Vulneratbility - Slackware can be compromised - all versions affected

enorbet · 05-05-2021, 12:25 PM

It's going to be moderately interesting to see if crts ever bothers to respond in this thread or if it is just a "drive by shooting".

It is already interesting how few fault-finding threads there usually are here but how they've ramped up since the churn over a new release.

Regarding gender pronouns I thought that was defined in a T Shirt

Jan K. · 05-05-2021, 01:45 PM

Quote:

Originally Posted by Didier Spaier

I suggested twice to the OP to email Patrick Volkerding if he wants that what he considers to be an issue be assessed. I don't know if he did, anyway I wouldn't mind that this thread be closed.

Before closing I would like to hear from either OP, Pat or "chief maintainers" *) whether or not we do indeed have an unsolved problem.... creating a thread like this without proper closure is just evil.

Not that I know what "Vulneratbility" is...

*) except Alien Bob, of course.

Alien Bob · 05-05-2021, 02:52 PM

Quote:

Originally Posted by Jan K.

Before closing I would like to hear from either OP, Pat or "chief maintainers" *) whether or not we do indeed have an unsolved problem.... creating a thread like this without proper closure is just evil.

Not that I know what "Vulneratbility" is...

Amazed that people don't know about the ekziztsenze of the National Vulneratbility Database: https://www.dasher.com/tag/national-...lity-database/

Quote:

*) except Alien Bob, of course.

If it concerns crts I wear that badge with honor.

rworkman · 05-05-2021, 10:14 PM

Contact has been made and a dialogue is in progress.

mishehu · 05-05-2021, 11:14 PM

Quote:

Originally Posted by rworkman

Contact has been made and a dialogue is in progress.

So when is the alien invasion of Earth? (Sorry, just read that like it was part of a movie plot.)

Thank you for the update, we wait with baited breath to find out what the issue is.

RadicalDreamer · 05-06-2021, 02:01 AM

Quote:

Originally Posted by rworkman

Contact has been made and a dialogue is in progress.

Thanks for the update.

drgibbon · 05-06-2021, 05:09 AM

Quote:

Originally Posted by rworkman

Contact has been made and a dialogue is in progress.

Good stuff thanks, no (even minor) details to be shared?

hitest · 05-06-2021, 08:53 AM

Quote:

Originally Posted by rworkman

Contact has been made and a dialogue is in progress.

Thank you for the update! I'm curious about the issue.

LuckyCyborg · 05-06-2021, 08:56 AM

Quote:

Originally Posted by drgibbon

Good stuff thanks, no (even minor) details to be shared?

That happens after the tempest is gone, from what I've seen even at the big houses like Intel.

Jan K. · 05-06-2021, 09:14 AM

Quote:

Originally Posted by rworkman

Contact has been made and a dialogue is in progress.

Thank you.

Though it could have saved some posts in this thread, if that was post #2.

@OP: thanks for your work. Looking forward to hear the full story later, but if anyone should stumble upon vulnerabilities in the future, this most certainly is not the way to report it...

Cheers!

nobodino · 05-06-2021, 10:43 AM

is it related to this: https://lists.gnu.org/archive/html/b.../msg00082.html
and this: https://git.slackware.nl/current/dif...ac5593907add1d

fix 2 memory leaks in bash?

LuckyCyborg · 05-06-2021, 10:49 AM

Quote:

Originally Posted by nobodino

is it related to this: https://lists.gnu.org/archive/html/b.../msg00082.html
and this: https://git.slackware.nl/current/dif...ac5593907add1d

fix 2 memory leaks in bash?

Well, the slackware-current does not mean "all Slackware versions" in my humble opinion...

Didier Spaier · 05-06-2021, 11:39 AM

Quote:

Originally Posted by nobodino

is it related to this: https://lists.gnu.org/archive/html/b.../msg00082.html
and this: https://git.slackware.nl/current/dif...ac5593907add1d

fix 2 memory leaks in bash?

No.

Alien Bob · 05-06-2021, 12:01 PM

Quote:

Originally Posted by Jan K.

Though it could have saved some posts in this thread, if that was post #2.

It would have helped if crts would have contacted Pat instead of posting here first with all the drama. Then perhaps this whole thread would have not happened.

LuckyCyborg · 05-06-2021, 12:05 PM

Quote:

Originally Posted by Alien Bob

It would have helped if crts would have contacted Pat instead of posting here first with all the drama. Then perhaps this whole thread would have not happened.

But, at least, it is a valid issue report (no matter how less critical it's) or it's just a false alarm?