Conversation

Notices

1. Embed this notice
   pistolero (p@fsebugoutzone.org)'s status on Saturday, 28-Sep-2024 12:48:12 JST pistolero
   https://securityonline.info/severe-unauthenticated-rce-flaw-cvss-9-9-in-gnu-linux-systems-awaiting-full-disclosure/ godDAMN
   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Saturday, 28-Sep-2024 12:48:10 JST pistolero

     in reply to

     • gentoobro
     @gentoobro Okay, I kept reading.
   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Saturday, 28-Sep-2024 12:48:10 JST pistolero

     in reply to

     • gentoobro
     @gentoobro
     
     > This chain of events leads to remote code execution, which could allow attackers to steal sensitive information or damage critical production systems.
     
     If a critical production system talks to a printer by any means besides shitting its logs to a serial port connected to a line printer, the admins deserved it.
   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Saturday, 28-Sep-2024 12:48:11 JST pistolero

     in reply to

     • gentoobro
     @gentoobro
     
     > Canonical and Red Hat have not only confirmed the vulnerability’s high severity but are also actively working on assessing its impact and developing patches.
     
     I will bet money this is another systemd thing.
   • Embed this notice
     gentoobro (gentoobro@shitpost.cloud)'s status on Saturday, 28-Sep-2024 12:48:12 JST gentoobro

     in reply to

     > "severe"
     > cups-browsed

     🙄

     Sick Sun likes this.
   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Saturday, 28-Sep-2024 13:13:18 JST pistolero

     in reply to

     • gentoobro
     @gentoobro Yeah, you know who wrote Avahi, though, right?
     
     THIS IS STILL LENNART'S FAULT
     Another Linux Walt Alt likes this.
   • Embed this notice
     gentoobro (gentoobro@shitpost.cloud)'s status on Saturday, 28-Sep-2024 13:13:19 JST gentoobro

     in reply to

     As far as I understand, the -browsed daemon is just for the lazy magic "automatic printer discovery" shit that never works anyway.

   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 01:28:23 JST pistolero

     in reply to

     • gentoobro
     @gentoobro Yeah, I would be able to avoid pulseaudio altogether if it weren't for Firefox. I don't have avahi or systemd.
   • Embed this notice
     gentoobro (gentoobro@shitpost.cloud)'s status on Sunday, 29-Sep-2024 01:28:24 JST gentoobro

     in reply to

     I don't have the latter two. Might have to mask out avahi.

   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 01:28:25 JST pistolero

     in reply to

     • gentoobro
     @gentoobro Avahi, systemd, PulseAudio. The three worst things about $current_year Linux are all Lennart's fault.
   • Embed this notice
     gentoobro (gentoobro@shitpost.cloud)'s status on Sunday, 29-Sep-2024 01:28:26 JST gentoobro

     in reply to

     Didn't know that, but it's not possible for me to hate Red Hat more than I do already.

   • Embed this notice
     gentoobro (gentoobro@shitpost.cloud)'s status on Sunday, 29-Sep-2024 11:32:11 JST gentoobro

     in reply to

     • tsoifan1997

     LFS user enters chat

   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:32:11 JST pistolero

     in reply to

     • tsoifan1997
     • gentoobro
     @gentoobro @sysrq
     
     > LFS user enters chat
     
     LFS isn't bad, it's just hard to keep up to date. CRUX is the thinking man's Gentoo.
     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     tsoifan1997 (sysrq@lab.nyanide.com)'s status on Sunday, 29-Sep-2024 11:32:12 JST tsoifan1997

     in reply to

     • gentoobro
     @gentoobro @p
     Gentoo is bloat
   • Embed this notice
     gentoobro (gentoobro@shitpost.cloud)'s status on Sunday, 29-Sep-2024 11:32:13 JST gentoobro

     in reply to

     I use firefox without pulse. Works fine. Upgrade to Gentoo.

   • Embed this notice
     ✙ dcc :pedomustdie: :phear_slackware: (dcc@annihilation.social)'s status on Sunday, 29-Sep-2024 11:32:30 JST ✙ dcc :pedomustdie: :phear_slackware:

     in reply to

     • tsoifan1997
     • gentoobro
     @p @sysrq @gentoobro Slackware is the slackers man crux :phear_slackware:
   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:42:21 JST pistolero

     in reply to

     • tsoifan1997
     • ins0mniak
     • gentoobro
     @ins0mniak @gentoobro @sysrq Binary packages. :alexjonescrying:
     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     ins0mniak (ins0mniak@majestic12.airforce)'s status on Sunday, 29-Sep-2024 11:42:22 JST ins0mniak

     in reply to

     • tsoifan1997
     • gentoobro
     @p @sysrq @gentoobro Enter the Void.
   • Embed this notice
     pistolero (p@fsebugoutzone.org)'s status on Sunday, 29-Sep-2024 11:42:35 JST pistolero

     in reply to

     • ✙ dcc :pedomustdie: :phear_slackware:
     • tsoifan1997
     • gentoobro
     @dcc @gentoobro @sysrq The only binary packages that don't make me terrified are the ones that Patrick built himself.
     ✙ dcc :pedomustdie: :phear_slackware: likes this.