oss-security - Re: libcap-2.77 (since libcap-2.04) has TOCTOU privilege escalation issue

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <FF535D49DCDE0939+addHY0xl6rD04Ddg@ut005408-PC>
Date: Thu, 9 Apr 2026 14:29:55 +0800
From: Tianyu Chen <sweetyfish@...pin.org>
To: oss-security@...ts.openwall.com
Cc: morgan@...nel.org, elirazamumtaz@...il.com
Subject: Re: libcap-2.77 (since libcap-2.04) has TOCTOU
 privilege escalation issue

On Thu, Apr 09, 2026 at 05:50:50AM +0200, Solar Designer wrote:
> I would still like to know if there's a way I could extract Markdown
> source from third-party GitHub advisories, if anyone knows.

GitHub's REST API can be used for that:

$ curl -s https://api.github.com/repos/AndrewGMorgan/libcap_mirror/security-advisories/GHSA-f78v-p5hx-m7hh | jq -r .description

https://docs.github.com/en/rest/security-advisories/repository-advisories

Best regards,
Tianyu Chen @ deepin

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.