dyess.
Nina Singleton
Nina Fae Singleton (87) went to be with her Lord and Savior on December 19th, 2025. Nina was born on December 6th, 1938, to Alvie Anderson and Zina Mae (Peggy) Wright Jarrett in Lamesa, Texas. A memorial service is scheduled for 2pm on Monday, December 22nd at Northside Baptist Church. Arrangements are under the care of Branon Funeral Home. Nina was a dedicated, Godly woman who accepted Christ as her savior at an early age.
War And Young Men
War And Young Men Arizona's Republican Gov. Doug Ducey (front right) meets with Arizona National Guard soldiers prior to their deployment to the Mexico border at the Papago Park Military Reservation on Monday, April 9, 2018, in Phoenix. (Ross D. Franklin / AP Photo) There is one earthly resource that has a greater luster than gold, a higher energy output than coal, and has more military applications than the highest technology.
Former State Sen. Lynne Walz Steps Toward Run For Nebraska Governor
FREMONT, Neb. — Former State Sen. Lynne Walz on Monday launched an exploratory committee to run for Nebraska governor in 2026, seeking to uplift Nebraskans’ concerns instead of their partisanship. Walz, in an announcement interview with the Nebraska Examiner, said the state’s political system and economy are “broken.” She said she wants to hear from Nebraskans about their lives and work to find solutions together before formally launching a formal gubernatorial bid.
Billy Dale Roberts
Funeral service for Billy Dale Roberts, 88, of Welch, will be held at 2:00 p.m. Tuesday, November 25, 2025 at Ashmore Baptist Church with Pastor Gary Delay and Pastor Danny Willis officiating. Interment will follow at Dawson County Cemetery. Arrangements are under the care of Branon Funeral Home. Visitation will be held Monday, November 24, 2025, 6:00 p.m. to 8:00 p.m. at Branon Funeral Home. Billy Dale Roberts was born on November 9, 1937, in Lamesa, Texas, to JB Roberts and Jewel Waldrep.
Guadalupe (Lupe) P. Alvarez
Funeral services to celebrate the life of Guadalupe (Lupe) P. Alvarez age 79 of Lamesa, TX. will be held at 2:00 p.m. on Saturday, November 22, 2025, at the church of Templo Elim. The burial committal will follow to the Dawson County Cemetery. Funeral arrangements are under the trusted care and direction of Gonzales Funeral Home.
Government Reopens After 43 Days: Trump Signs Bill Ending Record Shutdown
WASHINGTON — The longest shutdown in U.S. history ended Wednesday night when President Donald Trump signed a spending package that reopens the government and funds most of it through January. The Oval Office ceremony came just hours after the House voted to approve the legislation, which senators passed earlier in the week.
Re: Questionable CVE's reported against dnsmasq
oss-sec mailing list archives From: nightmare.yeah27 () aceecat org Date: Mon, 27 Oct 2025 19:26:47 -0700 On Mon, Oct 27, 2025 at 09:37:03PM -0400, Demi Marie Obenour wrote: instance, I suspect that OPNsense generates dnsmasq and Unbound configuration files from data provided in the web UI. And OpenWRT. Definitely. Not sure how much validation there is.
Re: Questionable CVE's reported against dnsmasq
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 28 Oct 2025 02:49:09 +0100 On Mon, Oct 27, 2025 at 05:15:09PM -0600, Hank Leininger wrote: On 2025-10-27, Michael Orlitzky wrote: On 2025-10-27 19:21:54, Moritz Mühlenhoff wrote: On Mon, Oct 27, 2025 at 09:34:03AM -0700, Alan Coopersmith wrote: and if you can replace the server's configuration file you don't need to play games with putting invalid contents in to break the parser, but can simply change the...
Victoria Trevino
A Catholic Funeral Mass service will be celebrated for Victoria “Vickie” Trevino age 95 of Irving, Texas and formerly of Lamesa, TX at 2:00 p.m. on Friday, October 17, 2025 at St. Margaret Mary Catholic Church with Father John Smith officiating. Interment will follow to Dawson County Cemetery. Viewing will begin on Wednesday, October 15, 2025 at 7:00 p.m. at Branon Funeral Home Chapel. Rosary prayer services will be held at 7:00 p.m. on Wednesday and Thursday evening.
Re: How to do secure coding and create secure software
oss-sec mailing list archives Re: How to do secure coding and create secure software From: Amit <amitchoudhary0523 () gmail com> Date: Mon, 29 Sep 2025 21:17:49 +0530 On Mon, 29 Sept 2025 at 20:55, Jeremy Stanley <fungi () yuggoth org> wrote: On 2025-09-29 09:01:26 +0530 (+0530), Amit wrote: [...] The function body should also be secure. This generalizes to a tautology: The software is secure if the software is secure.
Re: How to do secure coding and create secure software
oss-sec mailing list archives From: Amit <amitchoudhary0523 () gmail com> Date: Mon, 29 Sep 2025 09:01:26 +0530 On Mon, 29 Sept 2025 at 01:21, Jeffrey Walton <noloader () gmail com> wrote: On Sun, Sep 28, 2025 at 10:53 AM Amit <amitchoudhary0523 () gmail com> wrote: On Sun, 28 Sept 2025 at 03:11, Solar Designer <solar () openwall com> wrote: You claim that "If functions/methods are secure then the whole software is secure." If we talk C where main() is also a function, and limit the...
Re: Fully functional email address
Return-Path: <rsk@gsp.org> X-Original-To: ietf@mail2.ietf.org Delivered-To: ietf@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0B126371B8C9 for <ietf@mail2.ietf.org>; Thu, 19 Jun 2025 13:09:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.298 X-Spam-Level: X-Spam-Status: No, score=-2.298 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001,...
Lamesa Press-Reporter
On Monday, September 1, 2025, John Rivera age 97 of Lamesa, TX. passed away in Lamesa, TX. A graveside memorial service will be held at a later date. Funeral arrangements are under the care and direction of Gonzales Funeral Home. John was born on February 7, 1928, in Hunter, TX.
Brian Kernighan, "Only Third to Dennis Richie and Ken Thompson" (UNIX), Agreed With Someone Who Said Rust Was Just Hype, Should Not Replace C
Brian Kernighan, "Only Third to Dennis Richie and Ken Thompson" (UNIX), Agreed With Someone Who Said Rust Was Just Hype, Should Not Replace C posted by Roy Schestowitz on Sep 05, 2025, updated Sep 05, 2025 What he said about Rust matters. Some people document this. This recently become a debated topic.
Maria De Jesus Nava De Ayala
A Catholic Funeral Mass will be celebrated for Maria De Jesus Nava De Ayala age 89 of Lamesa, TX. at 2:00 p.m., on Monday, August 25, 2025, at St. Margaret Mary Catholic Church with Father Sylvester Dsouza officiating. The burial committal will follow to the Dawson County Cemetery. Funeral arrangements are under the trusted care and direction of Gonzales Funeral Home.
Parenting While Protecting Democracy: The Moms Who Fled The Texas Legislature
When Erin Zwiener finished taking the bar exam last Wednesday afternoon and walked out into the Texas heat, the aspiring lawyer was looking forward to one thing: Enjoying the final days of summer vacation with her daughter before she begins second grade. Then she checked her phone. Zwiener is a Democrat in the Texas House of Representatives, where since 2019 she has represented a district south of Austin that includes most of Hays County.
Why Cut a Federal Program That Helps Student Parents Access Child Care?
Why Cut a Federal Program That Helps Student Parents Access Child Care? Staffer Mackenzie Hunt smiles as a child raises her hand to answer a question during a lesson on shapes and colors on the playground at Living Water Child Care and Learning Center in Williamson, W.Va. on Monday, Sept. 25, 2023. (Leah Willingham / AP Photo) Why Cut a Federal Program That Helps Student Parents Access Child Care?
Residents Still Shaken A Day After Federal Authorities March Through Los Angeles' MacArthur Park
LOS ANGELES (AP) — Hector Velasquez was playing cards with friends at MacArthur Park in Los Angeles early Monday when a young man with a megaphone walked through announcing federal agents were on their way. Another man drove past in a car, shouting out the window, “Immigration is coming!” The people in Velasquez's group who did not have legal status scattered. Others with U.S. citizenship — like Velasquez — lingered to see what would happen.
Re: Electric Charger Research
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 8 Jul 2025 02:15:45 +0200 On Mon, Jul 07, 2025 at 12:38:50PM -0500, Brandon Perry wrote: Attached is a write-up of some research I've been doing since November last year. The research covers the digital protocols used from an electric vehicle -> charger (ISO-15118) and the protocols used to manage the charger from a central management system (OCPP). I also cover some of the equipment I've used to do the research.
Trump Administration Tells States It’s Freezing $6.8 Billion For K-12 School Programs
WASHINGTON — The Trump administration has put on hold $6.8 billion in federal funds for K-12 schools, according to an Education Department notice obtained by States Newsroom. The agency informed states on Monday that it would be withholding funding for several programs, including before- and after-school programs, migrant education and English-language learning, among other initiatives.
G7 Leaders Fail To Reach Ambitious Joint Agreements On Key Issues After Trump's Exit
KANANASKIS, Alberta (AP) — Six of the Group of Seven leaders discussed Russia's war in Ukraine and the Israel-Iran conflict but failed to reach major agreements on those and many other top issues — closing a summit that was forced to try and show how the wealthy nations’ club might still shape global policy despite the early departure of U.S. President Donald Trump.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with on
Contact on, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack