this post was submitted on 29 Sep 2026
316 points (99.1% liked)

linuxmemes

32928 readers
959 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry of any kind will not be tolerated. This is an LGBTQ+-friendly community -- if that is a problem for you, you should leave.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
  • Don't come looking for advice, this is not the right community.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves / tolerates / hates> systemd, and wants to interject for a moment. You can stop now.
    • 5. πŸ‡¬πŸ‡§ Language/язык/Sprache
  • This is primarily an English-speaking community. πŸ‡¬πŸ‡§πŸ‡¦πŸ‡ΊπŸ‡ΊπŸ‡Έ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
    • 6. (NEW!) Regarding public figuresWe all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.
    • Β 

    Please report posts and comments that break these rules!

    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 3 years ago
    MODERATORS
    zephyr@lemmy.world
    rtxn@lemmy.world
    316
    https://lists.debian.org/debian-security-announce/2026/msg00441.html (lemmy.blahaj.zone)
    submitted 1 day ago by not_IO@lemmy.blahaj.zone to c/linuxmemes@lemmy.world
    50 comments fedilink hide all child comments
     

    https://lists.debian.org/debian-security-announce/2026/msg00441.html

    you are viewing a single comment's thread
    view the rest of the comments
    [–] twinnie@feddit.uk 45 points 1 day ago (4 children)

    Some of them are 2024 and 2025. How come they made it into this list?

    [–] Wispy2891@lemmy.world 32 points 1 day ago* (last edited 1 day ago) (1 children)

    Some of them aren't actually bugs but just "security" people wanting to get a longer epenis by flagging issues like "maximum priority, it allows to read the ssh private key!!!1!!" And then the details are like "when typing more ./ssh/id_rsa the user private key is shown, terminal should intercept and block request"

    And with LLMs it's even worse as they're directed to find nitpicks at all costs

    [–] MrScottyTay@sh.itjust.works 5 points 1 day ago (2 children)

    What's an e-penis?

    [–] Asfalttikyntaja@sopuli.xyz 20 points 1 day ago (1 children)

    Don’t know, but I’m sure mine is bigger than yours.

    [–] MrScottyTay@sh.itjust.works 7 points 1 day ago

    Haha! Got me! :p

    [–] mobyduck648@lemmy.world 11 points 1 day ago (1 children)

    An e-penis is to a penis what an e-bike is to a bike.

    [–] MrScottyTay@sh.itjust.works 10 points 1 day ago (1 children)

    So... you can ride it faster?

    [–] Jayjader@jlai.lu 7 points 18 hours ago

    Maybe it speeds up when you twist the handle

    [–] dgdft@lemmy.world 80 points 1 day ago (1 children)

    Serious answer: They’re low priority bullshit rather than practical security concerns.

    β€œThis method crashes if you intentionally feed it malformed data!!”- type of stuff.

    [–] jj4211@lemmy.world 6 points 11 hours ago

    Curl guy has written about a couple of these stupid CVEs, for example: https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/

    One I recall was that if you asked curl to write out c code example of libcurl usage, you could get it to write out arbitrary code of your choosing. Note that this required you to have write permission and curl and then with your malicious c code, you then had to compile it and make it executable and run it yourself. So a very roundabout way to use curl as a text editor, and they considered it an arbitrary code execution issue, despite not actually executing the code.

    [–] queerlilhayseed@piefed.blahaj.zone 17 points 1 day ago

    The following is my guess, I don't know what the Debian project's selection criteria for security advisories are.

    Taking the first one as an example, CVE-2024-52560 is a bug that affects version 5.15 of the Linux Kernel. The oldest version of Debian that's still in general LTS is Debian 11 which shipped with Linux 5.10. So they are still supporting releases that may be running the affected kernel and can't upgrade the kernel for some reason, but would still benefit from some downstream patches that mitigate the exposure of the kernel bug.