Skip to content

Instantly share code, notes, and snippets.

@bayareawebpro

bayareawebpro/patch-CVE-2024-2961.md

Last active April 25, 2024 21:15
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bayareawebpro/02b25f1c6460f2b4b1882a2303c581b9 to your computer and use it in GitHub Desktop.
Save bayareawebpro/02b25f1c6460f2b4b1882a2303c581b9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
patch-CVE-2024-2961.md

Show Active Modules

iconv -l | grep -E 'CN-?EXT'

Find Config Path:

Older Systems:

find / -name gconv-modules

Newer systems:

find / -name gconv-modules-extra.conf

Edit Config:

Older Systems:

sudo nano /usr/lib/x86_64-linux-gnu/gconv/gconv-modules

Newer systems:

sudo nano /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf

PageDown 50x, Comment out offending modules:

#alias         ISO2022CNEXT//          ISO-2022-CN-EXT//
#module        ISO-2022-CN-EXT//       INTERNAL                ISO-2022-CN-EXT 1
#module        INTERNAL                ISO-2022-CN-EXT//       ISO-2022-CN-EXT 1

ReGenerate Config

sudo iconvconfig

Sources

@arianDGI
Copy link

Wait so you managed to fix this?

@bayareawebpro
Copy link
Author

@arianDGI You can mitigate by either disabling the offending modules, OR upgrade the packages to install a newer patched version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment