Re: Help wanted evaluating claimed security vulnerability in groff
Sebastien Peterson-Boudreau <[email protected]> Tue, 26 May 2026 01:31:44 -0300
| Newsgroups | gmane.comp.printing.groff.general |
|---|---|
| Message-ID | <CAGPRubSmD0gje3CLzPmAy_Sd-97GwjjG4-4LauBi62v9y_iZvw@mail.gmail.com> |
Maybe I'm doing something wrong but I'm not even able to reproduce the example Proof of Concept. The code in question does look a bit fishy for command injection, but without a working example, my knowledge of the inner-workings of groff is too limited to assess the plausibility. fwiw, the writeup does _reek_ of that overconfident, doomsaying, LLM tone...