casa OS vulnerabilities
reddit / selfhosted

----------------------------------------------------------------------
p4ck3ts · 2023-11-08 04:48

how is everyone locking up their networks with the recent
vulnerabilities?

 **CVE-2023-37265** & **CVE-2023-37266**

need your suggestions.

----------------------------------------------------------------------
zarlo5899 · 2023-11-08 05:10

updating to CasaOS 0.4.4 will do it has patches for both of them

----------------------------------------------------------------------
thekrautboy · 2023-11-08 05:12

Both have apparently been fixed one day after disclosure, back in
july...

https://medium.com/@m.oldham/casaos-cve-2023-37265-and-
cve-2023-37266-vulnerabilities-d9c63d427476

So what to do? Dont run months-old versions of public facing software?
But common sense isnt always common.

----------------------------------------------------------------------
p4ck3ts · 2023-11-08 05:20

thanks

----------------------------------------------------------------------
homemediajunky · 2023-11-08 05:54

OP just discovered this probably.

----------------------------------------------------------------------
p4ck3ts · 2023-11-08 06:01

not gonna lie. i just did lol. i rarely check updates on linux based
systems.

----------------------------------------------------------------------
No_Dragonfruit_5882 · 2023-11-08 06:30

The Goal is to remind you to update your shit.

And common what?

----------------------------------------------------------------------
thekrautboy · 2023-11-08 06:51

If OP comes across two vulnerabilites of a software they use, and
their first reaction is **NOT** to either

* check the website of the software itself

* if a recent version has fixed these vulnerabilites

* check if their installed version is up-to-date

* simply copy/paste `CVE-2023-37265 & CVE-2023-37266` into a Google
search

but instead make a Reddit post about it... **then OP definitely has a
security problem, PEBCAK.**

----------------------------------------------------------------------
No_Dragonfruit_5882 · 2023-11-08 06:55

Without security you cant have a security Problem tho?!


But yes L8 Issue once again.

Maybe we should take a shot each time we see PEBCAK / L8?

----------------------------------------------------------------------
thekrautboy · 2023-11-08 07:09

> Maybe we should take a shot each time we see PEBCAK / L8?

Would be dead in less than a week.

----------------------------------------------------------------------
No_Dragonfruit_5882 · 2023-11-08 07:18

Does that mean all my Tickets get redirected to other agents?

Where can i sign up?!

----------------------------------------------------------------------
thekrautboy · 2023-11-08 08:12

> i rarely check updates on linux based systems.

Maybe not a good idea?