Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://social.076.moe/object/note/2133488">Kazuhiko (moenai@social.076.moe)'s status on Sunday, 23-Jun-2024 19:30:07 JST</a><a href="https://social.076.moe/moenai" title="moenai@social.076.moe"><img src="https://gnusocial.jp/avatar/265471-48-20240615132914.webp" width="48" height="48" alt="Kazuhiko" style="position: absolute; left: 0; top: 0;">Kazuhiko</a></section><article>先月の Tinyproxy の不具合（解放後のメモリを参照）の件、結局のところ、懸念されていたリモートコード実行については大丈夫っぽいということなのかしら…<br>
<br>
<a href="https://github.com/tinyproxy/tinyproxy/issues/533#issuecomment-2101202712" title="https://github.com/tinyproxy/tinyproxy/issues/533#issuecomment-2101202712" rel="nofollow noreferrer">https://github.com/tinyproxy/tinyproxy/issues/533#issuecomment-2101202712</a><br>
<br>
でもまあ、セキュリティの話題なので、安全側に倒して 1.11.2 を使った方がよいのでしょうね。</article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3280952#notice-6468025">In conversation</a><time datetime="2024-06-23T19:30:07+09:00" title="Sunday, 23-Jun-2024 19:30:07 JST">about 5 months ago</time> <span>from <span><a href="https://social.076.moe/notice/2133488" rel="external" title="Sent from social.076.moe via ActivityPub">social.076.moe</a></span></span><a href="https://social.076.moe/notice/2133488">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/tinyproxy/tinyproxy/issues/533#issuecomment-2101202712">some details about CVE-2023-49606 · Issue #533 · tinyproxy/tinyproxy</a></h5><div></div></header><div>the bad news a security researcher from TALOS intelligence found a use-after-free vulnerability in tinyproxy in december 2023, claiming to have contacted upstream and waited 6 months for publicatio...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Kazuhiko (moenai@social.076.moe)'s status on Sunday, 23-Jun-2024 19:30:07 JST Kazuhiko
先月の Tinyproxy の不具合（解放後のメモリを参照）の件、結局のところ、懸念されていたリモートコード実行については大丈夫っぽいということなのかしら…

https://github.com/tinyproxy/tinyproxy/issues/533#issuecomment-2101202712

でもまあ、セキュリティの話題なので、安全側に倒して 1.11.2 を使った方がよいのでしょうね。
In conversationabout 5 months ago from social.076.moepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  some details about CVE-2023-49606 · Issue #533 · tinyproxy/tinyproxy
  the bad news a security researcher from TALOS intelligence found a use-after-free vulnerability in tinyproxy in december 2023, claiming to have contacted upstream and waited 6 months for publicatio...

Public

Embed Notice

HTML Code

Corresponding Notice