Post #1844644

I didn't exactly want to run the mystery binary hacking payload so to test the mitigation I instead ran this to check that the vulnerable module wouldn't load: import socket as s a=s.socket(38,5,0);a.bind(("aead","authencesn(hmac(sha256),cbc(aes))")) If the module is successfully blocked you should see a FileNotFoundError here. Tested on Debian Trixie. FYI the current long-term Debian versions are still unpatched so I recommend using the mitigation of disabling the module. #CopyFail