Attention Required! | Cloudflare
www.cyberciti.biz

At first I was sceptical, but after a few thought, I came to the solution that, if uutils can do the same stuff, is/stays actively maintained and more secure/safe (like memory bugs), this is a good change.

What are your thoughts abouth this?

  • ParetoOptimalDev@lemmy.today
    102·
    6 days ago

    I fear moving away from GPL that moving to Rust seems to bring, but Rust does fix real memory issues.

    Take the recent rsync vulnerabilities for example.

    https://www.cyberciti.biz/linux-news/cve-2024-12084-rsyn-security-urgent-update-needed-on-unix-bsd-systems/#more-2215

    At least this one in a Rust implementation of rsync would have very likely been avoided:

    CVE-2024-12085 – A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time. Info Leak via uninitialized Stack contents defeats ASLR.