I love @kdecommunity and all, but this is quite the SNAFU. Oops. https://www.kde.org/info/security/advisory-20180208-2.txt …
Show this thread
-
You know, this is the kind of thing the "systemd style thinking" of dbus all the things helps prevent. The traditional UNIX approach of using shell to glue all the pieces together has always been a security minefield. Just don't put it into PID 1.
But also part of the reason why systemd gets ridiculed is that they have a history of not taking security issues seriously. Nobody had to forcibly get a CVE assigned for this because KDE wouldn't do it.
