GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    Kazuhiko (moenai@social.076.moe)'s status on Sunday, 23-Jun-2024 19:30:07 JST Kazuhiko Kazuhiko
    先月の Tinyproxy の不具合(解放後のメモリを参照)の件、結局のところ、懸念されていたリモートコード実行については大丈夫っぽいということなのかしら…

    https://github.com/tinyproxy/tinyproxy/issues/533#issuecomment-2101202712

    でもまあ、セキュリティの話題なので、安全側に倒して 1.11.2 を使った方がよいのでしょうね。
    In conversation about 11 months ago from social.076.moe permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
      some details about CVE-2023-49606 · Issue #533 · tinyproxy/tinyproxy
      the bad news a security researcher from TALOS intelligence found a use-after-free vulnerability in tinyproxy in december 2023, claiming to have contacted upstream and waited 6 months for publicatio...

    Feeds

    • Activity Streams
    • RSS 2.0
    • Atom
    • Help
    • About
    • FAQ
    • TOS
    • Privacy
    • Source
    • Version
    • Contact

    GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

    Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.