FSF Patches Two-Year-Old Vulnerability Found by AI Researchers in GNU Savannah Repository
The Free Software Foundation's GNU Savannah hosts thousands of free software projects — both GNU and non-GNU projects, including Drupal.
But in early May, security researchers from Hacktron.AI reported vulnerabilities and demonstrated an exploit, according to a new statement Friday from the FSF:
We have been working with these researchers since their initial report, and have also addressed additional security issues they submitted. All reported issues have been patched thanks to the hard work of GNU and FSF volunteers, as well as FSF staff. After thorough review, we have found no reason to believe that sensitive project data or credentials were accessed, nor that there has been any compromise of Savannah's software supply chain.
Nevertheless, we take the security of the GNU system, the tools which make it possible, and the projects we host very seriously. This body of software has become essential to millions (if not billions) of users around the world. We are therefore taking additional precautionary steps. Though the initial security issue was reported to us in early May, the vulnerabilities were discovered in software that was published approximately two years prior. We will be communicating directly with Savannah-hosted projects about steps they can take to review and strengthen the security of their projects.
We have also communicated with the other Savane instances we're aware of to assist their review of their own environments, and take any steps needed to help protect their users... This statement is intended as an initial notice. We expect to publish a report on the incident within 30 days.
Hacktron.AI bills itself as "Your AI teammate for security." Its web page notes that its investors include Meta, DeepMind, and Perplexity.
Read more of this story at Slashdot.
Why Amazon hates 'human-in-the-loop' AI governance
VP Eric Brandwine explains people aren't all that great, actually
PM praises Essex ambulance crews following response to fatal train crash
Prime Minister, Sir Keir Starmer, has praised Essex ambulance crews following their response to a fatal train crash in Bedford yesterday.
PM praises Essex ambulance crews following response to fatal train crash
Prime Minister, Sir Keir Starmer, has praised Essex ambulance crews following their response to a fatal train crash in Bedford yesterday.
BEL MOONEY: I've been inundated with stories about this cruel dating trick after sex among the over-50s. This is what you MUST know to protect yourself if you're looking for love in middle-age
Having hit the grand old age of 59, and still single, I'm beginning to wonder if it's me. BEL MOONEY responds...
New Zealand will become a republic in my lifetime says former Prime Minister Jacinda Ardern, 45
The 45-year-old left-winger who famously became the country's youngest PM in 150 years aged just 37 in 2017 said many Kiwis believed a republic was 'their future'.
World Cup commentator denies making racist comment about Ciara live on air during USA's win over Australia
The 1, 2 Step songstress performed the ceremonial coin toss at Lumen Field ahead of her nation's win against the Socceroos, which sealed their spot in the knockout round of the World Cup.
Crocodile 'attacker's' carers were 30-feet behind him and on their phones before he 'threw three-year-old boy into enclosure'
The boy sustained critical injuries at Johnsons of Old Hurst, near Huntingdon, Cambridgeshire, following the incident Thursday lunchtime.
Pretty Essex pub just metres from the beach goes up for sale for £350k
It even has a bar and games area!
Ofsted closes Maldon nursery school over 'harm risk' to children
Ofsted has suspended the registration of the nursery
Moment Algerian gang steals £600,000 jewellery from Abu Dhabi royals outside St Pancras station after they arrive on Eurostar
The royal victims - Roda Al Nahyan, her mother Shamsa, and Najla Al Qubaisi - had just left the station and got into a taxi on October 16, 2025.
Police launch manhunt after four-year-old boy was abducted in front of his mother while playing in park
The youngster vanished in Haden Hill Park in the West Midlands town of Cradley Heath, just metres away from his mother.
Man charged after assault at Essex pub during football match
Callum Sparks, 28, has been charged following an assault at The Wheatsheaf pub in Chelmsford during a football match.
The Brazen 'boutique bandit' with a VERY plump pout was carving out a new career after 17 arrests for allegedly defrauding customers but justice finally catches up to her
Pamela Brooke Schronce has been arrested 17 times this year for allegedly scamming customers out of money.
LIZ JONES: I sent my date a photo of me that's 12 years old. These are my rules about sex he must know before I'll meet him in person
If I were to ever countenance a date with another man, I would have a whole new set of rules, as I have learnt my lesson
Shocking moment World Cup squad's plane is hit by LIGHTNING on their way to a match
A World Cup squad's plane was grounded after the aircraft was terrifyingly struck by lightning on their way to a match.
Call police if you see Essex man, 28, wanted on recall to prison
He is wanted on recall to prison and has links to Grays and Norwich
Ready for the longest day? Britain's most beautiful summer solstice spots, from Stonehenge to Ben Nevis
The summer solstice, the longest day of the year, falls on Sunday, June 21. So where can Brits enjoy the most daylight hours across the country?
The new GLP-1 generation: From daily tablets to new blockbuster fat jabs, these are the obesity medications that could soon be coming to the UK... and they're more affordable than Mounjaro
Since the beginning of this decade, GLP-1 medications - which have been prescribed in Britain primarily as injections - have taken over as blockbuster drugs for weight loss.
Michail Antonio to face fresh trial after having Lamborghini driving conviction quashed, as ex-West Ham striker tells court he 'almost died' in Ferrari crash
Michail Antonio has had a motoring conviction quashed after his Lamborghini Urus was caught speeding last year.