Critical Unauthenticated RCE Flaw Impacts All GNU/Linux Systems

mtindor

• September 26, 2024 15:29

https://it.slashdot.org/story/24/09/25/2150210/critical-unauthenticated-rce-flaw-impacts-all-gnulinux-systems

https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/

Looks like we better all be leaning on our OS vendors.

• 

  cPRex Jurassic Moderator

  • September 26, 2024 16:17

  Hey hey!  We've seen this making the rounds, and currently we're all in the "skeptical" mode.  Here's the original link:

  https://threadreaderapp.com/thread/1838169889330135132.html

  We're on it though, and if something DOES end up needing to be fixed we'll work with CloudLinux to get it handled.

   

  0
• 

  mtindor

  • September 26, 2024 16:34

  Notice I said OS vendor.  I wasn't suggesting it was cPanel's task.   But if it's true (I read somewhere that Redhat and Canonical confirmed at least some of the vulnerabilities -- but I didn't read that on Redhat or Canonical), then it's not good.   Hopefully it's not true.   But if it is, the vendors (like CloudLinux) hopefully are on top of it.

   

   

  0
• 

  cPRex Jurassic Moderator

  • September 26, 2024 16:39

  Oh for sure - it's not directly us, but we're still on it and watching how it unfolds :D

  1
• 

  cPRex Jurassic Moderator

  • September 27, 2024 01:28

  Turned out to be nothing interesting at all, or anything that affects servers.

  0
• 

  mtindor

  • September 27, 2024 01:32

  Thanks, Rex.   Agreed.  I mean it shouldn't affect servers because cPanel hosting servers shouldn't have CUPS-related stuff installed, other than maybe cups-libs.

  Mike

  1

Please sign in to leave a comment.