Bug#1069191: glibc: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix^J out-of-bound writes when writing escape sequence

2024-05-01 Thread Miguel Jacq
On Mon, 22 Apr 2024 09:31:39 +0200 Charlemagne Lasse wrote: > Hi, > > Can this be backported to older Debian versions via the security repo? > This bug can be used to execute code when using the PHP engine: > > * https://www.offensivecon.org/speakers/2024/charles-fol.html > * https://www.openwal

Bug#1057843: (no subject)

2023-12-12 Thread Miguel Jacq
If it helps people, this is what I did on systems that automatically had rebooted into the problematic kernel. First, I uninstalled the 6.1.0-14 kernel and rebooted back into 6.1.0-13. Then I used `last` to identify the time between the problematic reboot into 6.1.0-14 and the deliberate reboot