Installing the latest version of any package today can open a fresh attack surface before the bugs are even discovered. The recent xeiaso.net post titled Maybe you shouldn't install new software for a bit warns that t…

The warning isn’t abstract. A freshly disclosed IPsec‑tools 0‑day can bring down VPN daemons with two tiny UDP packets, while a separate claim alleges that the ShinyHunters gang exfiltrated data from 8,800 schools usi…

Security researchers disclosed a null‑dereference bug in IPsec‑tools that crashes the IKE daemon. The exploit triggers a denial‑of‑service by sending two malformed UDP packets, a trivial payload that can cripple VPN g…

The advisory urges anyone running IPsec‑tools to replace it immediately. The recommendation is explicit: do not fall back to Openswan, Freeswan, or any legacy, unpatched IPsec implementation. The advisory stresses tha…