3 ms·
For those wondering, this issue (referred to as YB2 or Yahoobleed #2 by the author) has already been fixed by Yahoo: > Yahoo! fixed YB2 at the same time as YB1
by smaili 9y ago
For those wondering, this issue (referred to as YB2 or Yahoobleed #2 by the author) has already been fixed by Yahoo:
> Yahoo! fixed YB2 at the same time as YB1, by retiring ImageMagick.
- scarybeast 9y agoFWIW, I've been very impressed with how Yahoo! handled this disclosure.
- tyingq 9y agoOuch. I have a site the generates images with ImageMagick based on user input. Guess I'm off to look for details.