Oddbean new post about | logout
 Coker: The CUPS vulnerability

Debian Developer Russell Coker has <a href="https://etbe.coker.com.au/2024/10/26/cups-vulnerability/" rel="nofollow">written
up</a> an analysis of the https://lwn.net/Articles/991929/

announced in September:


He seems to have a different experience to me of reporting bugs, I
have had plenty of success getting bugs fixed without hyping them. I
just report the bug, wait a while, and it gets fixed. [...] I
was quite confident that my systems wouldn't be at any risk.

When it was published my opinion was proven to be correct, <a href="https://www.securityweek.com/highly-anticipated-linux-flaw-allows-remote-code-execution-but-less-serious-than-expected/" rel="nofollow">it
turned out to be a series of CUPS bugs</a>.


https://lwn.net/Articles/996108/