Conversation

Notices

1. pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:32:15 JST pistolero

   in reply to

   • pistolero
   • gentoobro
   @gentoobro
   
   > This chain of events leads to remote code execution, which could allow attackers to steal sensitive information or damage critical production systems.
   
   If a critical production system talks to a printer by any means besides shitting its logs to a serial port connected to a line printer, the admins deserved it.
   • pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:32:16 JST pistolero

     in reply to

     • gentoobro
     @gentoobro
     
     > Canonical and Red Hat have not only confirmed the vulnerability’s high severity but are also actively working on assessing its impact and developing patches.
     
     I will bet money this is another systemd thing.
   • pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:32:16 JST pistolero

     in reply to

     • gentoobro
     @gentoobro Okay, I kept reading.
   • gentoobro (gentoobro@shitpost.cloud)'s status on Sunday, 29-Sep-2024 11:32:17 JST gentoobro

     in reply to

     > "severe"
     > cups-browsed

     🙄

   • pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:32:18 JST pistolero
     https://securityonline.info/severe-unauthenticated-rce-flaw-cvss-9-9-in-gnu-linux-systems-awaiting-full-disclosure/ godDAMN