Conversation

Notices

1. Embed this notice
   :PUA: Shlee fucked around and (shlee@aus.social)'s status on Thursday, 14-Sep-2023 18:41:29 JST :PUA: Shlee fucked around and

   CVE-2023-41064 is going to require patching everything that renders WebP images. Every browser/electron apps/mobile apps like telegram/Flutter apps/etc etc

   Welcome to the modern software supply chain!

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Thursday, 14-Sep-2023 18:48:49 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @shlee And as usual for supply chains:
     - distros: Fixed for everyone in less than a day, maybe a bit more when vendoring wasn't already patched out
     - everyone else: Going to stay vulnerable basically forever, because devs aren't integrators