oss-security - manjaro pamac vulnerability

Date: Fri, 7 Jul 2023 04:44:46 -0000 (UTC)
From: Tavis Ormandy <taviso@...il.com>
To: oss-security@...ts.openwall.com
Subject: manjaro pamac vulnerability

FYI, I noticed a blog post about this:

https://github.com/c-skills/vala-vala-hey/blob/master/vala-vala-hey

I didn't test it, but if you can't trust stealth who can you trust? :)

I'm not familiar with manjaro, I dunno if it's the polkit config for their dbus service.

Tavis.

-- 
 _o)            $ lynx lock.cmpxchg8b.com
 /\\  _o)  _o)  $ finger taviso@....org
_\_V _( ) _( )  @taviso

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.