4 ms·
> The criticial vulnerability "shell in the ghost" was fixed in flatpak about one month after linux distributions. I can't find any reference to that vulnerabi
by Thorrez 6y ago
> The criticial vulnerability "shell in the ghost" was fixed in flatpak about one month after linux distributions.
I can't find any reference to that vulnerability except this page.
- pmontra 6y agoThe name isn't an exact match but maybe it's this glibc vulnerability: https://blog.qualys.com/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability https://blog.qualys.com/laws-of-vulnerabilities/2015/01/27/t... Edit: nope, this is Ghost in the Shell, from last February https://www.microsoft.com/security/blog/2020/02/04/ghost-in-the-shell-investigating-web-shell-attacks/ https://www.microsoft.com/security/blog/2020/02/04/ghost-in-...
- Thorrez 6y agoI don't think either one is right. That first one is from Jan 2015, but according to Wikipedia the first release of Flatpack was Sept 2015. The second one doesn't even seem to be a vulnerability, but rather the general concept of web shells. One of the vulnerabilities mentioned in the article (CVE-2019-0604) is for Microsoft SharePoint, so that's unrelated to Flatpack. Also note the difference in order of the words "ghost" and "shell".