Conversation

Notices

1. Neil Craig (tdp_org@mastodon.social)'s status on Tuesday, 10-Oct-2023 19:39:09 JST Neil Craig

   If you run a publicly available website/service, keep an eye on https://www.cve.org/CVERecord?id=CVE-2023-44487.

   It'll be announced at midday UTC today (10th Oct 2023).

   If there isn't an update you can deploy quickly for your affected services immediately (there should be for the better known software, they've had advance notice) then you should consider disabling the affected element until there is.

   Can't share more right now but it's important so don't forget (& tell your friends!).

   #WebDev #InfoSec #Security

   • Aral Balkan repeated this.
   • Neil Craig (tdp_org@mastodon.social)'s status on Tuesday, 10-Oct-2023 19:39:45 JST Neil Craig

     in reply to

     To add a little detail I should have included initially:

     This is a web server/proxy software issue - it's a generic issue (rather than software-specific) so it's going to affect lots of software implementations.