On 28/3/24 05:30, Lee wrote:
oof.  Are there instructions somewhere on how to make Debian secure by default?


Further down the advisory is

"

  Some distros, like Debian, do not seem to have a command like
  command-not-found by default. There does not seem to be a way to
  leak a users password in this case then, even though we can send
  escape sequences to them.

"

Which implies that Debian is secure by default against this particular exploit

Reply via email to