39 points | by klaas- 2 days ago
9 comments
Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618
BRB Setting a calender reminder for the new year to install patches canonical puts out.
I'm tired, boss.
Seems kind of gnarly. How hard is this to trigger?
Until that's answered, I'm going to consider this a Nothingburger.
Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
Time for StealMyBitcoinAgain.com ?
Remember to make it unexploitable for the first 16 hours.
> from 2.4.55 through 2.4.70.
Looks at ubuntu... 2.4.52. Well then.
26.04 has 2.4.66-2ubuntu2.7
Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618
BRB Setting a calender reminder for the new year to install patches canonical puts out.
I'm tired, boss.
Seems kind of gnarly. How hard is this to trigger?
Until that's answered, I'm going to consider this a Nothingburger.
Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
Time for StealMyBitcoinAgain.com ?
Remember to make it unexploitable for the first 16 hours.
> from 2.4.55 through 2.4.70.
Looks at ubuntu... 2.4.52. Well then.
26.04 has 2.4.66-2ubuntu2.7