Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Fay Stegerman
Re: [SECURITY ADVISORY] curl: CVE-2025-0725: gzip integer overflow
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Wed, 5 Feb 2025 21:14:03 +0100 * Daniel Stenberg <daniel () haxx se> [2025-02-05 09:21]: [...] This problem can only trigger when using a run-time zlib version 1.2.0.3 or older. zlib 1.2.0.4 was relased on August 10, 2003. This means zlib versions that do not trigger this problem have been available and used for more than twenty-one years already.
fdroidserver AllowedAPKSigningKeys certificate pinning fundamentally unreliable
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Mon, 20 Jan 2025 01:29:08 +0100 Hi! Another update for [1,2,3], still published at [4]: another PoC (bringing the total to 6) and a lot of new background information. I've attached the new and updated files and included the new sections from the README with the updates below.
WriteFreely exposes database credentials though insecure file permissions
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Sat, 18 Jan 2025 03:31:27 +0100 Hi! Reposting this [1] here with permission: Public disclosure of security vulnerability in @writefreely [2]: I reported this privately to the project maintainers back in October. There has been no further movement from them since I made my initial report, so I have decided to make this public so that #writefreely admins can properly secure their instances.
Re: shell wildcard expansion (un)safety
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Sun, 10 Nov 2024 19:42:13 +0100 * Eli Schwartz <eschwartz () gentoo org> [2024-11-10 00:59]: [...] Overall, wildcards are just a classic "here is a programming language footgun, we cannot fix it because the language is backwards compatible to the 90s and earlier" which amounts to: people love bash because it's "simple" and "easy" and "anyone can write a bash script without knowing what they are doing".
Re: shell wildcard expansion (un)safety
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Wed, 6 Nov 2024 18:15:50 +0100 * Eli Schwartz <eschwartz () gentoo org> [2024-11-06 05:42]: On 11/5/24 11:12 PM, Solar Designer wrote: So there's no bug in the shells here, but bugs of this kind are common in shell usage (omitting the "--" argument where it's needed, usage of wildcard expansion where that is unnecessary, etc.) Can the shells do anything to mitigate this? I think not without breaking compatibility.
Re: CPython: CVE-2024-8088: Infinite loop when iterating over zip archive entry names
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Fri, 23 Aug 2024 21:08:39 +0200 * Fay Stegerman <flx () obfusk net> [2024-08-23 17:38]: * Fay Stegerman <flx () obfusk net> [2024-08-22 23:12]: * Alan Coopersmith <alan.coopersmith () oracle com> [2024-08-22 20:56]: -------- Forwarded Message -------- Subject: [Security-announce][CVE-2024-8088] Infinite loop when iterating over zip archive entry names Date: Thu, 22 Aug 2024 13:40:20 -0500 From: Seth Larson <seth ()...
Re: CPython: CVE-2024-8088: Infinite loop when iterating over zip archive entry names
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Fri, 23 Aug 2024 17:38:16 +0200 * Fay Stegerman <flx () obfusk net> [2024-08-22 23:12]: * Alan Coopersmith <alan.coopersmith () oracle com> [2024-08-22 20:56]: -------- Forwarded Message -------- Subject: [Security-announce][CVE-2024-8088] Infinite loop when iterating over zip archive entry names Date: Thu, 22 Aug 2024 13:40:20 -0500 From: Seth Larson <seth () python org> Reply-To: security-sig () python org To:...
Re: CPython: CVE-2024-8088: Infinite loop when iterating over zip archive entry names
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Thu, 22 Aug 2024 23:12:57 +0200 * Alan Coopersmith <alan.coopersmith () oracle com> [2024-08-22 20:56]: -------- Forwarded Message -------- Subject: [Security-announce][CVE-2024-8088] Infinite loop when iterating over zip archive entry names Date: Thu, 22 Aug 2024 13:40:20 -0500 From: Seth Larson <seth () python org> Reply-To: security-sig () python org To: security-announce () python org There is a HIGH severity...
[Update] PoC for fdroidserver AllowedAPKSigningKeys certificate pinning bypass
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Sun, 21 Apr 2024 00:02:06 +0200 Hi! An update for [1], still published at [2]: a third PoC, a second patch, and a script to scan for potentially affected APKs. I've attached the new files and included the new sections from the README with the updates below. Meanwhile, upstream has performed their own analysis and confirmed being affected by the previously reported vulnerabilities [3].
PoC for fdroidserver AllowedAPKSigningKeys certificate pinning bypass
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Mon, 8 Apr 2024 21:10:58 +0200 Hi! This is published here: https://github.com/obfusk/fdroid-fakesigner-poc. I've attached the PoC and patch and included the text from the README below. - Fay ============================================================================ # F-Droid Fake Signer PoC PoC for fdroidserver AllowedAPKSigningKeys certificate pinning bypass.
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Sat, 30 Mar 2024 22:47:56 +0100 * Andres Freund <andres () anarazel de> [2024-03-30 20:48]: On 2024-03-29 08:51:26 -0700, Andres Freund wrote: The prior section explains that RSA_public_decrypt () got plt was redirected to point into the backdoor code.
Re: Re: backdoor in upstream xz/liblzma leading to ssh server compromise
oss-sec mailing list archives From: Fay Stegerman <flx () obfusk net> Date: Sat, 30 Mar 2024 21:50:19 +0100 * "Rein Fernhout (Levitating)" <me () levitati ng> [2024-03-30 18:07]: [...] You can just use 'sed r\n filename' and it should work. I think it just reads the file and appends a newline. I don't know if this is relevant, but 'sed r\n filename' does not *in general* "append a newline".
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Fay
Contact Fay, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack