If this is a local privilege escalation to root, why can't I find anything on

jsiepkes • today at 3:06 PM • 2 replies • view on HN

If this is a local privilege escalation to root, why can't I find anything on https://www.openbsd.org/security.html ?

Best guess, from the commit message alone[0]: It was fixed as a bug, at the time they didn't have evidence it could lead to LPE

The AI security tool then, retroactively discovered that it could have been used for LPE.

Again, just my guess I could be wrong.

stackghost • today at 3:30 PM

OpenBSD has a reputation for being... selective about what they admit is a security-relevant bug.

➕ show 1 reply

alt Hacker News