2025-06-08T17:30:15Z https://nostr.now musl libc https://nostr.now/npub1gmaehwszlpnv3kwh4fqq62p3vsqwuwsp8m48m609zrt4rg7c5vjs2z2v8d https://cdn.fosstodon.org/accounts/avatars/109/390/479/367/366/120/original/da59568bcc4cf821.png https://cdn.fosstodon.org/accounts/avatars/109/390/479/367/366/120/original/da59568bcc4cf821.png https://nostr.now/nevent1qqspv8r7l7mn9qp5wk42qmg8q04n3lua5vd3qr38rsv3elhqha8nutgzypr0hxa6qtuxdjxe674yqrfgx9jqpm36qylw5l0fu5gdw5drmz3j2ez6np0 Effective immediately, musl libc presence on the fediverse is moving from Fosstodon to Treehouse Systems. Further details on the reasons for the move and choice of Treehouse will follow from the new account, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqfn992kmelnjvv2ratlkck8l4c3r0wjgk0f8t0umx4zn67f727ygsgv59tf" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqfn992kmelnjvv2ratlkck8l4c3r0wjgk0f8t0umx4zn67f727ygsgv59tf</span> (<span class="italic">nprofile…59tf</span>)</a></span>. 2025-06-08T17:26:31Z https://nostr.now/nevent1qqsq2aawtjrgtq82sny8upuhcwkv74j3e8y3s56qcrlctsmsjp4q3jczypr0hxa6qtuxdjxe674yqrfgx9jqpm36qylw5l0fu5gdw5drmz3j2wpdjky Security Advisory (CVE-2025-26519) for musl libc:<br/><br/><a href="https://www.openwall.com/lists/musl/2025/02/13/1">https://www.openwall.com/lists/musl/2025/02/13/1</a><br/><br/>All users running applications which use iconv with untrusted input (see link for details of what usage is affected) should patch ASAP. 2025-02-13T17:19:19Z https://nostr.now/nevent1qqsy8fvrzgzhn42ryemqavjk74ls6wzcas5qfmahmq9n0n8gqm5l7xszypr0hxa6qtuxdjxe674yqrfgx9jqpm36qylw5l0fu5gdw5drmz3j267js0j OpenSSH sshd on musl-based systems is not vulnerable to RCE via CVE-2024-6387 (regreSSHion).<br/><br/>This is because we do not use localtime in log timestamps and do not use dynamic allocation (because it could fail under memory pressure) for printf formatting.<br/><br/>While the sshd bug is UB (AS-unsafe syslog call from signal context), very deliberate decisions we made for other good reasons reduced the potential impact to deadlock taking a lock. 2024-07-01T14:52:00Z