oss-sec mailing list archives

Re: manjaro pamac vulnerability


From: Barnabás Pőcze <pobrn () protonmail com>
Date: Sat, 08 Jul 2023 21:08:38 +0000

Hi


2023. július 7., péntek 06:44 keltezéssel, Tavis Ormandy <taviso () gmail com> írta:

FYI, I noticed a blog post about this:

https://github.com/c-skills/vala-vala-hey/blob/master/vala-vala-hey

I didn't test it, but if you can't trust stealth who can you trust? :)

I'm not familiar with manjaro, I dunno if it's the polkit config for their dbus service.
[...]

It looks like it has been fixed: 
https://gitlab.manjaro.org/applications/libpamac/-/commit/889aa1d74ad305bb28178396dcc16e5b5381ade6


Regards,
Barnabás Pőcze


Current thread: