maswan | fun time for mirror operators with an rsyncd RCE out there | 21:26 |
---|---|---|
Berge | yeah | 21:28 |
Berge | (https://www.openwall.com/lists/oss-security/2025/01/14/3 for context, CVSS 9.8 RCE for rsync) | 21:28 |
maswan | hm. on the other hand, we didn't get our new noble frontend stable due to probably hardware issues, the ones in prod are running focal which should have a too old version of rsync. clever planning of us. | 21:35 |
Berge | Very! | 21:36 |
maswan | (I've disabled rsync on the the noble test frontend for now so I can go to bed) | 21:38 |
Berge | I've patched | 21:38 |
maswan | running Debian? | 21:39 |
Berge | yes | 21:40 |
Champers | just updated and rebooted ftp.be.d.o | 22:47 |
Champers | as there was a new kernel as well | 22:48 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!