A vulnerability in ffmpeg allows remote code execution via a crafted media file https://www.securityweek.com/ffmpeg-pixelsmash-flaw-allows-rce-on-video-players-media-servers-nas-appliances/

This affects anything that would even try to generate a *thumbnail*, and that includes your file browser, your fedi server, etc etc etc.

EDIT: Replies have pointed out that ASLR needed to be disabled for the exploit to work, so it may not be quite as exploitable as the press release makes it sound. Not sure. (At least, not without many retries.) At any rate, look forward to deploying the fix.

good morning

good night (it's almost 5am and already light, I definitely should've gone to bed hours ago)

Fill my tank with Debian, please

morning

nini fedi

i propose a ban on 12-hour time effective yesterday

Close to the old West German-East German border is this striking feature in the landscape. You might think it's a small mountain or a big hill, but in fact, it's a humongous pile of regular salt (sodium chloride), dumped there by a chemical company called K+S. The locals call it Monte Kali or Kalimanjaro, after Kalisalz, the German word for potash, of which the salt is a byproduct. The pile is 250 meters high and growing every day. The company has a license to keep dumping here till 2030.

morning

nini fediverse

(I really should've gone to bed hours ago)

I feel like this image might be useful for the non-furries this week.

heat exhaustion = get to a cool place, drink water
heat stroke = get medical attention

Because the place I usually put my fan to raise its height is currently occupied by a server that's too heavy to easily move, I precariously balanced it with only one leg actually on something and the rest floating in the air (it has four horizontal legs in a + shape). It worked, but fell over as soon as I turned it off. Apparently it was being held up by its own propulsion.

good morning

nini fedi

wtf is an “FSI Shit”?

(source: page 304 of the POWER9 Processor User’s Manual)

good morning