How We Could Have Backdoored Bash (Hacktron blog)
Date:
Sat, 31 Oct 2026 14:00:42 +0000
Description:
The Hacktron blog documents how
the group was able to compromise the GNU Savannah forge and could have
pushed malware into any of the projects hosted there. Using Hacktron, we
found that an email address like `touch${IFS}/tmp/savane-rce-proof`@attacker.example gave any
registered user code execution on its backend. From there, we made
our account a superuser, impersonated Bash's maintainer, and
confirmed we could add an SSH key with push access to the upstream
Bash repository. An unpatched kernel gave us root access and access
to a GNU backup server. We reported it to the FSF on May 11, 2026.
======================================================================
Link to news story:
https://lwn.net/Articles/1104262/
--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)