XMPP Service Operators - 2021-02-22

Heads up #python https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3177

Licaon_Kter: sounds critical but who is passing user-generated data to ctypes?

mathieui, step 1: take float from an API request, step 2: feed it into a library which is using ctypes?

Yeah, I am just supposing that it is not very common to do so

Not sending user generated input to exec() like a real programmer

I don’t quite understand the scope of the vulnerability, but to me it reads as if it may be sufficient to pass some floats to numpy

and print the array

does anyone know something like this but less abandoned? https://github.com/rakoo/ircg

this seems even more abandoned: https://github.com/kkaefer/medium

also found this: https://github.com/moparisthebest/xmpp-ircd

not sure if any better