Sindarina, Edge Case DetectiveWow, this photo ⚡️
| Website | https://hughsie.com/ |
| GitHub | https://github.com/hughsie |
Richard Hughes
@hughsie
- 2.4K Followers
- 553 Following
- 1.3K Posts
I write free software. Firmware troublemaker.
Star Labs Systems𝗔𝗠𝗗 running with 𝗰𝗼𝗿𝗲𝗯𝗼𝗼𝘁 on the 𝗦𝘁𝗮𝗿𝗙𝗶𝗴𝗵𝘁𝗲𝗿.
It's not quite ready for release yet, but progress is looking good, and we can't wait to show you more.
Who's excited? :)
It's not quite ready for release yet, but progress is looking good, and we can't wait to show you more.
Who's excited? :)
Any translation love for the #fwupd release scheduled for next week would be wonderful: https://hosted.weblate.org/projects/fwupd/fwupd/
Thanks!
I've tagged #fwupd 2.0.21 which backports fixes for over 250 potential security issues found using various AI security scanners over the last 3 months.
The 2.1.x releases include even more fixes and hardening work, and so most users should use those instead; this release is provided for the more conservative distros.
Tobias KlausmannI have very conflicting feelings about this :D
Can any #systemd people who know what `char-usb_device` is help with https://github.com/fwupd/fwupd/pull/10481 please. I'm very confused why adding /dev/bus/usb/ makes it work for the reporter.
Sloppy sloppy slop #slop: https://github.com/fwupd/fwupd/pull/10486
fix: add bounds check before memcpy in fu-usb-device.c by orbisai0security · Pull Request #10486 · fwupd/fwupd
Summary Fix high severity security issue in libfwupdplugin/fu-usb-device.c. Vulnerability Field Value ID V-005 Severity HIGH Scanner multi_agent_ai Rule V-005 File libfwupdplugin/fu-...
JRTThis is next level infosec shitposing:
"It is the FreeBSD analogue of Linux's Dirty Pipe, CopyFail, Fragnesia, and Dirty Frag — except we gave it a BETTER name, with a BETTER logo, on a BETTER website. The other bug websites? Disasters. Sad. Many people have told us this."
If you want to try this, do "fwupdmgr enable-remote lvfs-testing" and tomorrow there should be an update available. I'll move it to stable when it's had some success reports in the 'testing' remote.