Latest Qualys news

A timing flaw between snap-confine and systemd-tmpfiles gives unprivileged users root on default Ubuntu Desktop 24.04+ installations. Qualys TRU's second Ubuntu disclosure in one week. Patch snapd now.

Nine confused deputy bugs in Linux AppArmor let any local person gain root on 12.6 million Ubuntu, Debian, and SUSE systems. Hidden since 2017. Qualys TRU named the cluster CrackArmor. Patches landed March 12, no CVEs assigned yet.