This looks pretty brutal. Quote from Kurt Seifried of RedHat http://www.openwall.com/lists/oss-security/2017/06/19/2 http://www.openwall.com/lists/oss-security

This looks pretty brutal. Quote from Kurt Seifried of RedHat http://www.openwall.com/lists/oss-security/2017/06/19/2 http://www.openwall.com/lists/oss-security/2017/06/19/2 "I just want to publicly thank Qualys for working with the Open Source community so we (Linux and BSD) could all get this fixed properly. There was a lot of work from everyone involved and it all went pretty smoothly." Debian security advisories rapid fire: glibc https://lists.debian.org/debian-security-announce/2017/msg00146.html https://lists.debian.org/debian-security-announce/2017/msg00... linux https://lists.debian.org/debian-security-announce/2017/msg00148.html https://lists.debian.org/debian-security-announce/2017/msg00... exim4 https://lists.debian.org/debian-security-announce/2017/msg00147.html https://lists.debian.org/debian-security-announce/2017/msg00... libffi https://lists.debian.org/debian-security-announce/2017/msg00149.html https://lists.debian.org/debian-security-announce/2017/msg00... And just a sample from the Qualys announcement (out of many more), "local-root exploit against Exim", "local-root exploit against Sudo (Debian, Ubuntu, CentOS)", "local-root exploit against /bin/su", "local-root exploit against ld.so and most SUID-root binaries (Debian, Ubuntu, Fedora, CentOS)", "local-root exploit against /usr/bin/rsh (Solaris 11)", as well as proof of concepts for OpenBSD, FreeBSD and so on.