@release_candidate@mastodon.bsd.cafe
2026-11-09 17:07 UTC
Is NetBSD affected by this new vulnerability? It's not in the list of affected systems, but I was able to reproduce anyway.
Was this vulnerability found by AI? Probably.
https://terminal2shell.com/
Upgrading to 11.1 does not remediate this.
#NetBSD #vulnerability #infosec
Replies (1)
-
@netbsd@mastodon.sdf.org 2026-11-09 20:42
@release_candidate@mastodon.bsd.cafe Critical security vulnerability: if you set your root password to empty string, you can privilege escalate to root by typing "su root"